Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
File: edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa (raw, json)
Hash identifier: jio7HVtJVN7XFy0w6P7fOHXiVsFLreIecHrlX42SlpA=
Subject key identifier: B7:1F:7E:D4:04:41:2C:E0:93:9B:32:C0:C7:15:8B:47:71:93:FD:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C6213492643FDB785DF3B89C1608838F324D2F0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
Signing time: Mon 01 Sep 2025 21:11:15 +0000
ROA not before: Mon 01 Sep 2025 21:11:15 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:62:13:49:26:43:fd:b7:85:df:3b:89:c1:60:88:38:f3:24:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:11:15 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=4306a80edf8407b551be59ddf32cb4c7191b5551f8df2558b6e5b563ac22bacc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:ba:1b:fc:11:13:3e:cb:4f:57:f5:6e:64:
43:1a:78:64:39:9a:70:b9:33:d9:55:3a:eb:c8:1b:
70:2a:cc:a4:d4:62:1b:66:4f:93:1d:63:25:9b:3a:
8f:05:29:b6:0e:15:48:d1:8a:a7:73:43:d6:a0:5f:
2a:62:88:02:f1:ad:ef:42:4e:f1:ee:37:21:78:2c:
cc:8f:0b:77:ae:d5:b8:91:2f:ef:a3:17:8e:41:15:
bb:d6:f8:44:3c:b7:18:ab:bf:e3:52:42:af:d4:89:
7b:b5:04:b8:c4:5e:cb:2b:02:72:37:27:b5:06:cb:
f1:03:7d:13:4d:06:b5:df:c4:a8:60:49:db:df:9c:
d8:9b:d7:38:e5:a3:36:48:77:89:c9:a8:cc:21:da:
23:97:47:00:51:e9:9c:0a:e1:63:25:8c:65:1f:de:
ca:e7:84:ba:f0:d4:d5:d3:7e:2c:80:ec:3b:61:60:
c6:9c:89:24:6b:e9:1d:e9:99:f5:cd:26:00:66:ab:
d2:49:f0:21:c8:99:b2:c5:5a:ec:46:2d:82:f6:07:
7f:ea:2e:92:68:03:11:3b:35:78:d9:e9:d2:14:24:
a9:c8:37:a5:55:1b:56:d8:cb:24:64:a6:8d:9a:b5:
6a:6d:7a:75:09:71:53:b4:d6:4b:ec:0a:00:a3:de:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1F:7E:D4:04:41:2C:E0:93:9B:32:C0:C7:15:8B:47:71:93:FD:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edcc9789-1388-4a5f-a1ae-1bb58c4cb319.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/38
Signature Algorithm: sha256WithRSAEncryption
40:86:10:0d:d5:76:20:5b:bb:1b:d7:ea:6f:c7:37:89:fb:94:
de:ba:ce:c8:12:aa:cd:ae:28:46:02:8d:b3:6e:7f:91:51:97:
73:d0:b5:c4:ab:d1:12:53:41:e9:d9:80:e3:df:7d:9f:b6:d2:
22:d5:b7:3c:21:93:aa:88:e7:86:b9:e1:f3:ae:44:6d:8c:65:
3d:42:6c:5c:55:b9:2f:e2:f8:35:56:9b:80:c8:46:7e:d8:64:
6d:e0:a8:be:84:af:e5:60:0c:93:27:23:c1:eb:87:65:8e:30:
70:8b:59:fc:75:fc:db:19:92:76:be:88:4a:f7:1d:e5:8e:a7:
86:ed:2c:98:3f:ce:a4:14:ea:24:26:e5:9c:4f:b7:60:8e:bb:
d7:37:36:a9:49:bb:1d:69:2b:f4:4b:33:ef:95:08:84:60:4d:
c0:a3:66:88:cc:71:ef:3a:f7:6b:da:67:56:1f:cd:da:5d:10:
b1:d6:7d:0e:66:66:b4:ff:c8:27:35:9a:82:c8:77:8a:44:06:
59:a2:4b:90:29:b4:51:ff:00:21:e9:e4:49:11:92:58:ff:24:
38:2f:0f:72:9b:3c:50:e9:32:96:ea:40:03:0e:20:1e:f6:79:
05:ab:23:00:1e:9b:56:03:90:1c:31:a4:42:da:af:bc:c5:04:
6d:62:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:27 2025 by rpki-client