Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
File: 119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa (raw, json)
Hash identifier: nqd0GzWj1KOzemYMGZS+hn1CZ789ItHjbl2NEaVhmno=
Subject key identifier: 20:AD:56:83:DC:11:2E:C5:F8:AF:FA:95:79:3C:0C:A1:53:0C:69:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51B885A7F8A3F0827EF8DBE005F1A3F4A6F6F036
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
Signing time: Mon 06 Oct 2025 18:00:35 +0000
ROA not before: Mon 06 Oct 2025 18:00:35 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b8:85:a7:f8:a3:f0:82:7e:f8:db:e0:05:f1:a3:f4:a6:f6:f0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:00:35 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=a18308d78349b4277a2a4d8417feeffc8c55de181c8aed6433990c34075e8936, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:fa:0c:d4:4b:07:8a:7d:4f:5f:bc:1b:a5:
49:3f:60:5b:f3:2b:1c:32:71:94:8a:0d:9c:57:91:
8d:78:71:fd:ab:00:54:22:e6:67:89:05:ce:6e:3a:
bf:b1:90:8e:8f:80:bd:d8:9c:a7:9e:9a:f9:93:dd:
fd:2a:85:4d:91:aa:0e:4b:55:aa:82:7e:30:5e:07:
3b:9d:0f:f6:c4:77:b7:41:05:66:87:14:05:b1:ca:
ad:27:de:9a:b0:93:32:86:d6:16:f0:7f:f9:e5:68:
f3:3b:45:fc:40:96:87:0b:d1:23:d6:65:86:bc:d4:
b8:1e:8a:bd:85:b9:b3:1e:f1:43:6c:30:ab:86:74:
19:c0:8f:29:0a:c7:a7:7b:cf:9a:e2:ad:ef:71:4b:
c6:61:ad:8c:90:3c:a2:bc:10:f2:3d:39:07:88:0c:
dc:1e:67:37:fe:8c:1c:96:18:a1:2c:49:4d:b9:ef:
09:be:2e:48:3c:da:19:df:fb:75:85:01:8d:83:ca:
66:6f:d9:a5:a3:f4:01:df:a7:d7:a1:21:ce:ae:4e:
38:65:63:99:79:a7:86:ad:3f:82:8a:68:3e:ae:0c:
d9:ac:0a:e8:78:94:ac:44:a8:c1:98:0d:ed:0a:3a:
4c:43:f8:a2:de:eb:da:00:8f:bf:ff:54:c9:6c:3b:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:56:83:DC:11:2E:C5:F8:AF:FA:95:79:3C:0C:A1:53:0C:69:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/119997f9-082e-4cb6-8f1b-7f00bdf9f6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4000::/40
Signature Algorithm: sha256WithRSAEncryption
34:a0:de:10:0c:c6:fc:49:a8:87:52:42:bf:d3:f3:4b:bd:17:
61:4a:a0:97:f3:54:3e:0c:be:f8:64:ac:2d:08:d0:95:2f:b8:
7b:dd:f7:f0:cf:9f:57:70:0d:7d:dc:83:af:5e:35:37:4c:26:
a7:4e:4b:54:80:66:7c:1e:86:ba:63:3c:8c:40:2c:c3:3b:27:
21:10:7e:cc:dd:07:ef:ae:cd:28:80:94:39:da:c1:cd:5d:b3:
4b:ed:28:5c:83:a5:c0:7c:cc:cd:c5:11:64:ca:6c:72:74:93:
64:5a:2f:0b:da:97:5d:49:bd:ce:ab:5e:b1:ac:de:c2:ab:8c:
25:f3:69:33:24:77:44:cb:2e:8b:0d:66:14:0d:91:f9:26:02:
b7:2d:da:ca:84:af:e3:c0:fc:14:df:7d:91:c4:85:41:ec:ec:
b0:41:51:a1:8e:6d:e7:39:ae:b4:49:bd:2c:ca:5b:c1:10:be:
32:ce:ec:82:f4:e8:61:e3:7a:8f:87:bb:0f:de:cd:26:e1:3d:
d6:fd:01:9a:c6:90:d8:a1:3d:ae:9a:9f:9e:c2:15:cd:d2:63:
2b:6d:73:72:e2:6d:03:f3:ef:82:5c:d5:1a:a9:ca:c1:9b:01:
a7:c4:9f:af:b9:87:22:b6:40:d1:13:2e:28:d2:83:15:71:5b:
6b:37:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:37 2025 by rpki-client