Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json)
Hash identifier: N30jnh/MFjZTF1TVhUf2i2bXreBn4S+KbW3mkRFo3wo=
Subject key identifier: A3:E2:19:1E:5B:71:E7:9C:9F:8D:EE:2C:52:1C:32:91:82:56:DC:4D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D5781B85460A17D42ED7139BB4F5E7B0E8F458D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
Signing time: Tue 05 Aug 2025 18:41:33 +0000
ROA not before: Tue 05 Aug 2025 18:41:33 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:57:81:b8:54:60:a1:7d:42:ed:71:39:bb:4f:5e:7b:0e:8f:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:41:33 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=7906f875e0e33299cf21528e3a795eec42141977e53abc21d4032d3992a340d0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:50:05:c7:d2:9b:38:e1:ad:46:b1:62:6c:
1d:59:79:8e:1d:1b:8e:55:af:70:5d:90:2e:77:c5:
3b:07:ff:7f:f6:5a:ea:32:d6:0f:0c:81:6b:62:e0:
6c:a6:fb:a3:e0:c8:ef:bc:65:5e:55:e1:e0:8e:30:
19:be:a8:63:c7:c1:bb:ba:88:41:e5:e1:9a:c6:0a:
45:4a:a4:92:c2:19:8d:60:79:f0:a5:3e:7d:ad:30:
f2:54:83:60:2b:52:ec:51:12:a0:eb:be:d5:16:81:
67:d1:e3:87:d2:4d:25:36:bd:e7:4d:35:b9:02:c0:
3f:b5:91:e8:12:80:5f:50:a3:c7:41:a2:01:58:f3:
0c:2b:5c:ba:b0:d7:c9:8f:bf:7b:f2:1d:2d:32:94:
15:90:6c:bc:87:9a:2c:d7:08:57:b6:7e:14:09:1d:
94:9e:08:e2:3b:bd:cd:9e:ea:a7:68:2d:1b:fe:00:
33:89:0a:8b:10:a3:88:e7:d8:57:74:da:f7:84:1a:
ad:4d:35:0b:09:e0:08:3e:ef:73:b9:e9:07:f2:65:
1b:3d:fd:20:fc:ec:a5:e3:02:01:9c:d3:7a:c1:5d:
be:f1:f3:57:b9:41:65:94:36:84:4b:55:7c:70:0f:
b3:20:66:20:e7:c8:5a:16:a4:da:3c:ae:8c:b0:3b:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E2:19:1E:5B:71:E7:9C:9F:8D:EE:2C:52:1C:32:91:82:56:DC:4D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:07:36:a8:45:27:16:1c:15:24:16:3a:3f:1a:29:44:f5:cd:
f5:46:aa:88:c8:87:32:6b:43:65:46:0c:ca:c2:41:c7:fa:3a:
6a:a0:61:2d:d1:84:de:4f:92:21:9e:06:1e:4b:1e:9d:01:cd:
84:64:bc:0e:83:f6:eb:34:43:3f:f2:b9:a2:62:fd:07:5a:de:
5d:94:29:d6:96:41:20:21:60:f8:fc:19:3e:c9:f4:49:de:7b:
a5:9d:e5:ba:29:05:0a:61:36:2e:d0:f7:6b:4e:91:3e:ed:4b:
ce:15:3b:48:3e:29:54:8e:a3:43:d0:84:1d:9d:ed:0a:d5:bf:
56:ee:ab:b3:f1:a6:78:03:c0:f0:33:ba:be:09:74:40:11:9b:
ed:37:15:13:11:af:8e:8b:6f:73:c4:39:31:9c:45:ef:5c:ea:
a1:9e:27:03:f5:8d:a2:1a:f4:2c:80:b0:fa:a7:ca:03:4f:46:
01:9a:0c:fd:bd:f9:37:0e:1f:d0:66:ee:a1:0f:94:17:60:29:
f0:f8:2b:29:df:24:14:5b:45:9a:69:51:34:a8:4e:97:6b:3c:
c0:bf:78:f4:75:05:0a:87:bb:9f:80:e5:cd:1b:ed:9c:42:c3:
6a:61:64:1a:5e:35:76:d3:40:07:d6:73:fb:7f:fd:80:d8:a2:
79:f4:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:15 2025 by rpki-client