Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
File: d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa (raw, json)
Hash identifier: Bclx/dByEjYFptANQFXoJUCX0IQfYL8xOOgvmB7nkI8=
Subject key identifier: 3C:AA:B4:8F:B0:AC:04:53:9A:27:F5:0B:41:C1:30:98:DE:27:85:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5981B5A69CDA12B0694E4C1E9EC3856DC9697A34
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
Signing time: Mon 01 Sep 2025 21:10:31 +0000
ROA not before: Mon 01 Sep 2025 21:10:31 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:81:b5:a6:9c:da:12:b0:69:4e:4c:1e:9e:c3:85:6d:c9:69:7a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:10:31 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=914f276eb316a2ae1b02ddb0f97a353b4fbb35c71877813b0aa0b0da4bda5805, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:95:bc:73:a8:e0:42:da:89:b5:c4:2a:70:
1a:a3:31:f7:45:9f:2c:96:98:c5:f7:05:b2:38:f2:
f6:60:48:61:6d:b9:e4:b8:8e:ec:05:30:1c:d7:a6:
76:77:45:f0:ba:4f:d7:dd:97:ad:98:f5:f3:41:a5:
53:0e:a0:3a:19:48:67:46:de:87:d7:f5:05:e9:52:
30:94:d0:56:cd:e3:ad:a5:28:b4:d5:6e:7b:e9:f9:
cb:6d:e6:29:52:16:33:81:22:41:f9:40:83:85:f5:
0d:ff:fe:9c:a5:aa:50:bf:e3:8a:c8:08:3c:72:76:
8f:f0:5c:ab:e5:99:d8:fa:dd:1e:a5:cd:d2:12:14:
1f:d1:82:e7:96:db:8b:72:de:c3:37:45:fa:61:a2:
6b:26:04:40:75:60:60:6a:af:13:e6:58:4d:89:29:
32:02:84:d6:16:1b:64:f2:74:1f:8f:ed:1e:ad:36:
cb:9b:2b:6e:12:d2:d2:f9:eb:2e:c8:81:e2:85:05:
44:ce:73:a9:7f:f0:8e:b9:b5:79:6d:7c:f7:9a:69:
3e:33:68:7d:7c:aa:17:91:73:c1:69:06:8e:93:9f:
33:77:e7:d6:98:3a:71:9d:39:fc:e7:b8:f0:e4:c9:
d4:12:0f:b4:6a:1f:59:23:f5:ec:9d:9f:39:4a:41:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AA:B4:8F:B0:AC:04:53:9A:27:F5:0B:41:C1:30:98:DE:27:85:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3ac8a0a-8d06-40de-a292-cb824b7c48b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:400::/38
Signature Algorithm: sha256WithRSAEncryption
03:90:8b:33:4e:2b:16:51:2f:04:b9:f8:64:34:74:7b:a8:18:
12:d5:4a:65:bb:e0:1c:e1:5d:a5:ee:13:c4:5c:1b:a6:96:26:
cb:fe:27:79:5a:d8:e8:44:7b:87:15:29:49:d2:9f:66:e1:94:
f2:75:04:26:c6:09:85:26:19:b4:71:25:46:d0:4c:ab:f3:af:
8a:00:27:36:c4:51:4e:98:f2:ac:71:50:b5:e3:63:7a:e9:89:
ea:1b:6b:13:a6:12:7e:95:fa:7a:e5:ef:f8:80:e4:78:1c:c3:
5b:68:d5:ff:83:b8:2a:de:0e:6b:f9:1b:59:e9:d0:3d:a8:c6:
79:0d:d2:77:b9:72:7e:8c:bb:f6:d9:fa:eb:7a:df:5c:fe:32:
d2:df:e0:5a:f5:10:1a:9a:46:c5:cc:b9:ec:75:3f:63:1d:25:
28:ef:89:6e:0b:dd:e5:f9:a8:77:91:6f:78:17:d6:e8:9f:3a:
77:3d:1f:44:a6:59:76:dc:38:97:24:dc:f0:08:12:a9:3d:eb:
ca:de:de:be:d3:98:8e:8f:76:42:ab:30:75:14:2f:e3:0b:53:
4e:fa:62:84:37:20:62:23:6b:66:70:06:d7:3a:b1:89:e9:e9:
ef:6d:41:1d:5f:dd:9c:3a:8a:95:e3:4f:f7:87:87:c2:76:e9:
71:87:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:15 2025 by rpki-client