Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
File: c575b6fa-c023-458f-85c8-9694aa053e43.roa (raw, json)
Hash identifier: QDsZP3MEzyqVZrRfQuyuCSlH3vFeDj7eQdQJBZtaIy8=
Subject key identifier: 53:A0:CC:78:D0:95:A2:77:DF:70:B9:5E:83:39:F6:67:80:BD:16:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46075B95CE1E343F0F13F5574BBD60141044976A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
Signing time: Mon 01 Sep 2025 20:01:27 +0000
ROA not before: Mon 01 Sep 2025 20:01:27 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:07:5b:95:ce:1e:34:3f:0f:13:f5:57:4b:bd:60:14:10:44:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:01:27 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=a3f9a24394bf3294243122b403717047977bf7c5f5574001a9fd03cb62adc2cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:6d:09:5c:e5:10:62:fe:34:bc:2e:dc:95:
cc:3c:20:f0:e8:bc:c3:ba:3a:5b:83:84:79:52:8d:
da:33:9b:b9:e4:0a:31:b8:a8:ba:c1:f9:52:c1:aa:
12:ff:ac:d3:b1:c0:dd:84:ca:03:d6:3e:f0:75:d2:
dc:89:65:48:37:df:45:d9:8f:b0:94:fc:ce:52:9b:
97:2c:5d:97:9b:32:f4:ea:88:e0:21:27:99:af:34:
87:c1:fb:f0:da:b5:6b:05:70:91:04:41:60:d9:5c:
45:b6:dd:fa:62:3c:91:d1:e2:50:69:a5:39:2a:4a:
df:c6:85:34:1c:81:62:6c:a0:01:cf:a8:0e:0e:61:
c9:75:c0:ff:95:09:06:9d:5a:ab:56:f6:38:88:91:
2f:14:98:26:ad:f3:b0:91:99:0b:3f:c3:b3:2f:be:
c8:89:06:64:04:b1:9e:8a:ae:3f:bf:f0:e2:e1:e2:
02:52:5a:a3:28:0c:33:e1:de:43:9e:bb:a2:42:1f:
97:2a:c2:7e:35:61:d0:1e:a1:8d:06:11:02:01:b0:
9c:be:c2:20:36:9e:22:03:01:2f:bc:e5:10:dd:fc:
56:f3:50:b0:7d:fa:1b:a3:9c:d0:09:87:81:f9:de:
22:13:25:7f:c3:03:ae:0c:3e:9c:c1:98:cf:0f:9b:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:CC:78:D0:95:A2:77:DF:70:B9:5E:83:39:F6:67:80:BD:16:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c575b6fa-c023-458f-85c8-9694aa053e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4080::/48
Signature Algorithm: sha256WithRSAEncryption
6b:00:97:fc:ad:7c:75:49:a6:ff:68:bb:55:84:3e:70:cc:89:
3a:c2:67:29:95:9a:84:f7:74:64:2d:ec:2f:67:69:e7:f4:99:
6e:ab:ed:63:92:86:59:d8:de:fd:0f:9f:ba:b3:43:85:51:a9:
5b:c7:3b:73:e0:c4:59:21:b1:ed:16:77:eb:fc:26:73:72:50:
1b:97:07:c6:2c:fd:6c:82:61:8c:cb:76:11:43:0b:56:4b:64:
61:96:90:c5:89:3a:df:42:03:3f:53:ad:19:ce:04:29:60:97:
d8:f0:39:8e:41:5a:59:56:6c:be:e7:bb:67:83:72:87:62:85:
db:41:e8:fd:e7:64:dc:56:11:c7:da:bf:0d:fe:b6:f1:c4:52:
ae:3d:4d:e9:ad:2f:17:30:0c:c2:ce:a0:f3:fc:53:aa:40:31:
cf:9f:13:92:2c:eb:79:b0:a3:e7:61:81:e9:87:3f:a0:f7:46:
ab:45:06:35:17:51:f3:04:e7:39:fa:d5:7a:51:ec:de:ba:56:
8c:c8:06:e8:b7:47:a6:6b:85:70:f8:44:d7:0b:6f:77:25:92:
a0:72:9f:7f:46:58:ec:9d:c1:69:c6:dd:6c:d0:be:9c:12:79:
ef:6c:8b:11:ad:aa:2d:fd:0a:38:39:f9:eb:e3:1b:48:79:41:
00:65:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:43 2025 by rpki-client