Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa
File: de6578a7-816f-468a-acf9-83781a3b3769.roa (raw, json)
Hash identifier: lttDPTC/eA7a3QyhktdeHgma6GvBvUx4nBbX/Q21mdc=
Subject key identifier: 23:EB:94:91:E7:EF:4F:A2:A0:BB:C8:B5:01:82:00:86:C8:67:9F:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 054520980354CA6B6F2EDBE0A620E7E50FF6E15F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa
Signing time: Tue 21 Oct 2025 14:40:02 +0000
ROA not before: Tue 21 Oct 2025 14:40:02 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:45:20:98:03:54:ca:6b:6f:2e:db:e0:a6:20:e7:e5:0f:f6:e1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 14:40:02 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=93ab21699ffcd69d5f0b73cbd32adba24d6b3e49824c762d5b7ecbf3f467ce13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:97:45:23:f1:35:bb:3b:a7:a8:90:52:6e:
f1:43:36:6f:ca:f5:f8:40:b5:7b:34:73:81:73:bf:
5f:98:f1:c7:5c:0a:5f:17:91:2d:c2:e6:34:65:8e:
e0:a1:c7:a0:3d:e1:8c:63:af:18:db:05:0b:ba:18:
55:12:6c:72:04:67:8c:ed:14:c9:74:82:57:cc:a2:
44:17:1c:79:1c:3d:1d:75:86:ec:d0:98:2d:82:2a:
15:09:88:93:26:df:36:a8:fe:8b:0e:b0:a6:c9:76:
fb:51:6f:b9:ec:89:c5:51:e2:af:fa:94:58:78:67:
b2:7d:7e:9a:bf:4d:ae:0c:3f:b0:98:19:ca:aa:09:
81:70:87:5f:c4:86:89:36:94:bb:39:2a:ab:c4:6d:
b2:ee:cb:92:78:7d:9e:2b:5e:b4:e2:ff:76:82:ce:
b7:67:19:a4:21:14:38:ea:3c:05:a8:ca:c4:25:4a:
e4:f5:dc:89:e4:ed:49:1f:52:da:06:f5:e8:35:2a:
9e:c8:45:55:9f:a4:84:7b:da:2c:b3:54:ed:71:78:
e7:f7:7b:9d:67:1e:d0:95:ea:33:10:b1:5f:a9:59:
04:46:fd:c7:13:57:70:a9:b4:d8:9c:3e:7e:bb:1d:
71:30:ed:7a:86:ad:65:47:2d:e2:db:55:f1:fb:73:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:94:91:E7:EF:4F:A2:A0:BB:C8:B5:01:82:00:86:C8:67:9F:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de6578a7-816f-468a-acf9-83781a3b3769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:8000::/40
Signature Algorithm: sha256WithRSAEncryption
be:7d:49:74:fb:e3:24:00:11:40:5c:b9:c6:a0:b9:b4:69:91:
e2:60:85:db:77:73:60:c1:87:04:9a:40:86:b3:d4:ff:44:0d:
60:56:1a:82:82:bc:61:c1:90:74:ef:f7:e7:93:89:a9:f6:e6:
1f:26:31:d6:2b:a2:79:ae:6f:9c:ff:cc:21:1e:98:65:03:31:
29:30:95:32:3b:ab:c5:29:4f:f3:41:7e:94:5b:32:b8:c5:a5:
8a:45:50:16:33:18:8a:e6:ee:66:33:43:b6:51:cc:19:20:26:
36:35:e8:91:cf:d9:50:2a:42:96:a6:fc:a5:74:85:b4:0d:a8:
37:7f:f9:54:dc:6b:2f:e7:72:53:dc:94:23:7d:fd:7b:67:66:
16:81:42:44:76:01:10:c4:03:26:7b:de:1f:ef:54:0c:d6:6b:
39:57:b8:70:e3:2f:21:27:6e:8f:5b:0f:6d:8e:17:33:05:55:
cd:11:7a:09:45:a6:4d:b3:e3:d6:73:09:51:12:a7:a7:0f:33:
07:a8:3c:92:65:4a:2c:06:37:7f:76:5b:a9:f5:f2:1a:72:df:
18:1d:75:7b:05:46:8f:72:8a:1a:5c:24:a9:1c:8e:93:ca:3b:
78:0d:01:65:9a:70:b1:aa:90:16:3f:bd:7a:83:e9:64:19:c9:
bd:4c:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:18 2025 by rpki-client