Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
File: eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa (raw, json)
Hash identifier: wSJkwPtAPcgEY1S9FZHGwXGabd82ZlPzPHWfeg+FrKg=
Subject key identifier: 88:67:F8:40:7F:2D:58:BF:2F:9B:3D:1E:FB:EB:0D:FB:D9:CE:95:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17722763D14ED4B99CB5C4AEBD8F2056548C46AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
Signing time: Mon 01 Sep 2025 20:10:02 +0000
ROA not before: Mon 01 Sep 2025 20:10:02 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:72:27:63:d1:4e:d4:b9:9c:b5:c4:ae:bd:8f:20:56:54:8c:46:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:10:02 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=552b933ae5ba8d0a5381b36205481802af715717c5ac748177fbe1060fd5451e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:65:07:18:b6:c3:df:51:ae:78:8f:09:2f:
16:bd:85:ab:95:fb:f4:84:8a:6d:b6:eb:c0:c4:b4:
74:f3:f9:fd:92:ce:ce:5b:fc:7d:53:ea:83:97:00:
c9:fb:39:4e:49:52:58:46:11:15:d2:2e:99:fd:ba:
ed:17:98:9f:fa:bd:08:89:91:8e:be:f8:f9:ed:04:
51:38:16:94:b1:5c:02:bf:e5:80:8c:76:59:fb:37:
21:ab:3a:4e:9f:94:1b:bd:71:5b:39:01:47:b3:be:
bd:bc:43:e5:9f:e4:44:94:aa:2d:78:5a:19:64:76:
9c:a0:53:99:a8:8a:a6:40:e5:69:c9:41:c1:58:d4:
60:34:97:73:9e:cf:41:b5:c8:d5:83:52:ee:c4:9e:
e1:cc:bf:d5:f2:5b:ae:2f:94:af:07:fe:dc:d1:08:
c8:ea:06:57:e8:02:b1:d2:e5:1f:40:9a:ae:a9:9f:
2c:9c:39:43:63:64:fd:5e:17:b2:20:77:28:30:3a:
8c:81:bf:c1:ec:d0:e5:74:6e:19:12:d0:1b:53:d5:
5b:83:eb:1c:35:1a:90:cb:54:eb:6c:75:8c:8a:4f:
c1:36:99:39:87:3d:bb:26:12:71:43:68:35:83:f6:
73:63:df:60:a9:59:c0:3d:6f:c6:43:aa:29:30:bb:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:F8:40:7F:2D:58:BF:2F:9B:3D:1E:FB:EB:0D:FB:D9:CE:95:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eedddbbd-2bbd-4e64-9b37-dddd3392ce8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4040::/48
Signature Algorithm: sha256WithRSAEncryption
7b:62:2c:d4:43:de:d9:14:e9:a7:2c:4d:79:bf:8b:61:c5:43:
52:f3:b9:9e:c4:51:7c:f6:78:9d:f1:5a:66:b2:3d:3f:a2:b6:
d3:15:d1:66:c0:19:8f:8f:be:30:c6:ad:7c:5e:b9:91:39:b7:
29:fa:f2:35:c2:69:f2:3b:22:4b:3b:35:b8:40:c0:5c:6a:61:
54:89:a6:30:b2:9e:b4:7f:e7:5e:39:03:6f:e2:13:17:91:e0:
16:49:89:c7:c2:36:3f:17:b2:3c:9e:74:65:5c:b3:be:ec:3c:
81:a9:43:95:84:05:12:7d:21:a9:a3:6d:5b:89:2b:f6:ca:e2:
e4:ab:35:14:0a:0b:b9:92:70:55:3c:0f:73:7b:b4:6e:93:35:
bd:c3:84:42:f5:b7:2c:1b:88:7a:b0:a5:b2:ea:b7:18:4f:b6:
66:52:37:fc:08:6c:0d:59:99:20:af:08:f4:f6:ec:b5:a3:ca:
e5:0e:82:2b:49:ad:24:de:cc:a1:9c:e3:2f:19:e3:dc:16:ca:
40:64:d5:ee:be:ec:2f:41:5e:f0:22:16:47:ff:a8:0c:7c:76:
86:d6:1a:1b:ae:2d:a1:94:38:88:5d:1e:ac:62:f2:66:d7:ae:
51:b9:d9:ce:81:3a:08:20:19:75:51:ea:45:a4:32:c6:5d:4e:
92:f3:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:47 2025 by rpki-client