Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
File: ddbb8798-3423-4d98-a384-58621b010556.roa (raw, json)
Hash identifier: 4WxhLJijXeVuoSOzweoe2rwh0vAlFzLeX4ktiGAEDT4=
Subject key identifier: 90:B5:16:75:9C:12:A7:08:4F:39:93:4B:2A:2D:01:F3:AC:11:81:35
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34C50C2A44A192893A07B9707CA1BA31191BAB62
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
Signing time: Mon 01 Sep 2025 21:11:07 +0000
ROA not before: Mon 01 Sep 2025 21:11:07 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c5:0c:2a:44:a1:92:89:3a:07:b9:70:7c:a1:ba:31:19:1b:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:11:07 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=ac33627c24895af522bac724b8f5bd14bc34f5ce8018378bc045bf708a19ab92, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:0d:db:2d:32:75:05:8d:45:1c:c1:1b:40:
35:ff:d5:09:24:8e:2f:5f:fe:c7:94:d4:e4:58:5c:
ea:85:d0:55:37:d9:32:e1:a7:64:99:2f:a7:61:7d:
0f:2c:6f:73:be:d3:e0:7d:71:1f:6b:71:8a:39:4e:
99:7f:95:83:f6:a8:0c:34:f1:58:18:d4:9c:2d:13:
30:99:0c:c5:98:34:d1:bd:8b:f3:25:98:8d:42:6d:
ea:7e:e2:5b:48:22:d0:40:99:e6:14:ac:57:e0:21:
48:61:5f:4b:cd:1c:9b:91:89:14:42:e4:74:3c:88:
d2:e6:32:cc:c1:7a:8d:91:21:9e:64:b7:79:18:5f:
3c:01:8c:ba:73:02:7e:20:d9:ac:5e:8c:60:3d:26:
eb:c4:b1:bc:a0:20:72:35:01:e5:bf:ca:9d:16:dd:
a3:b5:cf:83:b6:0f:c1:d4:48:dd:fd:f0:57:44:1b:
0a:df:cf:b5:f5:46:47:a9:d0:53:28:0d:67:36:6d:
ed:b4:e0:22:c3:d9:cc:2a:8f:08:4a:16:4b:af:00:
37:c5:7f:69:94:0c:da:d4:b3:ce:b0:64:ca:e3:37:
cc:44:85:27:c9:85:79:34:ee:da:c9:93:4e:6e:7c:
8d:b7:db:a1:7a:89:85:ca:45:ac:81:5a:0e:c8:2e:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B5:16:75:9C:12:A7:08:4F:39:93:4B:2A:2D:01:F3:AC:11:81:35
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddbb8798-3423-4d98-a384-58621b010556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:c00::/38
Signature Algorithm: sha256WithRSAEncryption
c6:db:3d:ab:1d:23:d2:6f:a9:7e:b8:34:c3:19:d3:79:3e:de:
84:8f:fe:04:ca:53:32:94:7e:3a:a0:0c:10:5b:ee:13:b9:77:
b5:ce:91:85:2f:df:9f:c3:22:d7:56:05:0c:a9:41:29:3b:be:
0d:d3:59:a1:9e:5b:ec:11:c8:94:e5:67:84:ea:16:54:31:fb:
69:b2:c9:94:65:48:df:84:7a:bd:01:0f:8c:03:b9:1a:95:11:
1a:34:1f:7e:ae:52:45:b4:b8:58:cf:98:48:06:91:c1:92:21:
85:2d:4d:48:55:62:ef:de:8a:9d:b4:16:e7:6a:a4:23:0f:0b:
bf:da:2b:06:d9:23:70:01:ec:f3:2e:86:30:92:63:8f:e1:c5:
2b:c6:d2:97:ac:75:68:31:97:6c:5f:45:62:11:b4:ce:3a:41:
bc:a2:dd:10:c9:ea:6d:2f:8d:4d:5c:f4:31:12:c2:54:4e:ba:
33:2c:80:09:73:9d:2b:a2:b9:af:80:70:0a:19:53:52:8e:2c:
00:1b:43:bb:d6:00:4d:02:a3:53:8f:08:bf:2c:17:41:22:6a:
3c:e4:ed:e7:a8:15:ab:98:f6:fc:d0:0b:a6:54:ea:94:17:05:
8b:69:77:97:c0:32:c4:69:e7:93:f9:59:b8:ac:8c:d9:05:f7:
91:58:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:14:45 2025 by rpki-client