Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
File: 375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa (raw, json)
Hash identifier: uaFX6J45zCcewl6vxLHjrFMRokA7v7lN5V98w6e3OBo=
Subject key identifier: 8B:F6:5C:89:70:D5:04:BD:53:B1:C9:13:03:F9:A5:E5:32:8A:59:F1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5FC86D573FD894151BD8D8CA6B536C5FF09356E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
Signing time: Tue 05 Aug 2025 19:40:49 +0000
ROA not before: Tue 05 Aug 2025 19:40:49 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c8:6d:57:3f:d8:94:15:1b:d8:d8:ca:6b:53:6c:5f:f0:93:56:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:40:49 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=157a0002fa606232afceb319c965a5703d5b93d9eba1486ade51fa86c26e79a0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:46:da:9f:8f:3e:8a:63:25:df:89:61:0a:
86:a3:71:70:d1:01:59:a2:82:39:9e:f1:24:58:32:
ad:a5:fa:48:22:a1:4b:c1:41:8f:7f:0a:64:05:a5:
32:d9:09:78:78:40:fb:e2:76:45:4f:0e:01:6d:b5:
f7:f4:de:af:13:f4:59:81:20:df:ae:6f:f0:3b:2b:
f6:7b:af:c5:bc:88:ec:93:7f:c4:cb:32:37:c2:6e:
2c:e5:2d:97:3c:c5:81:97:25:d8:71:ac:29:7f:c3:
ef:51:5f:e0:ff:4e:bd:76:a7:70:7f:b0:da:2c:f0:
1a:8a:ad:ea:45:6b:5b:6c:cd:19:fe:d3:50:19:48:
ec:06:6f:5f:df:7f:a9:f0:30:56:7d:2c:99:7d:03:
de:f9:d1:3b:7f:20:ff:e6:54:9a:1a:e6:1d:d1:12:
02:43:1c:f2:76:ad:fe:66:27:d1:c1:7c:f3:57:64:
d8:58:be:38:07:f7:77:64:ea:48:37:e9:b3:47:da:
e6:03:6e:bf:f0:a2:c5:1d:ce:20:82:ce:f2:ce:3b:
9d:4d:d8:59:ad:99:d5:e1:47:cd:d7:b5:0a:17:e8:
ea:87:6f:ef:3b:ca:36:95:34:6b:83:42:29:55:e9:
eb:70:ef:96:4e:c2:6e:e2:42:b4:04:2c:96:8a:6e:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F6:5C:89:70:D5:04:BD:53:B1:C9:13:03:F9:A5:E5:32:8A:59:F1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/375b2a31-2bf5-49ae-873f-611cb3efd6e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:2000::/40
Signature Algorithm: sha256WithRSAEncryption
87:ad:db:da:fa:bf:8e:1d:1a:0e:99:05:cc:a2:7e:5d:c5:e1:
2a:9f:dc:fd:4e:d7:b5:83:3d:81:57:a1:5b:c1:c3:ae:ef:1b:
f1:8d:bf:21:5d:ed:d9:78:3d:59:70:ba:84:49:27:80:95:e7:
eb:59:f8:5f:e0:97:6f:0b:eb:ee:f9:bf:51:74:b3:92:d4:16:
21:b3:17:e1:ec:6a:bc:ca:82:3a:88:41:b5:b4:a7:dc:bd:42:
fc:43:e7:79:27:76:bf:8e:2f:20:d4:39:36:79:e3:be:53:50:
5b:c8:d5:b5:7d:dc:66:1d:d1:8c:5e:7b:69:f3:1d:4c:2b:9e:
bf:8d:72:67:cc:19:88:76:8b:82:13:4f:18:8e:09:ce:98:5a:
3b:78:2a:49:b4:f1:8a:9d:d5:7f:a5:18:a7:2d:a2:d9:45:75:
f9:27:9a:32:55:09:b5:8b:2e:22:ae:9f:a4:27:86:03:00:5d:
4c:94:43:9f:51:f6:57:23:53:6d:a1:4a:ac:d7:c6:f9:4a:68:
9d:41:c3:e0:e7:75:25:c0:5b:95:4b:9c:b7:c9:80:95:37:0b:
9e:58:5c:fa:71:3a:61:73:19:98:8f:02:84:82:b3:18:a8:de:
14:c2:ae:a4:7a:bd:1e:71:e0:fd:84:c2:1d:a1:a1:d2:12:ba:
e8:d0:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:54:07 2025 by rpki-client