Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
File: dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa (raw, json)
Hash identifier: axA4NE3xr6QsaNCIA1g5qvE8aVBTb+SAMf6CzaTOIwo=
Subject key identifier: D8:34:64:29:A8:F2:2D:6A:1B:65:9E:E1:77:D7:8D:DC:68:38:B9:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5774FA8864EDEB6F929F74A7ED855B37A8454428
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
Signing time: Mon 01 Sep 2025 20:20:57 +0000
ROA not before: Mon 01 Sep 2025 20:20:57 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:74:fa:88:64:ed:eb:6f:92:9f:74:a7:ed:85:5b:37:a8:45:44:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:20:57 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=286bd51eb86e2c300034f609c6e04baaddea28653d7eb81bb2e438c4141aedd9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:a8:a0:d6:a1:01:af:30:25:04:a6:18:1f:
71:e4:54:b5:a6:04:cd:e6:83:86:8d:e6:71:6b:8d:
35:68:1e:92:6f:5a:60:de:c6:ce:d0:62:1d:5f:e9:
5a:1a:56:f7:45:e6:52:0d:d1:8a:d7:0c:b6:ba:0c:
6b:b6:47:e6:c8:aa:12:61:09:2f:d7:d4:31:f0:eb:
16:b3:6a:82:e7:df:09:37:21:67:06:45:32:1a:68:
68:f1:a3:4d:52:3d:0d:10:43:97:60:37:9c:d2:4f:
74:08:ad:d9:94:97:f5:10:23:f4:e5:3b:e6:07:8e:
1f:87:e9:6c:4b:20:c1:7c:5c:ce:e0:ee:70:31:6a:
1f:d6:23:b9:44:0d:3e:81:73:50:44:60:70:b3:45:
ed:15:a3:ab:53:df:de:3d:12:f4:d7:02:79:7e:08:
23:f0:a0:e2:e8:bd:d2:19:e0:78:04:e5:54:b0:75:
45:c0:42:e6:a0:7f:aa:a3:86:1d:6f:2b:da:1f:61:
ea:16:89:ff:4f:48:57:ac:21:73:5b:bf:01:10:5a:
45:74:37:ee:5c:59:0a:20:76:09:da:7e:fe:65:73:
47:5c:e2:77:46:a3:ef:77:ed:78:14:20:5c:4b:2c:
ec:54:31:8e:4e:18:f4:2b:2c:ff:e9:16:95:e1:6c:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:34:64:29:A8:F2:2D:6A:1B:65:9E:E1:77:D7:8D:DC:68:38:B9:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9040::/48
Signature Algorithm: sha256WithRSAEncryption
71:7b:c8:3a:10:f3:8a:c5:ab:77:a7:88:e5:8a:82:be:9a:d1:
90:a7:a8:f1:4b:74:58:87:fa:a3:2d:0f:5b:56:20:8a:ff:ba:
9c:c7:4f:b6:bd:d0:21:90:24:2a:28:c7:17:41:b7:7b:a5:b0:
55:57:f2:90:48:5a:59:6a:61:9e:32:b1:a4:4c:7c:b8:25:18:
34:e7:88:d3:3e:74:6a:3c:18:36:c2:21:6c:ef:b2:74:f8:d5:
b4:13:82:ff:22:ff:a3:c4:51:db:7a:a3:8e:8c:c5:d6:61:41:
b9:69:bc:0a:c9:09:2b:4d:79:29:08:ef:5f:ca:27:ba:5a:66:
b0:f5:cb:db:2c:ae:81:4d:cc:a5:e7:79:11:a8:83:a5:50:c9:
e8:dc:60:12:ca:06:be:4a:26:5b:b6:be:79:1c:25:f1:86:65:
b1:14:4b:c4:af:48:23:b9:b7:b4:b5:96:f0:11:42:b7:8f:e1:
54:a2:fd:6b:71:a8:0c:3a:1d:7f:8e:77:9a:e1:ce:14:c4:e5:
07:45:c4:20:70:2e:b3:6c:56:0b:7c:f1:23:f3:0b:6e:52:f0:
3a:b4:d7:37:16:e6:25:f1:74:3a:df:74:b9:64:0a:1a:e7:83:
2f:98:21:28:51:d3:cd:73:43:a1:81:0f:c6:c7:3e:c0:95:7b:
25:15:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:06 2025 by rpki-client