Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
File: e396d806-dffa-4609-8ae4-1e8fdbde728e.roa (raw, json)
Hash identifier: k8RVG9wQ//V+nREZIuDBy20XRepaf9fRRImthkhJCK8=
Subject key identifier: 9E:79:CC:99:C2:BD:04:8C:27:33:99:D6:AC:7A:D6:D2:D1:A5:70:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CD4BA4BCEE8125EB016400BB43EF118F32BF005
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
Signing time: Mon 01 Sep 2025 19:50:20 +0000
ROA not before: Mon 01 Sep 2025 19:50:20 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d4:ba:4b:ce:e8:12:5e:b0:16:40:0b:b4:3e:f1:18:f3:2b:f0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:50:20 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=01e17a044ea9d051364e59102ab53bf6e6227fa2cb273b2baf096f4f1f24d714, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:72:b6:69:fe:d5:b6:6e:9e:03:e1:40:31:
cc:05:32:54:df:e4:65:9f:89:54:23:45:ac:68:57:
2b:c5:c7:a0:06:df:13:af:e4:e7:57:3d:e5:de:dd:
43:ff:e1:26:62:45:87:b8:15:7d:b2:9c:d1:d8:1c:
c1:fd:d8:88:d8:0d:b2:9e:cb:0f:98:20:0f:a8:a8:
f8:cd:4c:27:1c:48:7e:7c:b2:8d:9a:f2:b0:b3:13:
9f:56:41:c5:d2:6b:0c:e6:6c:e8:c8:df:18:e3:5a:
80:44:38:fa:5d:8f:58:8e:12:14:a8:e0:a6:74:ca:
86:a0:d1:f3:5c:82:f6:d8:a9:a7:0c:7b:e2:36:07:
fa:4e:eb:c1:36:5b:3c:5a:c5:5e:84:95:1b:af:fe:
03:b1:f7:c6:f3:1d:5d:f0:90:41:1b:95:4d:c9:10:
24:a6:37:b4:16:b7:22:9b:96:8b:b3:7b:ba:0c:a6:
4c:0a:60:10:f8:14:5f:ed:ec:43:a8:a0:9f:ee:a7:
b5:8a:18:eb:b5:f7:73:09:e5:68:46:81:ea:83:2c:
64:dc:fc:51:04:82:05:1a:4c:0f:c6:92:66:1f:72:
ed:80:00:45:8b:5a:a7:ef:c3:bf:eb:12:3f:35:0e:
76:3d:4e:9d:ff:49:24:f7:57:c1:74:54:8d:6b:5d:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:CC:99:C2:BD:04:8C:27:33:99:D6:AC:7A:D6:D2:D1:A5:70:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e396d806-dffa-4609-8ae4-1e8fdbde728e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:a3:28:11:8e:d2:93:59:63:9b:cc:f8:7f:55:5c:89:d0:c4:
1e:3d:2a:1e:26:30:ca:0d:11:d8:d6:68:a7:e9:56:ec:1e:ec:
7c:ee:64:c8:2d:98:25:19:ce:bd:d2:d4:c7:74:dd:0e:ac:8c:
bb:bc:4a:35:7c:0f:e5:51:c5:5a:a9:9a:48:4f:9e:7c:87:29:
7a:9a:af:56:27:0a:41:84:61:54:ff:7c:17:98:e5:f5:fd:0f:
b2:e2:51:f1:62:fe:4f:01:30:c8:2e:e4:5f:46:14:f2:fb:4c:
b6:66:27:63:62:5e:c0:5d:75:b9:2a:f9:52:71:0d:48:cd:3b:
2f:ef:71:d7:4c:b8:a2:cf:e5:61:8c:0c:d9:88:6c:7b:04:a8:
be:1f:c7:b4:b8:b4:ec:23:ca:8c:8c:8d:8f:78:8c:3e:54:1b:
f1:80:00:e6:3a:9b:06:65:3d:fa:96:15:3a:0b:a1:7b:9a:36:
c3:0e:28:5f:21:94:fd:92:09:5b:61:72:7e:8e:bc:04:04:8a:
97:56:df:59:46:68:66:60:84:11:f2:e4:46:f9:fb:e9:f5:3b:
4c:9b:e0:a5:c3:4b:b8:ee:03:5c:70:f1:c7:bc:77:00:36:84:
8d:4b:22:86:b4:2c:3a:ad:20:c1:cc:bb:e1:74:9c:07:dd:53:
42:ac:f9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:46 2025 by rpki-client