Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
File: d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa (raw, json)
Hash identifier: uqpYHk981zKEv5Z9TDjEZtp7NQnO7k1WiPmAOdes2zg=
Subject key identifier: 29:97:71:7E:A6:F3:7A:AD:98:72:B8:F4:F6:EF:C9:54:0D:42:BF:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3EDE1CC00B205649118505F7713F6597EB6AAFC8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
Signing time: Mon 01 Sep 2025 20:51:05 +0000
ROA not before: Mon 01 Sep 2025 20:51:05 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:de:1c:c0:0b:20:56:49:11:85:05:f7:71:3f:65:97:eb:6a:af:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:51:05 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=1b920edece28f75fb01bfe6895c4db5bea4bc44ee210a5153e0e0f73d231196e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:5f:73:a1:95:1e:57:96:12:62:89:0c:d8:
26:ee:2a:9e:f2:78:d7:cd:46:14:24:a6:16:e1:53:
28:56:cf:58:43:10:57:b0:2e:2c:cb:48:b9:6b:04:
49:1b:b6:07:d7:98:84:e3:63:6f:a3:d8:25:be:b8:
94:74:0a:e9:1d:75:f7:06:1d:b3:eb:95:1d:ee:49:
e4:d0:d1:8c:b1:76:a4:d5:f7:56:1f:f3:11:f1:7c:
fd:24:b3:a8:67:60:ac:7c:e4:c7:c1:b2:da:54:69:
5c:b7:ba:cd:9b:d6:a3:fc:72:d1:d2:a0:26:c2:40:
c7:28:9d:ae:ce:3b:aa:c5:c5:d0:b0:de:38:89:46:
b2:23:5b:9a:53:d8:43:a7:5f:0e:bc:95:05:05:9f:
92:6c:86:15:15:c2:19:8f:93:be:60:09:e1:43:42:
4e:f2:28:57:8b:b0:22:0d:e7:e1:a0:e7:37:80:4b:
2d:1d:f1:15:ac:38:76:06:ef:e9:98:c1:66:c9:39:
62:a8:57:fb:24:2b:79:5c:2b:8a:6c:46:d7:de:51:
34:dc:e3:ff:ce:a8:d5:93:9f:79:33:6b:53:41:af:
db:9b:56:de:78:79:f2:46:57:3b:67:0b:01:65:7f:
e5:48:a6:4c:8d:82:47:9a:d0:cf:3b:14:56:52:bd:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:97:71:7E:A6:F3:7A:AD:98:72:B8:F4:F6:EF:C9:54:0D:42:BF:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d385ff4b-7f8e-45d2-8f8b-fcde1426a050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:1000::/40
Signature Algorithm: sha256WithRSAEncryption
88:77:fa:c5:01:71:ab:3a:95:45:06:b3:01:4f:42:ba:16:d7:
8b:63:89:e9:d7:d0:d3:92:1e:5e:3d:3f:60:48:c2:96:0d:2c:
7d:ee:89:1e:fa:4d:98:97:94:34:86:52:f4:89:cc:9a:77:f3:
b6:ac:30:8c:95:da:29:27:72:dd:37:0c:75:61:3f:c8:cf:3e:
26:ce:1f:30:65:0f:66:01:0f:81:21:15:be:fe:84:d8:ae:b8:
12:c1:48:cd:5a:36:18:ac:80:45:48:32:bc:d8:16:00:b1:68:
82:6d:a2:5a:20:bd:e2:b6:ba:3e:ab:98:6f:75:3d:86:7b:6f:
66:f7:3c:f2:85:84:d1:f3:16:94:0b:6a:68:04:38:d2:d2:25:
72:1b:eb:94:59:e7:b2:69:33:a1:75:04:8e:08:ce:43:40:17:
c9:33:93:ed:6c:ac:7e:57:d6:e0:f1:6d:71:c8:e7:75:75:3c:
03:68:f5:f9:b5:80:f3:38:07:9b:64:1c:10:ca:6a:2e:00:6d:
20:31:70:25:08:43:60:77:37:02:ec:05:94:db:e9:a2:f7:ad:
1f:2a:04:36:f3:7c:3b:cb:d7:0c:c1:6b:35:2c:89:ec:09:e8:
94:1a:6d:b6:50:67:bb:43:c1:0f:cb:17:2b:33:82:dc:f1:d8:
86:1e:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:23 2025 by rpki-client