Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e20afb98-f3fb-45c2-9398-65129b8874f0.roa
File: e20afb98-f3fb-45c2-9398-65129b8874f0.roa (raw, json)
Hash identifier: /HXJo7CtdpBYPp4x/QmkDC/qQJ179kQeBH/6I2SaDHQ=
Subject key identifier: F5:41:4C:E4:77:47:A7:B4:AC:61:CA:90:DF:99:2F:E8:08:99:35:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C65BFAC45D3011DD45FB0C123405929D6351EDB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e20afb98-f3fb-45c2-9398-65129b8874f0.roa
Signing time: Mon 01 Sep 2025 19:50:51 +0000
ROA not before: Mon 01 Sep 2025 19:50:51 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:65:bf:ac:45:d3:01:1d:d4:5f:b0:c1:23:40:59:29:d6:35:1e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:50:51 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=6aca912fd913af46582e717f8a9ccab491039799608af640631e962a8aff003c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:5d:0c:a5:3b:8f:68:ce:9c:a5:da:55:be:
8a:83:61:83:f3:e1:29:16:a5:59:ed:e3:23:52:c4:
0b:9f:4e:4d:5d:77:89:cc:81:ca:2b:05:17:61:1b:
e1:13:0d:ed:cc:4c:fb:a9:81:d5:54:1c:6c:58:6e:
a5:84:e9:33:22:8d:2e:5c:51:fc:f8:7a:f1:d0:49:
c9:28:bd:d8:33:79:24:e7:b7:b0:b0:51:81:e4:78:
f4:40:ea:5a:87:24:b4:92:05:2b:1e:9b:97:20:2b:
d6:51:98:13:08:61:9e:52:db:eb:46:3a:e6:aa:0a:
dc:41:8f:1a:5c:6b:e6:fa:cb:a2:94:5b:49:df:5b:
27:d7:5e:6f:82:40:5f:c0:08:16:ac:fa:8b:61:0f:
76:68:90:ed:7e:5f:81:a1:8a:36:b8:b9:d6:83:65:
4e:14:15:df:59:92:28:f0:1f:c7:25:c1:f9:b1:f3:
e8:85:2a:05:ba:43:fe:eb:a1:68:14:00:a7:8a:67:
59:a9:bb:34:12:71:13:66:1e:d7:e9:34:de:d3:dc:
a9:93:3d:4f:ca:6c:68:b3:f0:f9:9e:ba:a0:6e:90:
8a:55:5e:09:d1:a2:7b:f5:fa:94:c9:33:bb:6b:98:
57:16:e0:cb:de:87:48:1a:dc:c9:3d:05:8c:69:09:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:4C:E4:77:47:A7:B4:AC:61:CA:90:DF:99:2F:E8:08:99:35:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e20afb98-f3fb-45c2-9398-65129b8874f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
56:b0:6c:78:8c:e0:27:58:c9:b3:d1:57:70:f4:d2:68:19:35:
b3:b7:cb:be:9b:a6:cb:6a:63:3b:a4:9f:63:49:35:d7:3d:90:
65:8e:4d:33:12:ed:9c:76:2c:41:08:d1:aa:9a:bb:dd:ee:1a:
56:f3:41:87:01:eb:b9:0b:37:48:8f:f8:6c:14:59:b3:d0:69:
66:6a:02:4b:11:c7:83:28:78:32:46:56:1c:f2:9a:51:f0:d6:
c3:2e:ea:b9:d1:fc:90:a3:90:4d:f8:08:fa:81:18:6e:91:2e:
52:9d:71:eb:34:cc:0b:41:3c:8b:cc:56:57:2d:6e:ef:dd:ca:
01:8d:d4:2e:eb:00:cc:2e:f1:f4:9e:bb:e7:7a:8c:c9:1d:50:
42:a9:df:ac:5c:38:3c:10:8e:57:88:4a:e1:7c:43:6f:af:50:
50:7e:38:a8:44:85:c0:02:da:60:18:01:13:ca:9c:91:0f:f9:
54:c1:e8:44:63:d8:44:9d:6d:e5:dd:63:07:ec:0d:b9:b0:12:
2e:d6:03:84:71:36:cf:4f:e0:ca:12:98:0d:1d:a9:93:01:53:
18:57:86:b7:3b:b0:bf:64:b9:42:b5:17:27:52:5f:c7:66:54:
c2:88:88:65:f8:7f:39:4f:d8:85:68:95:3e:27:a1:8a:97:f1:
bf:f6:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:18 2025 by rpki-client