Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa
File: d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa (raw, json)
Hash identifier: 06th281fIbcWod07QILO6/vP24pubZVHJX2BlYYMyFQ=
Subject key identifier: 59:9A:53:0B:26:5E:21:5B:34:26:A6:5A:F0:9A:24:62:9E:7C:28:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 05937B1F51B29950482D8BDF4476960458BB6D4B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa
Signing time: Fri 15 Aug 2025 15:50:59 +0000
ROA not before: Fri 15 Aug 2025 15:50:59 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:93:7b:1f:51:b2:99:50:48:2d:8b:df:44:76:96:04:58:bb:6d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:50:59 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=a728d4a1e4142aecdb1d0d761c8820da326e03dbe316a8a526fac961eeb51fc5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e0:4b:1c:40:52:fb:1b:74:90:9c:b6:6e:04:
a0:0f:2f:1f:01:e9:92:af:13:73:87:f2:28:f6:22:
4d:4b:71:a7:89:c4:db:14:7a:9d:9a:cc:36:f1:d6:
4e:77:ac:3e:84:2c:24:d8:c4:95:b2:d2:be:a7:d3:
dd:10:bc:92:ec:da:1a:48:4f:35:4a:26:7b:87:f6:
1a:b6:c9:77:5e:9e:ea:58:b2:1f:06:54:e4:e3:55:
2d:2f:fc:3f:dc:89:0e:8a:36:18:f3:35:21:0b:d9:
74:1b:e1:ad:76:ab:10:3a:15:d4:e9:ba:43:fb:8f:
8e:b3:f1:74:76:b4:f6:91:4c:bf:4a:84:20:66:8f:
4c:46:3a:7a:59:8d:c9:30:fb:3b:29:73:6e:09:12:
fa:e0:6d:4c:03:fa:9d:2d:86:55:48:95:a0:be:48:
cf:13:27:8c:c5:39:94:2b:cf:63:e5:6e:c4:d3:88:
03:6f:d5:75:e5:52:b6:ad:e7:2d:50:0c:25:5e:4b:
e8:06:10:aa:f4:77:f9:02:f9:68:35:0a:8c:27:ed:
be:e0:9e:57:4d:c7:81:ff:84:22:9f:f7:44:1f:8c:
4c:e4:65:b3:96:f3:23:6c:1d:5a:b1:9e:69:2b:be:
35:5a:02:a2:3b:a5:2a:71:af:ed:3e:a3:bd:28:ea:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:53:0B:26:5E:21:5B:34:26:A6:5A:F0:9A:24:62:9E:7C:28:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c040::/46
Signature Algorithm: sha256WithRSAEncryption
8a:a8:e0:75:76:81:89:d7:e9:ca:84:0e:fe:da:24:4f:20:69:
ce:26:76:a6:5c:47:5f:97:3e:29:62:2b:9b:d6:02:98:cf:81:
50:77:d0:62:59:02:28:25:7a:ec:98:41:09:71:9b:52:c7:08:
1f:b0:c6:04:7c:9b:21:52:2f:f7:33:85:7b:ad:90:17:12:6e:
96:4f:f6:41:51:50:b5:5b:7a:02:1e:92:d1:fe:15:18:9e:10:
89:a0:e0:3c:b8:19:5e:eb:4c:4f:f8:d4:ac:74:78:63:5e:ef:
12:73:aa:5e:f9:61:e0:d2:ee:5d:a0:bd:d2:ac:27:17:bb:30:
c1:34:fd:b5:94:33:ea:4e:34:80:06:68:d9:0a:e8:18:8f:f5:
03:3a:90:57:de:fc:7b:47:e8:8c:21:70:2c:4b:c5:4a:e4:b3:
93:67:2b:79:dc:69:ee:29:d5:ed:94:3a:37:84:8e:6c:eb:66:
ae:dd:d9:75:d7:54:70:94:ff:64:6a:26:57:5e:78:04:71:66:
c1:08:d1:63:b4:11:c6:11:f0:da:9e:80:8c:db:28:b3:5a:99:
30:3b:a3:0d:a5:cc:e7:87:0e:17:c7:06:d0:98:82:0f:07:02:
18:9b:01:14:26:6f:0b:09:45:c0:d7:7a:f7:a0:34:aa:15:df:
38:39:d9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:34 2025 by rpki-client