Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
File: c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa (raw, json)
Hash identifier: 8oJ+PMbQjd6/rNthbwH9HtVxbvabXejCvt5WLROyjB4=
Subject key identifier: 43:9F:E8:5E:5B:73:52:BC:50:8C:1F:7C:EB:3B:D7:90:CC:CB:65:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 282B4235AF8F2074202FDFC6677DE498C58B03CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
Signing time: Mon 01 Sep 2025 20:01:42 +0000
ROA not before: Mon 01 Sep 2025 20:01:42 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2b:42:35:af:8f:20:74:20:2f:df:c6:67:7d:e4:98:c5:8b:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:01:42 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=1ba7636f101a3a3e7e121db62ad84c536adbab6c99537d9712436adf7452cf94, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:ca:47:13:82:52:9a:69:60:b3:67:71:7d:
75:4a:3d:13:fc:c0:cd:a4:4e:ba:e4:e7:38:86:fd:
9a:c9:51:3a:23:73:03:b8:09:c5:62:f9:8c:26:73:
3c:26:03:00:85:87:cb:99:bd:12:86:0a:86:93:24:
ef:2a:a6:af:ca:c7:3a:17:18:50:dd:90:63:f4:5e:
0e:ac:62:00:67:7d:c8:d9:c0:b7:c9:6a:6d:b4:63:
32:d4:18:fe:11:bc:60:29:88:b9:34:37:4c:9a:1a:
1d:e1:a0:dd:e2:7c:8c:6a:27:d9:53:e0:fb:03:e2:
65:35:b0:59:44:59:4d:b6:82:72:80:52:b9:c1:d3:
c5:2f:73:d7:8c:eb:b8:b5:b8:c1:27:b1:c5:52:9d:
2b:dc:64:5b:41:cf:9d:b0:ef:da:e7:ba:21:b5:b9:
48:0c:5c:3e:b3:c0:c5:73:71:bf:e9:37:6c:38:c3:
08:1c:33:35:08:42:81:48:64:5c:f2:1c:4b:ff:29:
76:54:2d:ff:36:74:9e:00:eb:8a:2d:e7:e2:ea:db:
8b:db:b2:b3:2a:7f:0e:a9:40:21:f8:fd:38:ed:dd:
2e:8c:39:b3:ba:a2:29:9c:0c:b9:63:a2:c6:b6:4a:
94:ce:3b:78:e9:ce:4b:07:4a:6c:6e:68:2c:0e:4e:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:E8:5E:5B:73:52:BC:50:8C:1F:7C:EB:3B:D7:90:CC:CB:65:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d7:43:31:00:4f:4b:d8:26:0c:60:10:f9:d9:e5:a2:cd:56:
1c:60:7f:db:5e:c6:c7:04:ef:08:55:64:68:df:ea:cd:65:6c:
3f:71:98:0a:37:62:6f:5d:f4:c5:73:5a:f1:ca:1f:c7:96:7b:
eb:98:b8:0b:d8:6b:87:0b:4a:40:46:04:dd:2f:17:ea:1e:72:
42:18:d0:92:a9:fa:16:2d:fc:78:51:69:bd:5c:e9:76:6f:c9:
70:15:be:75:82:a7:33:86:e2:cc:9c:d8:dd:c6:6e:2e:24:d8:
9e:0f:0b:d3:08:6d:21:a0:1a:4f:6c:52:0f:43:2a:a6:ad:23:
22:9f:1d:0b:f5:da:0d:0d:0b:2a:2e:08:63:97:56:87:b7:47:
7a:04:3c:d7:1c:56:8a:39:70:60:07:8f:8b:cf:a9:c0:88:d9:
0b:f6:53:a6:b4:b4:2a:d3:fe:1c:be:23:e4:2d:50:97:fa:88:
d5:50:5c:65:69:4f:a6:bf:de:81:0b:99:c3:be:bf:50:cc:9b:
05:84:41:0c:2a:2e:4c:44:28:48:be:5f:3f:36:f2:79:d3:67:
9d:de:96:64:d1:60:2f:15:a5:cc:ff:10:54:08:58:34:56:e4:
27:41:19:81:90:1b:3e:f9:86:1d:71:29:5a:66:96:ce:b4:51:
08:6d:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:17:10 2025 by rpki-client