Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
File: 290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa (raw, json)
Hash identifier: oKbmqhtZCI1vykebkImrZzQ4ChsLKlhHZOaKv/A1FJ0=
Subject key identifier: 2D:86:32:06:34:46:6E:77:C4:67:8F:D8:99:1D:8B:3D:34:68:C1:EE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 038EA491A72B4D1D9F4B4EBC47A13650F01DC908
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
Signing time: Tue 05 Aug 2025 20:10:52 +0000
ROA not before: Tue 05 Aug 2025 20:10:52 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8e:a4:91:a7:2b:4d:1d:9f:4b:4e:bc:47:a1:36:50:f0:1d:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:10:52 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=26edbb51f8fb6e7afc844a197e29300e9e66fd9fea2c93a7316dbf803611122f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:e1:67:0e:7e:16:d9:5c:a7:82:e6:8f:c0:
d1:6f:bb:46:29:29:d0:7d:95:e4:5a:51:3f:41:2f:
88:75:c4:e1:18:06:c3:a6:5c:b5:01:45:5f:64:ab:
78:3e:9e:22:06:09:7b:89:6b:7c:18:e5:96:e7:bf:
60:27:21:02:08:85:34:d4:68:e2:5b:c2:3c:c5:08:
d0:b9:94:00:6a:7a:7a:9b:2d:a1:73:c1:3d:68:58:
6e:44:56:5a:08:2d:a5:2a:d8:b5:0a:d1:ee:35:07:
f7:7c:a0:39:f5:fc:1b:52:7d:05:7e:79:8c:52:67:
1c:a7:fc:d6:15:03:22:19:73:c5:c0:cc:16:d7:cf:
3a:75:83:2d:c0:2a:da:0d:25:ff:e7:bc:1a:25:4b:
e4:60:bd:3f:d4:05:7e:19:23:97:5e:ee:30:09:2c:
ec:59:66:62:f2:f3:c5:89:b9:c1:e4:58:b0:b1:b7:
9f:21:39:a1:d7:f4:73:d1:a0:66:f9:3b:3b:45:a5:
86:ad:d9:d0:7b:dc:c4:55:a8:3a:ab:8f:97:99:20:
55:a1:65:23:a2:53:72:04:8e:97:a3:9e:0c:7d:32:
eb:09:da:03:46:0c:19:e4:b3:f5:e4:a6:e8:38:b8:
59:de:c4:b4:2c:05:3a:74:f3:61:a5:4a:c4:e6:cb:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:32:06:34:46:6E:77:C4:67:8F:D8:99:1D:8B:3D:34:68:C1:EE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/290e67c7-7b75-4b9d-abc6-0c3ec34c1527.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b::/36
Signature Algorithm: sha256WithRSAEncryption
50:54:cb:7f:cd:9b:bc:36:31:a5:f7:bc:91:82:49:1e:a8:79:
f3:c4:f3:f4:06:28:10:6b:23:6d:bf:e9:db:b8:08:da:ea:eb:
10:48:2e:57:78:81:2f:26:3c:fa:73:18:c4:1c:1d:1d:b9:65:
9f:3e:bc:52:1b:b2:70:6a:c3:65:02:98:7a:22:c0:fc:7f:c8:
43:47:5e:74:f7:57:b3:e4:9d:47:8e:c8:20:39:48:1f:06:64:
66:f3:5a:a0:d9:c8:62:e6:dd:10:38:96:6f:91:a7:af:e1:81:
21:de:9a:95:e2:0e:47:99:76:2c:66:84:59:97:c6:7b:b2:e4:
c4:e6:cf:ad:0d:bf:9b:1b:e0:e1:df:d0:9b:0a:15:c5:de:12:
45:82:6a:bf:14:e4:eb:f4:44:6c:05:e3:1b:4b:6e:99:b7:cd:
ae:00:37:0f:34:a3:90:ea:a9:3d:89:6b:1c:3f:df:6a:ee:03:
85:50:f4:0e:14:e7:4f:9f:a1:af:7f:94:ee:ea:86:28:47:94:
ec:67:91:b7:38:15:8c:86:24:ed:9f:8a:42:bc:5c:4a:be:7b:
8a:a3:88:56:e2:3d:82:1f:f7:28:17:ee:bb:1a:fa:2b:e7:62:
77:d3:47:28:73:d0:b6:0d:c8:f8:d6:55:f0:19:1c:8a:39:0d:
58:59:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:58 2025 by rpki-client