Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb8f4f37-fecd-4bc6-8edc-80be9f2fbeda.roa
File: cb8f4f37-fecd-4bc6-8edc-80be9f2fbeda.roa (raw, json)
Hash identifier: hGX/l5ttm2CBjkRhKe5WoEeea7RSM/fN9RWfCAr2sKA=
Subject key identifier: EB:6B:4B:59:62:D0:D9:F3:93:36:F7:8A:8D:A8:BC:61:5F:08:4C:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A53C9C1F744A44A216D8A4C0B8D15239697795F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb8f4f37-fecd-4bc6-8edc-80be9f2fbeda.roa
Signing time: Mon 01 Sep 2025 20:51:09 +0000
ROA not before: Mon 01 Sep 2025 20:51:09 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:53:c9:c1:f7:44:a4:4a:21:6d:8a:4c:0b:8d:15:23:96:97:79:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:51:09 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=9b5b34b3f57abe887db3e464e24448ecb6af4f1cd80198579d7572e2e43a28a2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:88:f8:1b:1a:f0:99:0d:78:7e:62:52:ae:
e9:8e:d3:02:47:b7:66:66:8e:d3:2e:d4:89:4a:64:
f8:eb:3a:a7:2a:ec:59:62:77:60:6d:6f:ef:69:c8:
eb:fe:03:85:d5:d0:b1:a7:e8:77:39:8a:29:8e:76:
05:89:b1:74:ce:2d:0d:d9:16:a9:bf:3a:c3:7a:ae:
e4:f1:e8:d6:1e:0c:02:42:55:d2:47:a7:76:d7:c4:
ee:69:3b:d9:8b:15:6c:e5:49:37:42:d3:a3:d9:da:
fa:49:16:75:ae:53:38:df:d8:ef:cf:d4:5f:d2:e0:
45:bc:96:a8:1d:fe:31:69:53:1c:32:d3:5d:45:6a:
75:5e:ec:ae:22:7c:2e:50:54:9e:3b:ef:6f:9a:76:
af:b5:83:c4:17:f8:32:3b:9f:a5:a2:2c:ab:67:f0:
cb:26:5f:5a:c8:41:d5:a0:90:fa:29:ad:7e:1e:c5:
91:a0:c4:94:f0:73:29:41:af:72:2d:6f:ed:b6:bc:
98:3e:f1:d4:0b:ed:fa:04:2a:98:3b:a9:e7:6b:a8:
f3:aa:f7:94:5b:27:4e:96:b8:8f:d7:8c:9e:a6:97:
37:3f:36:c5:b2:6e:eb:52:23:b6:8d:8a:e9:8f:50:
3d:7f:6a:4e:f6:19:68:a2:5f:4d:df:be:79:f0:76:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:4B:59:62:D0:D9:F3:93:36:F7:8A:8D:A8:BC:61:5F:08:4C:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cb8f4f37-fecd-4bc6-8edc-80be9f2fbeda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:c000::/40
Signature Algorithm: sha256WithRSAEncryption
5b:09:25:55:e4:08:07:42:0e:bb:6c:06:ca:72:5e:0c:d1:fb:
43:aa:ab:b8:6d:6f:f6:b2:3b:c0:74:10:e3:7b:a3:14:1d:fd:
4e:17:c5:14:66:4a:ba:2f:0d:f2:91:77:ce:1b:be:c7:3d:cf:
a3:da:89:49:f4:28:e9:91:45:68:69:ee:2b:38:5b:40:15:4a:
fb:12:f5:0c:69:ce:64:45:97:b3:67:3c:99:68:0c:a6:d4:0f:
05:18:8e:3b:b4:47:c2:24:b1:a9:68:e5:36:71:7f:00:f8:b1:
65:6d:59:c8:71:0d:1c:0f:ce:97:6b:09:79:c8:d6:91:cf:5c:
86:2c:22:21:82:6a:74:f3:ae:b2:8a:22:5f:77:59:28:12:6f:
38:96:bb:77:ed:13:1f:02:42:bc:d6:ce:0b:1c:2d:3e:6a:83:
c8:35:1f:fb:e9:f1:29:7d:28:58:dd:09:3e:16:9c:1b:e2:4d:
56:53:25:6a:e1:c2:d7:c0:5b:b9:e2:de:17:2c:10:e3:78:03:
0c:38:c1:54:65:44:55:dc:11:b9:cf:1d:61:2d:b5:52:74:50:
ce:32:33:45:e8:42:37:f9:2c:c2:c2:54:b9:76:09:ca:9c:91:
a4:a7:83:4c:9f:3b:e6:98:37:e0:97:3a:3b:3a:39:72:ef:95:
82:11:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:09 2025 by rpki-client