Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
File: 1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa (raw, json)
Hash identifier: 7QYAQ4DNxtTF02S68LYvK6wZa4tPS8Xobot/iXixUtc=
Subject key identifier: 87:EE:6F:A5:8D:02:9F:02:4D:FC:14:6D:A5:45:7B:46:D8:FC:EB:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2020F89EB21C79E99CAE5D00B9A8394897091F8F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
Signing time: Fri 22 Aug 2025 15:10:34 +0000
ROA not before: Fri 22 Aug 2025 15:10:34 +0000
ROA not after: Fri 26 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:20:f8:9e:b2:1c:79:e9:9c:ae:5d:00:b9:a8:39:48:97:09:1f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 22 15:10:34 2025 GMT
Not After : Sep 26 23:59:59 2025 GMT
Subject: serialNumber=9c7869459dc21d1be6caf9a050d93148706907a6afb17a4ef23f036abe4299bf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:82:d4:89:cf:5b:18:2a:e9:a1:47:d2:51:
57:a0:cc:6b:1b:63:a4:dd:9d:95:8b:12:28:17:3d:
c3:73:e8:ca:5c:e5:0e:98:51:ca:c3:ef:a5:6e:40:
fa:57:0f:f9:e3:b1:15:64:2b:f2:2b:ef:86:63:cc:
b5:2f:06:f3:3d:e6:96:51:d1:a6:fe:70:b4:1c:8d:
21:7a:24:2f:7b:78:a4:65:05:c8:ef:c4:7c:7d:ea:
c6:f1:3f:6b:40:06:3f:f1:c7:f6:40:ff:8e:9b:31:
2d:24:f2:42:aa:44:d8:85:3a:16:29:80:d6:6c:25:
35:1b:5a:07:bd:88:08:93:9c:d0:55:02:98:b0:31:
2a:6a:ff:e3:94:11:49:92:4a:b2:c2:28:27:81:42:
d0:11:0a:dc:ac:d8:cb:d1:07:39:de:df:a7:94:cd:
9a:ea:3a:44:d4:4f:aa:79:3d:ee:55:cf:cf:17:0c:
21:f4:3d:41:93:4a:9c:a7:27:f9:9e:23:23:df:ae:
5b:b1:80:cb:fb:12:6d:1a:28:a3:a1:d8:42:de:21:
1a:b3:11:78:17:63:2b:9e:b6:55:d9:19:ff:91:f0:
ed:c1:f7:39:7c:a4:17:5e:d2:c9:38:4d:e3:93:62:
80:7c:ab:13:1f:80:fc:26:cc:a5:93:15:73:7d:ee:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:6F:A5:8D:02:9F:02:4D:FC:14:6D:A5:45:7B:46:D8:FC:EB:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c4d2d14-aa0a-456e-90f4-bdfa21e668f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.128.0/17
Signature Algorithm: sha256WithRSAEncryption
19:56:39:5e:80:80:24:ca:de:18:ae:82:54:1d:32:6b:b4:92:
d3:77:c0:85:fb:54:d6:47:da:ea:c7:c7:d4:3c:3f:0f:4c:36:
93:72:ba:fa:d7:f3:77:c8:ac:5e:f9:ed:d9:df:0b:34:e1:6e:
e9:50:92:ee:f8:f4:f5:f0:97:79:51:a7:1b:05:a0:34:08:2a:
76:4a:cc:0e:b2:15:8a:0f:9c:50:06:23:e7:03:1d:eb:14:06:
d8:90:60:43:6d:27:94:5a:03:d2:ff:92:a1:e3:2c:03:4b:70:
79:82:19:a5:72:28:76:1f:57:81:5f:c1:e8:3f:47:83:15:00:
90:69:62:c8:f5:74:43:44:9f:95:20:96:80:96:86:f5:b4:21:
83:fa:74:1a:4e:e8:5d:63:c5:43:57:11:42:2d:49:c2:a1:b9:
29:cf:28:92:4d:fd:3b:b7:49:7a:02:1b:5d:ef:6b:f9:82:87:
ef:78:6e:24:5a:c5:67:d4:0d:7c:87:0a:41:de:12:08:cb:dc:
d3:14:21:2a:50:ca:3b:f9:85:f6:2c:d5:32:18:3e:73:7d:ca:
a5:b7:b5:63:3c:35:9e:a8:f5:19:1a:aa:ce:b7:c9:7b:09:6d:
f0:89:ad:89:08:ed:5e:9e:3f:df:97:09:e1:15:61:41:53:19:
d4:0e:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:12 2025 by rpki-client