Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3901d4e7-d120-481a-a199-4762783cff5b.roa
File: 3901d4e7-d120-481a-a199-4762783cff5b.roa (raw, json)
Hash identifier: Ufb+nu7Ws5rKY7MQVNpzjBldRH5uvNo4odVpjw5rHCg=
Subject key identifier: A8:7E:50:2D:45:7B:5A:14:80:C7:78:80:AA:21:FE:CE:C7:CC:7B:02
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40318D29D7CB70B093FA4EEEAA31B53D8B121382
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3901d4e7-d120-481a-a199-4762783cff5b.roa
Signing time: Wed 06 Aug 2025 00:50:50 +0000
ROA not before: Wed 06 Aug 2025 00:50:50 +0000
ROA not after: Wed 10 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:31:8d:29:d7:cb:70:b0:93:fa:4e:ee:aa:31:b5:3d:8b:12:13:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 6 00:50:50 2025 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: serialNumber=883135fb39ad9b4ed74f591a4d2358e3af6157944df06f44fc82fcfdae970edc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:14:8c:c0:a6:aa:db:ec:6e:b5:a0:6c:55:
15:5d:9f:7d:5a:ff:27:eb:75:82:c3:e3:78:0a:74:
5e:e1:b4:8a:41:c4:24:9f:a3:8c:57:2d:55:ff:71:
86:a4:0c:ee:e0:67:51:be:48:3d:14:be:b2:53:b4:
e3:c0:f0:e0:12:21:97:1c:9a:92:2b:5a:b9:53:cb:
94:ab:b5:93:2c:e4:90:a4:f5:3a:95:3e:0c:10:9c:
f3:96:b3:ab:29:26:0d:6e:81:ec:3d:7b:df:03:90:
4b:b9:43:c2:ff:8b:10:05:db:1e:42:e1:fa:86:99:
2d:2e:55:9a:bf:ae:16:58:10:36:eb:b1:ce:60:1b:
3b:a5:a3:32:89:3b:68:ce:65:0b:87:68:e8:13:78:
e3:85:35:82:48:6a:7c:27:e8:3d:91:97:1f:39:83:
91:d6:7b:fc:79:e2:c3:9e:01:57:71:87:4d:0e:5d:
be:ef:c7:07:36:29:84:61:3c:1d:05:5b:fa:19:c4:
44:33:04:fb:4f:62:b4:21:df:22:e2:14:42:a3:e7:
e2:76:f5:0f:97:1d:05:11:9d:d5:c8:42:f3:8b:9a:
3c:69:e7:97:00:d2:d1:e2:61:a5:55:05:04:0d:a9:
fa:7c:ce:16:c5:de:da:56:14:20:7f:8a:15:e5:ac:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:50:2D:45:7B:5A:14:80:C7:78:80:AA:21:FE:CE:C7:CC:7B:02
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3901d4e7-d120-481a-a199-4762783cff5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:4000::/40
Signature Algorithm: sha256WithRSAEncryption
37:c3:ee:39:9a:eb:46:fd:f4:64:c4:61:85:4e:c2:4c:9f:56:
fa:ee:33:88:f4:58:f6:f7:07:3f:4f:13:48:2c:ee:ba:aa:70:
fd:43:02:72:71:bf:f7:d1:44:5c:f2:d2:f3:48:28:f9:04:9d:
f9:3a:1b:36:c8:c7:66:1a:63:1c:07:9b:cf:39:42:db:48:67:
19:6c:47:34:cb:23:c3:b0:40:1d:67:be:69:ce:31:1d:2f:76:
58:1c:79:82:a1:c6:cf:aa:cd:b3:23:e2:63:dc:39:c8:69:90:
fe:fe:02:5e:56:cc:57:76:94:b2:61:b0:e5:92:32:38:26:58:
5e:32:90:a7:99:2c:56:64:1c:30:69:4f:6f:c3:f1:ee:75:0d:
76:21:09:f2:ad:3b:e0:9c:2b:ea:3f:84:a7:62:96:6e:4f:f3:
0e:c3:cf:41:40:c9:eb:95:6a:00:58:be:6b:d3:4b:f9:13:e7:
c7:b3:95:32:7d:50:dd:08:c2:74:13:ee:db:e1:d9:fc:18:3a:
11:70:48:c0:e7:5d:d6:80:48:77:9b:97:e3:ed:c2:5a:04:fb:
7c:29:67:eb:fc:cc:52:75:4f:99:f6:7c:11:97:51:56:f3:de:
ab:24:fc:da:6c:d4:8d:9d:ec:ea:00:64:c5:74:9c:da:43:05:
b5:d3:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:07 2025 by rpki-client