Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0cadec3e-a35e-4321-b172-825de7a521d7.roa
File: 0cadec3e-a35e-4321-b172-825de7a521d7.roa (raw, json)
Hash identifier: kEkTQbk0n1gfi5zl+vwPSDwMnBDis1FkGOyHBIK9olw=
Subject key identifier: 51:4A:07:16:10:BC:82:B7:3A:39:41:42:48:8C:70:9B:74:E6:EF:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F2125DC372E0D41BC3CC38AB99DED56074CDC2B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0cadec3e-a35e-4321-b172-825de7a521d7.roa
Signing time: Tue 05 Aug 2025 18:50:45 +0000
ROA not before: Tue 05 Aug 2025 18:50:45 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:21:25:dc:37:2e:0d:41:bc:3c:c3:8a:b9:9d:ed:56:07:4c:dc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:50:45 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=d7c03e276aa0627419bfb680a575a97e0bc933a0d8501df4dfb7d91b000730a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:2a:dd:c5:0e:64:b6:50:5d:ef:0e:ed:58:
55:94:0a:f9:81:58:2c:09:e3:05:3e:57:76:95:83:
0c:d1:1e:5c:76:e6:c7:74:08:2e:9b:52:68:6a:26:
ba:15:b4:10:a5:9f:5a:c5:0d:c7:72:c5:64:46:79:
b7:d2:ca:be:a8:3c:03:e1:b3:bb:dc:71:30:d7:cf:
4a:70:2f:07:78:99:3b:a1:46:43:be:38:7a:8d:c7:
92:35:44:ec:5c:07:e2:2e:71:e5:d5:c0:03:f7:f7:
cd:a8:72:94:ff:23:7d:af:f1:c4:ed:87:6b:98:ec:
c0:a8:35:10:f0:12:19:0c:20:a1:51:bc:19:58:fd:
75:03:3d:7f:6e:6e:1c:06:4b:db:8f:d0:94:7c:a7:
ac:4f:e2:c1:63:15:81:c6:f8:2b:c8:e0:81:c9:bd:
82:35:e1:c0:93:94:20:d0:3b:70:3f:c5:91:c5:c9:
e6:6c:b6:5a:b6:97:2d:09:c6:c3:f4:a0:ef:6e:7c:
eb:31:00:1a:8d:47:9e:bc:b2:35:34:2a:25:cc:e5:
03:c5:6a:f2:45:88:0a:49:9b:24:96:2b:39:b2:12:
b0:34:4a:82:96:a4:d3:ec:bc:c1:7d:51:a9:b9:76:
fb:b5:70:cb:94:c6:56:66:7a:b6:6c:69:cd:d0:bf:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:07:16:10:BC:82:B7:3A:39:41:42:48:8C:70:9B:74:E6:EF:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0cadec3e-a35e-4321-b172-825de7a521d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
9c:02:b3:d1:ca:23:d7:1a:23:a1:13:d8:70:8b:28:25:8c:20:
03:93:82:ee:5e:e9:e0:30:a3:ae:06:54:bb:c3:6a:59:45:7f:
41:e8:74:bb:04:9d:b6:bb:f1:9d:83:b7:5f:93:e3:05:18:53:
66:9c:51:44:66:79:ac:13:08:a5:b9:c5:2d:c9:38:93:36:71:
0f:5e:c5:ce:be:61:86:54:81:3f:c0:47:59:04:b5:20:97:4c:
a2:b7:35:0d:de:98:a5:13:f6:a4:b6:3e:61:84:aa:b0:e2:61:
f3:dc:df:83:b6:15:9b:2f:e7:a3:f3:df:cd:49:46:d9:cd:47:
47:cf:48:79:53:73:9b:6e:ab:a4:a1:e3:f3:b5:15:02:11:70:
c3:98:bb:0c:c0:fc:22:82:42:15:26:3e:72:5f:39:9e:63:99:
83:e2:73:cf:87:5b:f7:de:55:db:b4:4a:2c:a3:a0:c4:db:e3:
ff:5c:4a:9f:a3:7b:3e:20:2e:a2:a1:aa:7e:4a:34:35:38:ae:
e7:4b:d5:1e:7c:db:35:46:e2:4d:d6:98:33:19:f2:a2:10:9d:
3a:c2:b6:a7:f7:9d:45:9a:9e:f5:08:7a:ac:ba:c0:ae:4c:e1:
84:6e:7c:1e:0f:b9:ca:26:92:9f:46:37:ce:56:ba:19:0f:86:
d9:43:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:02 2025 by rpki-client