Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
File: 14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa (raw, json)
Hash identifier: +mnZeV0p48Xu1rAty6RAPfm6zqGjsXXek8SHIpvuaMA=
Subject key identifier: 32:E5:5B:45:A6:54:CB:34:F9:74:C9:EE:2A:D5:09:C1:34:35:C1:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51B07FAC212DBFDF6F87D29D7C4D8230B37F5C42
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
Signing time: Mon 06 Oct 2025 17:40:05 +0000
ROA not before: Mon 06 Oct 2025 17:40:05 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b0:7f:ac:21:2d:bf:df:6f:87:d2:9d:7c:4d:82:30:b3:7f:5c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:40:05 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=12429c83fb02da5ac9b39214a28e8fd09c091a0d08fefdd5cb3b32c5a60ff9fd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:8c:37:90:4c:90:ba:0b:11:14:ee:c0:a3:
a3:00:d4:6c:a2:a1:40:21:6b:29:f2:f7:33:3a:3f:
ff:56:11:e1:77:bd:74:5a:24:ad:68:8b:28:39:c4:
a8:8a:e5:23:1d:ff:5e:1a:da:f7:d3:18:4c:45:07:
20:a3:b2:cc:6f:7a:28:78:b0:cd:2f:86:cc:9f:1e:
8b:5b:c1:54:f3:42:f6:a7:48:be:44:9c:c4:f3:c2:
f0:cd:ba:80:42:a1:b4:73:73:7f:8c:73:01:46:54:
47:9d:17:47:26:c1:09:09:97:42:d1:dd:18:7d:df:
1b:4d:4d:ed:aa:2e:de:6e:0a:39:73:88:5a:4b:e7:
f1:da:98:ea:e7:22:21:8c:4f:58:e8:15:4a:75:b0:
f6:be:e8:4f:a5:fd:2e:10:7c:8c:49:73:38:be:83:
e1:52:56:ab:a2:dd:19:d5:7f:a5:e2:6f:a7:5b:bb:
e5:11:fd:52:24:2a:37:fb:8f:99:5a:71:15:fa:ea:
70:05:f3:35:fa:dd:a3:84:fa:bf:c2:0a:0e:c0:c4:
d9:5e:e9:8b:9a:95:01:34:40:e6:7b:7d:bd:f1:47:
e0:fb:90:fe:08:b2:43:0a:78:56:b9:cb:f7:82:1c:
82:d0:52:5c:37:46:4c:de:9c:38:34:0b:30:dc:42:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E5:5B:45:A6:54:CB:34:F9:74:C9:EE:2A:D5:09:C1:34:35:C1:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/14c9e649-eee0-4a0a-a4f3-716c5082d6ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c020::/48
Signature Algorithm: sha256WithRSAEncryption
62:ba:1d:64:3f:26:fe:35:12:aa:ef:20:8c:d9:64:2e:86:bc:
14:b8:c4:62:93:20:89:53:05:85:80:05:0f:04:50:18:5b:cd:
ad:08:ce:a1:32:79:4c:19:c4:b3:8d:82:ab:12:45:c8:97:1e:
ef:e1:1b:09:1b:10:1b:ed:02:a2:b3:1d:0e:18:0f:26:04:13:
54:c3:1e:4f:9c:5a:b6:15:55:2c:9e:99:a8:c9:0a:cc:99:95:
58:4c:45:12:95:b7:82:36:f4:6d:9c:6a:0f:f1:aa:b9:ed:44:
21:16:e6:fb:06:ee:94:4f:96:59:97:af:17:c6:a1:ef:c1:b3:
dc:9d:5f:12:7e:b6:86:bf:f9:53:65:24:2f:af:7f:f2:62:d2:
0e:c6:0c:83:c5:a6:e5:4a:00:41:81:7d:9f:e6:3c:10:1a:d6:
ce:70:a7:09:44:6d:b5:6a:97:ea:fb:ad:ce:c7:aa:1d:9a:e3:
cf:50:7e:1d:8d:41:05:71:20:a4:17:5e:9f:04:97:ca:dd:28:
4c:39:5f:51:f8:93:ed:6c:ca:34:6c:38:91:1b:47:75:23:a6:
7d:78:d5:04:8f:2e:c3:89:3d:61:51:18:b9:77:18:71:be:b8:
a6:49:e0:57:02:e4:51:72:9e:dd:d7:a5:54:9a:0b:0b:3c:b0:
18:f7:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:22 2025 by rpki-client