Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa
File: 1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa (raw, json)
Hash identifier: dw/nm80Ea6+VUmXaW3VodUReIXChZxC4CjzBldDYQp4=
Subject key identifier: BB:CE:91:05:17:B3:93:D3:17:67:87:74:BB:2F:91:32:FD:B3:BE:E3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3CAA53C60E5170117CB77038D42A109BD1792A2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa
Signing time: Mon 29 Sep 2025 15:24:10 +0000
ROA not before: Mon 29 Sep 2025 15:24:10 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:60c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:aa:53:c6:0e:51:70:11:7c:b7:70:38:d4:2a:10:9b:d1:79:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 15:24:10 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=b5ac7d4795bf45f9c5ced6415b92c72157dc0a2cc27a8ead6786737069471910, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:26:36:95:61:9b:0a:3e:b6:af:22:16:7c:
1d:7f:67:74:8c:94:2b:b8:48:d9:a0:e7:3f:cb:ae:
8b:0b:f9:65:da:06:20:81:14:59:58:74:ee:df:06:
c3:2c:74:ab:a6:25:61:46:47:26:de:80:f4:26:67:
62:0c:00:6b:ff:ad:97:c9:79:0b:bc:1a:c9:03:a4:
1e:b7:50:20:7d:9b:7f:3c:00:d7:76:79:05:b8:49:
34:79:14:b7:1f:b7:ee:12:4a:2f:ff:84:a7:8b:30:
ed:4d:da:4d:ac:75:42:8f:b6:76:28:c5:98:47:b6:
a1:af:1e:95:e5:08:cc:76:86:7b:7e:87:71:3a:ff:
e6:fe:b3:1f:fa:e8:5c:e6:b1:ca:1f:90:9b:5a:f2:
0b:ff:2c:8c:1b:22:b4:00:4f:fa:49:d0:33:78:03:
b3:d9:4f:bb:09:da:df:28:04:e4:96:a9:a7:07:13:
24:99:8b:61:12:8a:2b:3e:c2:ee:76:1f:da:54:ac:
13:20:78:8f:21:ba:63:f9:3b:77:84:eb:f6:48:96:
3a:31:47:21:4a:9c:be:57:86:2b:c3:3a:f1:53:65:
89:33:a5:4c:7a:da:d2:aa:13:df:a4:9d:6a:32:9f:
4f:f5:71:82:df:46:02:0c:08:2f:d8:16:e6:36:cf:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CE:91:05:17:B3:93:D3:17:67:87:74:BB:2F:91:32:FD:B3:BE:E3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b11a093-87c1-4dc3-b6a7-b701618ae3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:60c0::/46
Signature Algorithm: sha256WithRSAEncryption
c3:64:10:91:58:b6:d4:0d:15:03:8d:91:01:8f:fa:18:f9:48:
06:b8:21:6a:c1:d8:36:21:0b:55:ab:04:63:cb:85:1a:40:12:
b5:5b:06:87:03:3d:30:a8:dd:e1:22:66:fc:a6:4a:4d:8a:e7:
3e:15:18:14:97:db:33:47:be:5c:05:5a:2c:76:21:6b:a5:73:
03:a3:db:24:3e:a4:63:13:33:e6:d0:74:2c:3f:0e:d0:a8:06:
a7:19:a6:18:50:65:7d:06:d8:ec:67:09:9e:b6:24:4c:1e:94:
b2:4e:ef:f3:63:2d:57:68:ee:5b:28:42:62:09:e9:09:dd:87:
72:97:3b:18:92:d5:bb:78:42:ea:e6:a0:a3:05:e8:97:59:bf:
52:a8:2d:c8:7b:e2:ed:f0:2f:bf:ce:13:d8:d1:0c:75:51:4a:
16:d1:6a:7b:81:24:17:b0:c4:25:eb:cb:51:42:48:28:f5:af:
67:90:fb:ef:fb:44:4f:05:f5:32:22:45:f6:97:03:a2:bf:2f:
47:17:fb:86:56:ba:d6:d8:5f:95:ed:ae:e5:60:ac:cf:31:e2:
b2:dc:4a:f0:a6:91:10:14:cd:03:df:67:f0:aa:98:fe:b1:13:
44:2c:86:8e:cb:9e:33:3d:ec:9a:1c:eb:49:dc:f6:3d:8e:20:
36:0d:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:33 2025 by rpki-client