Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
File: cdc11efb-9ca2-4459-b55a-43b03e67b183.roa (raw, json)
Hash identifier: 3OEFF++op2d9nOrOb2cjWMuK1jtpiHEi7ap3WeCptv8=
Subject key identifier: FD:5A:38:E3:C5:54:DF:4A:CA:F3:84:9C:26:D0:92:46:19:E9:25:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C8A4AFE92A96B5D629976CD9615A7C55D8D8F58
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
Signing time: Mon 01 Sep 2025 19:30:09 +0000
ROA not before: Mon 01 Sep 2025 19:30:09 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8a:4a:fe:92:a9:6b:5d:62:99:76:cd:96:15:a7:c5:5d:8d:8f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:30:09 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=d727a006f3cffdfe44e83785f1df474c4643ba662d4668ef30a13dbec965ca50, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:ee:aa:79:48:ed:32:1c:be:6f:a8:1c:eb:
53:c7:4c:e0:c9:3f:1e:e4:c7:89:db:70:3d:13:27:
ac:d0:b1:94:58:52:5a:28:64:58:f3:31:04:68:e7:
74:eb:e9:94:7b:25:34:14:4c:47:64:73:02:32:37:
9f:37:31:95:36:0b:4c:95:f3:01:fe:72:3d:2f:e5:
a7:0f:ce:23:5f:8c:1b:f2:4b:ac:74:59:c7:a1:4e:
87:fe:2b:d7:f3:d4:e8:40:d8:c9:0b:29:d6:bd:6d:
a4:cc:27:78:80:1b:0e:fa:b1:43:ef:d9:60:b7:3c:
2b:90:83:c6:72:3b:86:a6:7e:e0:56:3b:bf:8f:4e:
1b:04:e4:ae:08:80:36:45:f1:eb:a6:d4:75:0f:20:
26:c2:fc:18:9a:d1:18:46:b7:dd:e4:33:db:50:0c:
8f:d4:5d:66:7d:fd:a0:bf:3d:61:f5:ae:2d:61:33:
51:a3:27:f7:61:f5:58:54:51:a2:f2:e0:c0:4c:65:
fa:4a:cb:58:68:7d:3d:9f:53:9d:96:3a:b9:5f:9e:
84:cc:fc:3c:7e:cb:8e:4d:bd:d8:31:25:fb:e7:02:
fd:bd:b8:cc:bf:a4:10:e5:a9:1e:ba:1e:f2:a2:65:
08:37:7a:6c:b8:61:c9:e2:e9:9f:43:cc:66:8f:25:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:38:E3:C5:54:DF:4A:CA:F3:84:9C:26:D0:92:46:19:E9:25:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:1f:5d:e2:c0:aa:a1:a2:71:b2:c6:e2:bf:7f:f5:21:90:e8:
72:92:7d:fa:78:14:31:0b:b1:a4:b8:69:d4:c3:d6:f6:6c:c7:
36:6b:8c:a2:4a:c5:dd:9d:e2:23:60:1d:ab:b1:8e:da:08:6a:
3c:5e:c4:cf:41:65:36:60:7b:19:2a:8a:cc:3e:b2:31:e3:cc:
f4:c6:34:53:1e:b5:42:d9:ae:b0:53:18:46:0e:37:65:f2:2d:
bb:8f:38:b0:17:83:d9:a8:c6:ce:df:b2:2b:34:e0:e8:d4:66:
27:1b:aa:04:39:63:29:e6:c7:9f:ad:33:db:bb:22:11:76:9e:
9c:63:fa:22:d2:59:2f:af:14:8d:a0:b4:92:f3:bc:56:bf:30:
41:73:34:a9:07:c8:5f:aa:b5:8b:84:17:f3:db:4e:2e:02:60:
e2:de:22:b7:bb:57:82:8e:21:c2:4d:eb:49:2f:e4:eb:90:18:
a8:73:4c:a4:22:2f:87:d7:be:76:86:28:1f:31:a3:3b:74:f8:
32:9f:a5:6e:db:41:f9:14:2d:ca:dc:1b:9e:91:54:51:3c:3b:
cb:b3:b7:ba:3b:f0:b8:66:96:44:51:1c:69:2e:ca:f5:7f:7d:
3b:18:00:74:f1:16:c3:53:32:d5:e5:e8:9e:08:64:e8:e3:95:
56:56:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:03 2025 by rpki-client