Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
File: d5fc0fee-af50-4f94-a822-c9f3238359cf.roa (raw, json)
Hash identifier: cPRsWcYzw5YpqNcRGvLvGy3gDXb3jwVkMZ8VbUpwWxI=
Subject key identifier: DA:C4:04:1D:58:E6:F2:57:61:5A:B4:26:D5:3B:3E:C7:97:2D:59:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A003CAF55E26873BBECF1403D503EC1FC240C51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
Signing time: Fri 15 Aug 2025 15:51:02 +0000
ROA not before: Fri 15 Aug 2025 15:51:02 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:00:3c:af:55:e2:68:73:bb:ec:f1:40:3d:50:3e:c1:fc:24:0c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:51:02 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=e85838c2e0d150b059b96f139063e5cb8caee392f9ad1f1dde42f07a898f5647, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:90:ab:71:90:0a:93:8b:e0:45:12:3e:01:
d5:c4:48:84:0c:7a:15:86:06:42:4d:a1:5d:f8:d5:
09:54:57:1c:d1:9b:b0:4b:b5:fa:ab:a7:df:83:d7:
fa:89:b4:cc:89:94:c8:4b:1c:eb:85:57:e2:3c:9c:
0d:bd:af:95:12:8c:d1:6f:61:90:4f:b3:ee:c8:82:
62:28:fa:93:b6:0a:16:75:6c:04:4f:0f:a2:dd:f2:
e8:70:75:c1:34:9c:19:e2:c9:00:a8:55:b5:7f:b2:
3e:e5:bf:9d:21:c7:ec:1b:4c:a3:1d:d4:2f:f3:68:
71:ac:90:9c:c0:c4:75:dc:db:09:fe:6e:41:44:d8:
98:f9:7b:ff:80:93:4a:40:61:3e:ed:02:d6:c6:5c:
f4:56:65:cc:37:bd:4b:83:88:75:93:b1:58:d6:cb:
39:76:26:6c:cc:bc:ad:24:dc:f9:2a:69:b4:f1:9d:
4d:0b:3f:9e:0f:37:86:f5:e1:bb:bb:9b:f5:c0:13:
f7:72:02:b3:77:63:86:4e:d7:16:ff:9b:88:b1:77:
c6:3a:ab:14:8a:df:c3:6b:ae:62:66:f7:91:73:1b:
c4:71:9d:e6:69:1b:01:02:00:e0:ca:7e:6a:fe:9e:
1e:13:55:9b:ca:33:76:cb:a8:8d:92:10:83:2c:4f:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C4:04:1D:58:E6:F2:57:61:5A:B4:26:D5:3B:3E:C7:97:2D:59:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d5fc0fee-af50-4f94-a822-c9f3238359cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:2000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:b5:ab:4f:ff:3b:05:e3:35:73:ae:b9:6c:33:73:71:6a:ed:
d9:ea:0f:39:bd:64:7a:fa:5f:06:e6:ea:6c:fb:dc:fa:50:24:
04:4a:95:93:ec:4a:c6:a7:49:72:33:8f:18:8c:28:2d:e4:e2:
bc:09:2e:a7:62:43:6e:63:ac:9b:72:e9:1c:e8:a3:1e:3a:a0:
45:f3:fc:d7:70:7e:c0:d9:fb:d8:9f:a2:01:a7:4c:eb:99:9a:
80:15:df:c4:0b:10:2e:80:b0:8f:72:60:5a:a4:32:1c:bd:61:
a4:5f:ff:88:33:dc:04:7f:97:71:cb:53:12:fd:b3:8a:e0:03:
16:69:ec:0a:98:e1:ff:21:fd:81:b7:49:f8:9b:7c:50:8e:cb:
d0:35:6b:ba:43:bf:50:6f:4a:d1:7d:69:93:aa:77:31:f6:c4:
31:7f:97:9d:e0:49:b0:19:25:1d:2c:83:a1:22:d7:56:ec:b6:
b4:10:e1:09:6d:cd:4f:81:cd:42:70:35:0c:7c:e0:b8:b3:a4:
a1:4e:03:ea:fd:da:77:69:16:e2:1a:05:2e:ac:e2:61:58:e7:
d7:dc:d3:dd:a4:11:77:c4:a6:21:82:89:b5:76:cf:86:80:df:
82:0a:23:55:af:04:b9:56:e8:c2:9f:db:f1:26:56:38:4a:13:
f5:3f:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:33 2025 by rpki-client