Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f298c9d1-5f5e-4a2a-a203-29e2cbdb3779.roa
File: f298c9d1-5f5e-4a2a-a203-29e2cbdb3779.roa (raw, json)
Hash identifier: 693sHqnYQ6s0AXz2NDVzG64hOiWzq7PTJajXudRIVyY=
Subject key identifier: C5:B5:09:79:ED:54:A7:F3:FF:70:DD:7B:54:3C:C5:3D:E0:89:6A:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09A5C7F420324CFB145FAEDE6264B1088E7CA933
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f298c9d1-5f5e-4a2a-a203-29e2cbdb3779.roa
Signing time: Mon 18 Aug 2025 15:06:49 +0000
ROA not before: Mon 18 Aug 2025 15:06:49 +0000
ROA not after: Mon 22 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:f080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a5:c7:f4:20:32:4c:fb:14:5f:ae:de:62:64:b1:08:8e:7c:a9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 18 15:06:49 2025 GMT
Not After : Sep 22 23:59:59 2025 GMT
Subject: serialNumber=bf43285edf909aafc8384ad9df149afffb43939fd8ed04358bfb5a94e53daf92, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:61:a4:13:51:91:9c:5c:8a:8a:d2:d5:c0:
98:81:25:55:bd:3f:78:b2:9a:4f:a6:af:04:6a:95:
a1:f2:8c:e3:97:4a:fb:d7:37:81:04:89:0f:ab:ad:
fe:dc:09:59:8e:63:bc:82:45:e1:1a:a9:07:d5:fe:
f2:08:46:d8:17:d8:c1:bb:86:bf:03:fc:16:f4:ef:
46:ab:49:c0:07:9e:37:94:bb:e5:c4:0f:d7:cc:e9:
3b:70:08:41:51:98:c0:16:e5:6a:4f:4f:fe:da:fb:
19:4b:4d:8f:6c:3d:2c:d3:57:07:7a:6e:fb:e6:c3:
39:98:97:7f:91:09:19:2a:65:cd:d5:30:2c:b7:6a:
84:e8:4b:d4:5a:2d:1c:34:3d:2d:f9:55:cb:50:b7:
e7:63:79:f0:25:dd:a8:47:f2:33:60:54:33:9a:26:
d1:bb:8a:a4:6d:d6:73:28:ff:04:93:74:68:0c:af:
ae:73:ad:3a:6e:a8:ca:db:1a:29:8c:15:37:96:79:
94:20:b2:4a:00:9a:1c:2a:c8:d0:68:8f:25:06:df:
e3:88:5f:80:1c:c4:85:04:fb:23:8f:86:2c:81:be:
a9:75:8a:5f:29:3d:16:db:e8:7e:45:27:33:f3:00:
22:77:38:45:8d:c1:9c:62:94:62:fe:2b:df:25:e4:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:09:79:ED:54:A7:F3:FF:70:DD:7B:54:3C:C5:3D:E0:89:6A:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f298c9d1-5f5e-4a2a-a203-29e2cbdb3779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:f080::/48
Signature Algorithm: sha256WithRSAEncryption
61:69:54:52:df:87:d6:35:0c:40:11:fd:44:b4:17:5f:fe:d7:
8c:b9:9a:76:58:37:95:92:69:b6:e3:e9:10:d4:89:25:4a:ba:
c2:62:cf:ba:7a:58:2e:20:89:9f:47:01:8c:2e:57:55:9b:c9:
82:69:59:4a:96:5e:49:6a:b8:93:f5:2a:39:46:62:44:ca:98:
1a:2d:36:06:7b:b3:34:3f:a1:be:30:9d:e1:9a:40:d4:e5:d6:
38:13:35:f6:70:bf:0e:90:43:93:66:43:23:99:81:13:32:97:
05:41:43:36:b5:9d:99:4b:cb:e1:8e:d5:27:d5:b7:ab:81:e4:
fb:e2:5d:b8:68:41:8c:4d:f7:3f:aa:38:79:ab:7d:0b:0f:08:
be:25:8d:6c:3c:bd:55:59:59:21:13:a5:d1:cb:0e:4d:c7:07:
98:88:22:e4:bf:ac:4b:fa:3c:e2:b9:cd:a5:94:db:9a:e9:f1:
13:ab:63:46:30:fe:6c:c8:25:a4:a8:a4:15:c5:25:23:42:a6:
00:3a:72:41:3a:01:27:2b:fc:23:64:c1:e0:11:86:57:11:ea:
21:ef:90:e3:99:76:a8:ac:3b:ea:99:57:31:b9:04:44:31:d7:
00:76:4b:4c:81:0b:e5:a0:7c:cf:dd:32:31:41:7c:17:a7:4d:
34:96:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:37:35 2025 by rpki-client