Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
File: 0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa (raw, json)
Hash identifier: J4xjfWA4bauSZYG+HHUeO+lbPyW9NbwoE60ZYFcpINg=
Subject key identifier: A7:95:FE:7C:34:7E:C6:F5:36:E1:D5:1B:99:F5:14:FA:F0:B4:4B:5E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5587F5F2A960DAEFF84891542046000AAB44FD89
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
Signing time: Fri 15 Aug 2025 15:40:41 +0000
ROA not before: Fri 15 Aug 2025 15:40:41 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 178.236.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:87:f5:f2:a9:60:da:ef:f8:48:91:54:20:46:00:0a:ab:44:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:40:41 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=acc101db9cf6fd6d44b56470e65717cf45844659b2eac9ef9572e1ea8d9e7382, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:6e:2c:62:31:ba:39:01:1c:0d:46:23:7a:
55:61:ea:a1:06:01:e8:7b:d3:6b:06:ea:fa:31:b2:
52:e7:bb:06:a3:c8:49:ef:40:87:e7:39:c2:49:56:
16:af:56:00:f6:39:c9:d4:1b:90:f7:9b:8b:52:bf:
ac:a8:ba:33:61:61:8c:2b:4a:24:12:16:2e:02:fa:
10:cd:01:e5:30:9d:d2:f9:66:9a:b3:af:fd:bc:ac:
eb:0d:ee:54:20:f7:e4:d3:38:16:4e:69:a0:1f:5b:
63:70:18:40:61:6e:15:23:3f:fa:48:0e:19:34:4d:
8f:22:fa:19:7a:a3:ba:a8:55:fb:0b:7e:8f:21:55:
64:14:18:5d:27:cb:c7:f8:2a:8d:f4:b8:7f:4d:c4:
35:16:31:f2:cf:7a:d8:ac:11:26:00:a8:22:8a:e5:
7c:9e:e6:43:22:bc:ef:d2:c8:42:b3:d8:a3:a8:3d:
39:c3:e4:4c:43:ad:2f:24:f5:a1:28:bb:8e:ad:df:
0b:1a:8a:1b:d8:5e:ae:f4:bd:27:2c:43:a9:c0:14:
b9:bb:49:73:da:5e:f0:a9:54:27:95:04:f6:7c:4b:
83:b9:05:fa:33:7e:0f:70:c9:0f:a1:0f:b7:ce:0f:
c5:fd:9e:52:a2:e1:d2:6f:ac:e9:9a:d1:b0:32:bd:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:95:FE:7C:34:7E:C6:F5:36:E1:D5:1B:99:F5:14:FA:F0:B4:4B:5E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
67:5c:fd:b9:e7:66:a5:d2:ab:99:69:74:04:09:f7:15:c0:94:
21:e3:bd:ca:f4:06:25:4a:bc:a1:19:62:66:03:fb:f7:35:a7:
9b:08:9e:9f:84:81:85:0a:0f:01:3f:e6:2c:a9:14:7f:a9:59:
9c:ca:53:e1:be:a7:33:f6:97:cd:15:80:a5:f2:be:d0:75:21:
9d:e4:e5:a8:be:14:89:85:11:12:c6:74:76:f4:5b:10:ea:16:
6a:84:21:1e:72:f4:09:4e:24:11:5d:9b:a0:01:d5:35:a6:f3:
36:f9:11:c0:4e:66:c4:f7:fe:6a:28:fb:23:9c:e8:a0:4f:5f:
67:75:79:31:b6:a8:f7:cf:5d:b0:1f:29:4b:ff:e4:c0:1f:c5:
08:d3:83:0f:7c:67:9b:ab:a4:da:c0:c2:0e:9f:52:3b:5c:f8:
39:fc:c9:14:28:37:0b:76:db:fb:98:a4:42:6d:69:2d:94:ac:
c6:d5:91:b3:56:80:4b:95:2c:35:43:40:af:c0:85:82:9f:db:
2c:1b:1d:4c:eb:1c:1f:56:4a:43:3b:47:55:f8:64:9f:00:06:
88:7f:3b:46:8b:73:b0:ba:99:38:e6:03:b2:17:d4:81:91:42:
04:66:a3:82:e2:5c:9c:bb:2c:44:91:14:d7:57:3c:b0:31:a8:
26:b7:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:54:10 2025 by rpki-client