Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/148468c8-5619-440f-91df-98bc47972346.roa
File: 148468c8-5619-440f-91df-98bc47972346.roa (raw, json)
Hash identifier: F7UyZq8d/PmrMq/P69GkxHoaz3Fg+IN/i0abAU6WzeE=
Subject key identifier: 90:D4:06:B1:D1:85:37:77:64:99:B4:7D:86:4B:08:5E:D3:A1:4C:6B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3710AD68EC615C3BFAF78FD482B6D31707133F8E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/148468c8-5619-440f-91df-98bc47972346.roa
Signing time: Mon 06 Oct 2025 17:40:12 +0000
ROA not before: Mon 06 Oct 2025 17:40:12 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:10:ad:68:ec:61:5c:3b:fa:f7:8f:d4:82:b6:d3:17:07:13:3f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:40:12 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=84ccd473e2d1412a4ded401e820e7e51edc4d8b2d4165f626995e79634770460, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:56:60:a6:48:a3:0d:a6:0a:ee:fe:0f:88:
a2:43:f6:75:3e:f0:ad:15:3c:33:aa:47:3b:85:bb:
38:08:0e:b5:e5:61:6a:04:47:28:a9:35:15:1b:62:
1c:9d:02:1a:39:f4:f4:3e:61:7f:45:86:96:32:f0:
b0:2d:25:88:56:ec:08:25:d1:ed:3b:1b:ce:44:46:
a5:55:0b:8d:9f:44:59:77:93:88:9b:44:77:c1:dc:
95:bf:ec:da:a5:a4:3a:6b:cc:49:60:cb:1b:9c:10:
a6:d5:1a:42:4a:77:b3:7c:26:18:eb:4e:49:31:83:
9c:56:34:48:70:0a:31:9e:6d:24:c8:1a:3f:fe:e2:
2d:09:e6:cd:09:be:68:2f:79:41:4d:a1:3c:04:d1:
02:58:1a:25:8f:d3:7d:3e:23:ea:b5:00:93:4d:a3:
1a:3b:bc:2b:58:79:11:38:2a:45:1f:91:4e:d0:f7:
3b:d6:10:85:07:08:a3:22:b6:a4:63:12:b6:9e:5d:
42:41:9a:67:de:f3:e4:ea:5a:68:a8:95:50:75:06:
50:13:62:2a:dc:b1:ef:31:4a:b7:e0:ab:50:34:f3:
f8:c8:4c:f8:74:01:49:ba:8e:f6:f6:d2:83:4f:33:
f4:62:7f:15:e5:96:20:44:bc:8f:bc:a7:bd:4d:01:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D4:06:B1:D1:85:37:77:64:99:B4:7D:86:4B:08:5E:D3:A1:4C:6B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/148468c8-5619-440f-91df-98bc47972346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
59:3f:a5:d5:fb:45:f2:63:ce:c3:44:a7:05:ae:fd:e7:9c:a6:
20:e9:75:4f:8a:e1:ec:e8:c4:c7:38:33:39:4f:10:68:a7:c0:
cc:53:a0:dc:06:1a:44:32:b0:0d:3a:20:2b:c6:dc:af:63:22:
0f:e8:5a:a9:35:85:26:88:a2:df:c6:c1:3c:08:28:c3:7a:a9:
f9:c7:f6:02:74:17:d6:a2:4a:c8:ad:d2:a7:59:42:95:4d:2a:
13:6c:e6:94:e2:dc:18:fb:64:fd:e0:8f:fb:9f:c8:56:e2:83:
e3:60:9c:dd:b3:a1:0c:fb:21:b5:6e:08:cc:37:f3:5a:6a:30:
be:05:61:3f:66:37:e0:c4:03:e1:98:14:3e:19:79:11:a0:f8:
6f:08:67:0c:4a:fb:ca:bf:7c:95:37:35:2e:78:74:16:b3:71:
be:0d:e8:56:27:76:b9:b7:dd:a1:7c:db:c2:06:a0:a6:0e:40:
02:1c:0e:91:47:6c:0e:d0:04:28:d6:27:54:2e:48:66:12:de:
a0:dc:1b:98:9c:da:e9:9f:42:51:c4:0a:6f:f0:d7:09:79:82:
52:d8:62:e5:3f:1a:e6:da:b1:64:51:0b:b9:fe:d5:8b:3a:77:
f4:c1:ea:d5:17:9e:2a:61:b3:d3:71:ed:11:1d:82:fc:72:0c:
7e:85:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:12:08 2025 by rpki-client