Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa
File: 05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa (raw, json)
Hash identifier: 9i8Ja4eipo14rEQZun7hky2eJBVrJ1UXILw5AbFw9cQ=
Subject key identifier: D3:BA:71:87:36:B9:F1:42:9F:05:93:1D:64:0A:D2:3C:25:89:4B:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11C8C569E94550E6287BC20DA37B4E1E39A3342D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa
Signing time: Tue 05 Aug 2025 19:21:14 +0000
ROA not before: Tue 05 Aug 2025 19:21:14 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c8:c5:69:e9:45:50:e6:28:7b:c2:0d:a3:7b:4e:1e:39:a3:34:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:21:14 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=dcfb5e722640c0fd7a81e17a6f9aff316b33ad0928c119f5cde1e3d6b1a10c61, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:9d:b7:c3:9e:48:f7:4b:33:5b:9a:39:78:
e9:09:63:5c:3b:bf:45:34:17:6b:36:1d:b1:3c:33:
d0:7b:32:65:f6:7f:c8:11:48:fa:6c:7b:a4:b1:cc:
c2:d7:8e:0a:41:ce:fc:04:c9:5d:25:29:b0:58:88:
1a:23:8f:c4:d1:5d:65:8b:1c:fb:ca:87:be:f1:08:
b1:d0:5c:da:0a:cc:f8:90:b8:98:a0:dd:df:dc:fa:
ca:63:ee:55:39:09:19:6f:c3:2a:5e:d0:16:8f:0a:
58:87:4c:10:0b:11:ef:3f:53:af:80:e8:be:50:39:
a6:61:b1:45:74:15:b2:e0:da:09:7f:10:ac:10:6e:
0f:59:96:56:8a:44:0f:81:df:8f:3a:b2:99:92:8f:
43:80:3a:12:3c:89:27:e2:93:fd:7c:24:da:99:a0:
63:87:48:cb:a8:ab:b5:37:9b:7f:07:f5:73:6e:75:
f1:94:c8:69:99:9c:5c:6a:ed:28:b9:77:a5:78:48:
5f:a5:7a:66:f7:b0:e8:8c:0e:ef:b8:4d:b8:dd:dd:
69:79:f9:e0:c2:39:d6:17:51:ec:7f:af:4a:08:6e:
eb:eb:57:fb:d7:9b:5e:f0:c2:9c:48:6a:be:b6:c6:
f4:a2:76:33:54:70:f8:71:8b:72:53:6e:6b:68:3b:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BA:71:87:36:B9:F1:42:9F:05:93:1D:64:0A:D2:3C:25:89:4B:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/05f7ab3f-cb73-49a6-aada-440bf4dbf3b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8050::/48
Signature Algorithm: sha256WithRSAEncryption
aa:ae:af:db:36:c3:09:ea:60:ab:32:9c:9f:3e:b3:62:6a:ce:
2b:64:24:dc:b0:d8:90:85:7d:11:27:60:d7:24:12:1d:bc:ec:
14:70:ef:08:f5:a4:5f:f2:50:e8:4a:27:b9:2b:83:7a:fd:ab:
69:bb:37:3c:b8:a0:ca:fe:26:0f:49:3b:fd:f9:3f:38:32:53:
5b:e7:8d:0b:e3:d1:3c:05:96:fa:25:05:ea:9e:e8:81:3a:a4:
ed:a0:75:64:4e:7b:0d:55:cd:cf:c5:3b:90:42:2e:a8:06:c5:
af:12:e2:ef:ef:e5:39:6c:43:f1:20:0b:c9:73:23:f8:d3:40:
ba:c1:d7:4a:05:8e:a7:e2:af:86:c0:ec:0b:16:67:4a:9c:1d:
0f:0c:b3:18:86:a3:8e:d7:ff:f5:c5:33:41:29:96:56:e9:0b:
07:7a:9f:f9:6c:08:69:ee:28:e4:21:95:1a:9d:87:c0:f2:36:
64:cb:5e:3e:ad:1c:52:bd:14:c9:b0:de:b2:9c:24:83:cd:ba:
b4:6f:83:a5:a8:52:d2:24:46:3d:aa:b4:d1:ed:6c:aa:af:ec:
d7:73:56:03:8f:1d:c6:17:e7:57:6e:f1:da:5a:93:d5:12:fa:
b3:6e:cb:22:ce:3b:48:f4:76:85:53:37:d9:eb:7d:d0:1a:c2:
49:01:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:55:23 2025 by rpki-client