Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
File: 1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa (raw, json)
Hash identifier: 3zpivYVuU7er/jYtYVTKSnJ49Yt68T8pu3o0CEAmOv4=
Subject key identifier: BC:DF:5C:78:A3:EA:9C:4A:F3:9B:B2:C7:65:B3:FF:05:36:0C:D3:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6EB0B4482F3662BE447BEA4375F4A786E25B61C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
Signing time: Tue 05 Aug 2025 19:21:12 +0000
ROA not before: Tue 05 Aug 2025 19:21:12 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b0:b4:48:2f:36:62:be:44:7b:ea:43:75:f4:a7:86:e2:5b:61:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:21:12 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=ba13467a12f52749252f81d7ee08d62a5a38372beeeccf0b6fda845e5dd4d4bb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:9f:89:6e:92:05:bb:ed:ca:4b:a2:cb:21:
2f:c7:59:c0:56:49:fd:aa:f5:60:f8:41:e6:52:39:
a5:aa:04:e6:8a:13:89:c3:1d:06:66:6d:d7:5d:f8:
d3:5f:c8:6a:b4:e2:a0:0e:68:fd:75:e5:08:1b:aa:
8e:74:1d:6d:95:d4:72:98:29:3d:88:63:7d:59:3b:
1b:8a:68:f5:e0:78:64:ad:24:0e:e4:9f:ae:4f:b2:
c1:30:5b:29:e9:29:0a:8b:13:02:97:96:05:53:f4:
64:34:e3:df:d4:10:f4:df:dc:60:ac:b6:18:d7:83:
2b:2f:97:02:4a:b8:ca:4e:3d:eb:da:55:0f:ed:1c:
2c:f8:ca:31:cf:be:72:eb:31:72:a5:13:ea:6c:a4:
fd:65:d5:70:d4:6b:a7:59:99:ee:93:99:a5:8c:53:
1a:db:d0:3c:cc:02:72:01:8b:c3:6a:47:70:7a:8a:
1e:eb:e5:77:1c:9b:5e:60:2d:34:ae:f9:d0:e0:70:
30:ad:2e:64:77:88:e4:7c:6f:5b:e8:bb:95:eb:e0:
cb:90:bf:36:ce:88:f7:96:36:03:d0:31:21:21:b1:
3d:9e:2b:24:f1:cd:01:4d:5a:48:36:76:99:9d:37:
bb:bd:47:ff:e3:19:b6:b3:af:e2:fe:3f:0d:d8:c3:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DF:5C:78:A3:EA:9C:4A:F3:9B:B2:C7:65:B3:FF:05:36:0C:D3:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a8d9e14-cfa9-4400-afa8-b8c0d9eee4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8080::/48
Signature Algorithm: sha256WithRSAEncryption
ad:82:db:fa:b4:17:e5:74:46:81:72:d0:a5:5f:81:19:f5:d3:
1d:88:45:08:8d:7c:69:32:cd:4c:2f:58:91:ba:ee:37:fc:28:
8a:57:53:18:46:5a:cf:91:a2:98:c7:60:9f:2a:36:24:fa:d9:
e6:5b:55:77:b7:8b:84:90:c2:b5:ef:14:7d:ba:81:89:bc:4d:
ff:67:5e:3b:38:03:7f:03:f4:fa:c1:79:89:11:4c:25:f4:a2:
ab:9b:87:f4:97:ab:63:0a:f5:9e:77:00:f4:89:83:ca:03:b3:
b7:c2:f2:8b:63:bc:b3:15:6e:5c:71:83:bf:27:4a:ad:55:b7:
d1:02:fa:13:dc:1d:91:95:50:ea:68:94:4e:8e:5c:7c:18:9d:
c0:a4:df:53:9d:5a:b8:c8:b1:fc:25:fa:5d:53:c8:2f:8a:91:
ad:fb:62:2d:49:96:a6:8f:51:55:3a:f4:ab:2a:70:ed:aa:d5:
9f:ed:02:b8:d5:3d:95:73:bc:f7:06:25:04:ba:8a:24:38:2f:
40:8a:14:ed:db:09:44:dc:b9:44:0b:56:ec:f6:f7:77:a8:57:
66:e7:41:1d:14:88:39:a9:fe:73:75:b0:3f:be:e6:52:ad:3b:
36:88:41:d5:21:33:1b:11:31:83:28:02:3f:4d:80:a2:04:82:
cc:a3:a0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:46:58 2025 by rpki-client