Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
File: e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa (raw, json)
Hash identifier: HFMrgB6Zba34Gr0GnLeFYTwV6PnW9aCcVfFA0f3Wx/U=
Subject key identifier: A4:78:B7:15:F8:04:AB:8C:56:44:F3:8D:95:4A:34:9A:44:B3:B4:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24E90A6707BA9B76750628EF11C79F7ECFB1296A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
Signing time: Tue 02 Sep 2025 00:40:33 +0000
ROA not before: Tue 02 Sep 2025 00:40:33 +0000
ROA not after: Tue 07 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e9:0a:67:07:ba:9b:76:75:06:28:ef:11:c7:9f:7e:cf:b1:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 2 00:40:33 2025 GMT
Not After : Oct 7 23:59:59 2025 GMT
Subject: serialNumber=3ddf02d451fa4ec78a1cf1f984d81a04216f2c4e885642ea47aa381fc0ae9da9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2d:6a:b4:40:0a:4e:83:7f:98:67:2e:5c:73:
b9:5e:ae:f4:cf:d0:c1:b7:1d:e1:5b:78:4d:f4:fb:
80:7f:37:8a:e8:ca:b8:c6:9c:85:65:9c:0f:7f:27:
ce:a3:df:cc:c0:5e:7a:ef:76:19:a8:f4:71:f1:43:
01:b7:09:18:df:26:4c:71:23:a4:99:3b:a1:e7:1d:
57:dc:3d:71:e8:eb:68:45:f0:04:79:9d:bc:cf:51:
2a:a8:24:f9:dc:46:2f:1d:59:d7:44:57:cd:a4:13:
d9:72:22:48:c5:4d:ee:b4:5b:16:fe:93:12:fa:29:
27:59:d6:30:ae:f2:9d:28:57:e0:20:b2:cb:ec:d1:
6e:75:27:e3:88:3b:18:f9:6f:9a:ae:d0:bb:9f:77:
9a:24:31:f4:91:b9:0a:86:47:91:60:99:18:d9:3f:
8d:f1:65:8d:da:5e:08:2b:53:56:f9:0c:31:81:3e:
72:3e:f9:e6:38:b6:e8:da:2f:f9:61:79:72:fb:71:
51:1f:74:11:2e:a8:d2:da:01:68:cb:7a:e9:13:ab:
97:50:e3:a1:ae:b2:7e:55:8b:b0:65:47:00:e6:ed:
4a:1b:63:ae:9f:d4:14:23:df:31:ad:dc:12:59:ca:
1d:e5:9e:93:cc:89:11:a2:9e:3f:44:07:ec:52:a2:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:B7:15:F8:04:AB:8C:56:44:F3:8D:95:4A:34:9A:44:B3:B4:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e3a0b200-3f16-4eb7-aa0a-fccc46a9092b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/17
Signature Algorithm: sha256WithRSAEncryption
58:65:d5:a9:31:87:f0:32:7e:4b:40:ad:f4:cf:15:10:4c:0a:
50:85:72:07:52:35:a2:70:f2:e5:42:7e:a6:48:07:97:6e:9e:
28:2a:66:f2:94:b3:4a:f8:01:2a:0a:07:5a:b4:a9:a4:7e:a1:
9a:e8:3e:d4:14:fb:10:c0:57:59:fa:2d:89:df:93:22:8b:a7:
a2:af:6e:0d:31:2a:c0:86:d1:52:27:91:5b:c3:a7:f8:f8:dd:
9f:11:09:95:d0:f5:27:cb:2b:b8:79:03:33:de:9b:d9:00:c3:
99:ff:6a:b1:d5:2d:81:d1:38:c9:9d:8d:0b:f4:9e:c3:6a:46:
47:a0:d6:a1:aa:8f:53:9b:2e:12:48:25:6d:f1:04:24:f4:ae:
7a:52:fa:6c:02:d9:ec:19:bf:a6:13:92:79:f3:31:94:df:6a:
61:2b:f7:2f:de:dd:85:4a:48:95:9f:17:67:df:a0:1e:95:37:
71:fe:cf:9b:86:7c:9f:bd:ea:4e:2b:e6:64:f2:b6:62:8d:78:
22:0e:bc:fa:82:a8:db:55:06:c8:93:f5:d8:21:01:e8:44:57:
9e:88:7c:43:f8:4c:bc:f6:80:79:e2:32:05:f9:1c:4e:c3:87:
05:30:c7:de:e8:4e:83:ce:18:8d:67:fc:90:81:35:ab:d8:75:
c5:e9:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:07 2025 by rpki-client