Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
File: 0b50b516-b90a-4f69-ace2-8e904f240f1d.roa (raw, json)
Hash identifier: KXZ5R8uG9u83mWVRFQm9AQUeGByohRvVsQolPMv8njA=
Subject key identifier: B9:9E:07:99:84:FC:C6:9F:F4:31:EE:35:C5:4A:C6:9A:F5:A1:9B:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 582BD55A28C2C8713CCFBF0431FA32C74184784B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
Signing time: Tue 05 Aug 2025 20:01:07 +0000
ROA not before: Tue 05 Aug 2025 20:01:07 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2b:d5:5a:28:c2:c8:71:3c:cf:bf:04:31:fa:32:c7:41:84:78:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:01:07 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=d52efaa65bc964dcb33e437ac42ae571529c98d609b17114340ed4f05529b593, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:61:7d:34:9f:19:dc:a0:8f:89:25:a4:eb:
24:1d:74:e4:81:5e:ee:cb:34:34:9e:7e:4e:ab:7f:
c2:22:9d:ba:1b:92:46:34:95:c8:3f:cb:05:48:15:
50:b6:1c:f5:91:1f:ff:85:c5:45:9b:b2:a7:58:a8:
62:39:13:59:4f:6b:7a:ef:9a:d4:b9:1f:16:98:87:
fc:b5:2c:cb:30:24:09:15:d9:a1:30:ee:e1:dd:9c:
fe:20:e6:0e:19:c7:70:cd:5f:ae:b0:15:ee:37:75:
ba:f6:37:86:26:8f:33:2e:b2:cf:5c:34:a8:f4:a3:
8b:f8:84:60:33:87:fb:be:fc:45:9a:d5:f4:d6:a1:
d3:d5:16:15:4b:9e:62:5a:a4:e5:2d:b8:ca:52:19:
7e:d7:ea:8b:c4:a3:02:58:83:50:70:b6:f1:7d:f4:
b1:84:da:06:28:8d:80:88:3e:fe:24:2f:ce:0c:bd:
33:fc:30:f1:d3:f1:49:18:0c:49:9c:89:62:e5:85:
60:55:5c:a4:09:ad:96:76:9a:50:77:68:1d:72:bb:
17:16:a1:7d:ac:29:c3:0c:52:d6:ac:73:c7:75:8b:
72:21:35:42:f5:42:fc:45:f0:46:50:ce:a3:77:e8:
ec:98:9c:f7:e6:f7:2c:63:7d:cc:df:d5:a1:5f:02:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9E:07:99:84:FC:C6:9F:F4:31:EE:35:C5:4A:C6:9A:F5:A1:9B:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b50b516-b90a-4f69-ace2-8e904f240f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:c00::/38
Signature Algorithm: sha256WithRSAEncryption
35:38:80:9c:e4:4c:24:10:c0:55:45:6b:9f:66:3a:e9:2f:bb:
b6:71:e5:5a:15:fd:f1:a8:e2:6f:97:fd:45:d1:0d:5c:8d:b8:
ed:fa:93:11:f5:7e:19:8c:4b:03:41:1b:d8:6e:e4:ef:32:17:
3a:4e:e9:fe:72:8f:d8:c0:78:18:f6:95:3c:b6:af:03:3f:ea:
64:07:62:fd:47:3d:8f:f7:29:fa:f8:02:da:ad:25:e9:fd:7c:
b8:0a:af:70:b0:02:1f:d6:1e:eb:d5:07:1e:f7:ad:ea:0f:75:
3a:cb:c7:54:12:c6:ad:a6:b8:21:54:df:48:86:ae:89:0f:5c:
23:29:00:ce:b2:49:5b:f3:69:09:63:a7:b5:44:91:ab:c7:75:
30:bb:05:8a:c5:8d:a7:aa:51:c2:ab:f6:33:5d:96:e2:f5:e0:
ca:b6:2c:1e:e0:d4:57:7f:78:8b:de:a6:cf:dc:e8:67:9a:0e:
3f:f2:1a:e2:d3:f9:97:1c:58:2b:07:a4:1d:25:a9:59:1e:66:
8f:df:a1:1f:8c:63:51:b0:71:e7:ba:84:23:6d:c7:0b:98:1e:
d0:43:69:32:a1:30:3b:7d:69:34:61:0c:b8:a2:df:ba:47:57:
71:17:69:da:52:25:57:f0:96:42:64:3c:d5:f8:10:60:62:11:
94:fd:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:07 2025 by rpki-client