Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
File: 33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa (raw, json)
Hash identifier: CBU3k+VRxLpkO28fF5L5eprOn+DOQ24HvVuBLF/Gk1U=
Subject key identifier: 10:87:DE:B2:6B:6A:FE:44:DE:D7:D3:33:05:31:CD:DF:0C:73:00:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0FCE3E458A1AEE5570426E16FC0E55983F9BCB6B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
Signing time: Tue 05 Aug 2025 20:10:45 +0000
ROA not before: Tue 05 Aug 2025 20:10:45 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ce:3e:45:8a:1a:ee:55:70:42:6e:16:fc:0e:55:98:3f:9b:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:10:45 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=0aac1dc40c3594d96dde49c72b3273b92841d8436678efb4becf0f451ba13309, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:50:af:00:e8:07:2c:f5:47:0b:ad:be:a9:
b6:12:c7:ac:7b:b2:72:03:f3:07:e0:16:9e:6e:be:
df:04:ba:16:47:10:db:68:20:be:c5:4e:2b:89:1b:
5a:3e:ee:9a:a3:b4:ea:fd:01:39:d5:03:98:99:b7:
cd:83:8c:e4:93:79:f6:89:ec:35:eb:36:a8:d2:da:
14:9d:3e:fc:25:5e:61:9f:78:d0:30:ac:6e:d7:ef:
fa:4a:f7:5f:6c:3c:e3:c3:73:e1:d6:6f:c1:27:62:
9a:cc:e2:9c:10:00:60:81:34:1a:d4:ae:f0:4e:29:
35:a4:8a:4b:c9:0a:e6:f5:97:59:9f:60:6b:1c:10:
50:b2:5c:46:74:11:d8:f1:c4:47:a2:29:83:10:12:
8c:be:ac:9b:a2:cb:14:ef:51:51:d6:78:98:94:f2:
56:65:9f:2f:94:ae:3f:18:21:42:d8:df:f7:b1:96:
6e:80:07:69:70:97:13:2b:94:a6:68:4f:b8:a6:8f:
0a:3a:8c:4e:ea:dd:9b:da:af:4d:d9:31:00:f1:5b:
d7:a0:94:66:42:64:ba:3d:09:29:da:aa:cc:c2:3a:
3f:a8:93:00:54:6e:20:3a:19:29:92:09:17:88:a5:
4f:4e:e9:3a:20:f6:8f:f3:1c:fe:b8:03:d1:78:dc:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:DE:B2:6B:6A:FE:44:DE:D7:D3:33:05:31:CD:DF:0C:73:00:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:800::/38
Signature Algorithm: sha256WithRSAEncryption
a7:ab:89:e0:be:3b:26:d3:be:82:db:55:02:2a:75:31:0d:4c:
75:ca:14:bc:25:b7:f4:d9:85:b8:4f:7d:96:9d:39:8d:ba:4b:
ed:0b:8c:62:b4:d6:cd:a4:57:f9:da:18:90:0b:9e:75:54:df:
5f:23:27:d2:bc:cd:1d:12:e1:43:ed:bb:78:b3:fb:3e:02:20:
f9:e0:47:3e:9f:0f:de:35:14:7a:32:6e:91:c5:d5:bd:4b:3d:
68:39:42:72:1b:9a:8b:1e:3a:02:1f:5d:00:6c:32:12:99:eb:
b5:e0:bf:cb:f0:4f:3b:07:03:a6:85:a5:df:59:15:07:5a:b6:
1c:b7:14:46:c9:d2:1c:ce:35:28:19:83:a9:88:83:f8:ef:dc:
69:cc:7f:e4:de:71:04:cb:0f:e5:86:e0:fb:c0:27:8f:e3:ee:
85:2d:37:85:df:8b:3b:39:2f:ae:e5:b7:f4:76:1c:21:ac:21:
e0:d2:20:ad:5d:3f:df:66:51:35:88:21:83:2d:99:14:ca:7d:
0c:51:0c:8f:13:1d:9e:ce:43:56:c6:7f:ac:18:c9:b7:b4:6c:
22:8a:57:32:61:11:dd:9e:47:67:78:a4:5a:c2:54:c4:7c:e7:
a8:7d:fc:ed:3c:b4:78:63:3e:61:7f:1d:79:0b:2e:d8:bb:cb:
05:68:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:47:14 2025 by rpki-client