Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
File: e5179068-cbcf-4f9a-864d-3c97430c84f4.roa (raw, json)
Hash identifier: YEa3RxN6dm/tf+M/eapfJvrtpGCZHxN/O1T6yEcFUx4=
Subject key identifier: 44:EA:56:E5:D2:21:7C:6F:CA:F7:50:0C:18:08:F8:83:2A:C2:4F:13
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C499C3F7B0EED4C4BF0970C55C6C4F11B19AEDB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
Signing time: Mon 01 Sep 2025 21:11:17 +0000
ROA not before: Mon 01 Sep 2025 21:11:17 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:49:9c:3f:7b:0e:ed:4c:4b:f0:97:0c:55:c6:c4:f1:1b:19:ae:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:11:17 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=75dda3a3dadd3b1f36f6fb082ae838676fc23ce900ef29f4c831ef6d6ac33c5e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:8e:4f:d7:50:09:9d:16:7a:d3:6f:ec:29:
c9:e4:59:0a:0d:46:01:d6:3e:5c:9d:0b:59:b9:fe:
2f:fd:c5:3c:94:f8:f4:e9:13:09:5d:99:ea:c0:44:
aa:fb:3b:12:40:7d:64:3b:f1:1f:05:f3:9d:4b:45:
e1:2a:33:08:d5:12:fa:e8:57:f9:ea:33:47:4b:3f:
22:64:a3:26:b1:8a:98:f0:a6:75:fe:65:89:90:be:
88:8f:6f:be:a5:fd:18:39:ea:59:e4:c2:56:0f:46:
75:7e:41:a4:49:b2:61:17:96:97:6e:0f:02:dd:71:
b9:2b:c8:0b:4c:53:8c:00:06:d4:16:4c:fb:6a:28:
91:65:1a:66:dc:eb:6e:27:e0:57:d9:ea:95:08:df:
77:29:1e:65:9c:45:31:63:fd:b7:6f:76:ad:6d:55:
b1:d4:f8:bd:74:52:35:6b:69:63:a5:08:36:b4:20:
e7:70:74:57:26:fc:59:24:39:0f:79:5a:a1:05:eb:
f2:b8:3e:58:72:ba:55:ab:87:9d:a8:ed:7e:37:f6:
de:c5:79:b3:c5:6a:5d:15:fe:f7:85:41:6f:12:8b:
8e:29:fe:08:17:be:69:d6:da:76:b0:3f:63:b5:ba:
a4:3e:ab:56:dc:e3:9c:a5:34:ce:60:d4:66:97:45:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:56:E5:D2:21:7C:6F:CA:F7:50:0C:18:08:F8:83:2A:C2:4F:13
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5179068-cbcf-4f9a-864d-3c97430c84f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015::/38
Signature Algorithm: sha256WithRSAEncryption
c6:d4:98:f1:66:58:5b:51:65:f7:e6:ab:d4:33:0b:6a:df:e8:
39:51:57:56:03:89:d3:62:2b:fd:57:3f:95:63:c1:02:06:5c:
1c:5c:28:9e:7f:ca:48:5b:85:bd:02:a3:0c:0c:3e:5c:f0:98:
d3:6e:6e:14:37:c7:8f:ac:1f:bc:17:9f:12:95:4e:3d:c4:25:
3b:a4:9b:a4:a0:25:ac:5c:c8:a4:40:48:05:5d:02:c9:bf:02:
ff:c5:55:90:e4:3b:74:b6:7f:8e:da:93:3c:d0:60:91:07:dd:
db:8f:f7:55:59:2b:8e:bd:b5:32:8b:43:62:28:92:41:37:31:
14:de:9a:3c:2a:41:d4:87:d1:85:e8:02:f9:74:b9:29:b0:61:
13:a5:ae:58:91:b3:a7:4e:8e:4a:f3:79:8f:93:2b:18:e4:6f:
eb:f1:3e:d7:8a:d0:2e:9a:05:36:9b:8f:95:72:7a:ec:88:82:
34:75:79:d3:4e:19:15:86:49:d0:c2:df:e2:ce:ba:b9:fa:8a:
31:f6:7c:50:4d:b9:56:06:81:b9:25:df:29:09:6e:86:d8:7d:
60:64:cb:d6:a4:5a:4f:4e:58:25:80:d5:52:1b:39:14:e7:7b:
54:fa:6a:6c:ae:70:2c:fe:4a:15:61:0e:c7:58:f2:e4:99:80:
f4:53:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:24 2025 by rpki-client