Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
File: fbd3a3af-f307-4148-9e34-70199540a838.roa (raw, json)
Hash identifier: 5qXvAd7WG4u2OosmswFXZkGz9qVYb+AJIVNC4gZ6sE0=
Subject key identifier: 3D:E8:42:61:55:3D:AD:F4:51:1B:5C:4E:C5:5B:D8:99:38:E5:42:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50D627A076AFBDB3E32DC22E7E9E222E0C107D86
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
Signing time: Mon 01 Sep 2025 20:10:15 +0000
ROA not before: Mon 01 Sep 2025 20:10:15 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d6:27:a0:76:af:bd:b3:e3:2d:c2:2e:7e:9e:22:2e:0c:10:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:10:15 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=3cff4ef60ac27295e7b6c48fa9608d36f7a042d33082b49e880f3813b5a2689e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:fd:e3:81:7c:82:0e:a5:00:88:00:65:3a:
89:fe:6d:9e:6e:b8:d6:78:ae:b5:54:09:f7:03:2b:
45:44:71:6b:a6:de:44:7d:cb:81:c4:4e:68:19:ef:
33:5d:33:c3:d1:b4:ee:27:1a:7d:db:fb:49:69:5e:
33:8c:5b:2e:de:f1:23:cc:21:0d:0d:cd:cd:24:3b:
45:e3:04:bc:9e:f6:f3:5e:53:18:19:72:82:ab:82:
e5:d3:6c:2d:d1:85:26:1b:6c:e1:ea:95:fa:39:b2:
c9:96:ca:38:cf:eb:5a:9a:e8:db:ef:39:3f:fc:3c:
ef:97:e9:a3:f3:82:c6:d8:f5:b5:57:f9:58:c0:1d:
4e:b9:da:14:3a:e5:7f:e2:45:24:4b:a3:d0:40:03:
79:20:8b:ab:40:9a:0d:1b:d4:4c:55:06:e7:56:99:
ae:79:e3:f0:b1:19:ae:f6:e5:2c:8a:a7:c1:3a:58:
6d:0d:4d:fe:d1:39:dd:be:a5:4d:71:03:ad:b9:aa:
fd:54:a3:fe:60:c3:60:ce:f0:92:60:2c:9b:c3:80:
08:e2:aa:ed:15:94:4c:6b:7e:0e:a8:e9:c8:e6:f0:
e6:b1:31:3c:c5:cd:4b:8b:2b:83:23:1c:cd:3c:77:
73:2a:77:c3:e9:bc:5d:c9:9d:f6:a4:0f:0c:35:1d:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:42:61:55:3D:AD:F4:51:1B:5C:4E:C5:5B:D8:99:38:E5:42:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fbd3a3af-f307-4148-9e34-70199540a838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:b000::/40
Signature Algorithm: sha256WithRSAEncryption
33:c8:60:ee:7e:22:24:ae:9c:85:98:52:02:83:2e:4c:e0:29:
88:ed:27:32:52:7a:b1:cb:d0:f7:e8:6f:a4:f3:71:3d:c9:91:
14:4c:5e:eb:b8:53:e4:5d:63:a3:91:43:12:c0:aa:80:05:59:
bc:1d:a0:5a:24:7e:3b:56:dc:46:77:e4:b7:ec:29:a6:24:ef:
69:cf:64:39:23:83:ea:2e:e7:30:01:67:2e:83:e6:a6:63:33:
35:53:a4:1c:a8:6a:18:79:9e:2b:6c:6f:6a:4a:ae:09:49:27:
e7:0d:97:50:a1:ad:99:8b:95:d5:db:03:14:76:8c:50:10:38:
60:94:88:3a:ee:69:f6:87:de:72:83:c0:31:0f:51:90:b0:19:
aa:e1:9e:28:e3:e0:f0:99:1c:37:08:4e:ce:70:13:9c:f3:0a:
20:47:66:ee:91:00:0e:24:00:c7:b9:80:1a:a0:c0:ef:11:05:
9d:58:c3:bd:e0:7b:39:1c:f1:b9:48:b5:59:a9:3f:02:98:c4:
69:ce:11:94:a1:5e:9c:6c:ec:c1:2a:b4:ba:7c:c4:43:25:11:
7d:3a:51:28:7b:de:3d:30:fd:ce:3f:18:46:f6:56:ab:63:e0:
df:f2:3e:a3:21:51:a8:e5:a8:25:25:fb:c1:67:01:09:10:29:
6a:e3:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:34 2025 by rpki-client