Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
File: 4078cff6-9b34-4f16-903f-c7817d86bf50.roa (raw, json)
Hash identifier: 1A7L7IH8or5m+ZzEuPEUa61p0nI/pZrJTBtOWx3yawU=
Subject key identifier: 70:C2:1E:9C:1A:E2:CC:99:23:84:D1:03:59:51:DF:51:9B:D3:6C:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E6095278E07F4A9730E311F518CC372ADF93CA1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
Signing time: Tue 05 Aug 2025 18:51:09 +0000
ROA not before: Tue 05 Aug 2025 18:51:09 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:60:95:27:8e:07:f4:a9:73:0e:31:1f:51:8c:c3:72:ad:f9:3c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:51:09 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=173d550004995b5e165d68aef40982741943875cc948f400eb01900df298bf0e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:31:b2:7b:dc:83:c8:f9:32:7e:92:ac:92:
05:f4:69:96:91:5a:81:ab:8f:8f:4a:a4:a9:e9:25:
6e:eb:2b:ce:8b:6f:2c:29:1e:47:fe:a3:d9:79:26:
5a:08:bc:7f:26:f2:6a:84:e2:ed:58:9d:56:fd:a4:
91:29:c2:81:75:02:cd:22:69:14:8b:19:d4:a6:5b:
56:c0:24:94:4f:f6:52:71:cb:99:eb:ce:86:38:37:
ae:eb:ac:13:7c:b9:89:84:f1:f6:34:2b:eb:e4:c7:
27:05:c7:78:d7:4f:1f:ec:f2:3a:09:5a:35:7d:fc:
29:9d:ff:ef:84:8d:81:c5:24:7c:d9:74:0e:20:81:
71:2f:11:95:33:5e:e2:00:bb:b3:20:86:ba:76:5b:
8d:79:70:d4:92:07:c6:a4:81:79:65:3e:5b:b6:51:
64:6c:e7:1c:ce:e2:9f:7c:21:ed:42:b2:4b:7b:05:
de:91:92:7b:e2:2a:ae:d7:1e:c5:b5:f5:c0:f3:ba:
e7:d0:77:88:1f:ca:7e:5b:88:ae:3d:06:e3:d7:d8:
c2:e3:4c:cf:02:82:7d:50:42:f3:d4:b7:02:93:bb:
97:8c:88:a8:29:90:98:23:d4:af:f8:49:5e:e3:64:
62:61:af:11:75:9b:20:f3:41:21:66:27:93:61:2e:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C2:1E:9C:1A:E2:CC:99:23:84:D1:03:59:51:DF:51:9B:D3:6C:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a080::/48
Signature Algorithm: sha256WithRSAEncryption
64:e2:f3:d3:60:15:fd:d3:d0:32:65:de:8a:d9:19:87:f6:e0:
74:d1:d5:7f:9c:f5:b5:28:78:2e:4a:ea:24:9b:20:64:aa:5e:
55:06:1f:28:14:6d:4e:a9:44:06:d3:84:71:14:a3:5f:c6:a1:
f1:89:f1:f1:03:f3:52:e2:32:d6:e9:1a:f2:2e:e2:0c:9f:9f:
72:52:6b:63:15:61:50:bc:81:69:35:7a:3c:94:58:12:fe:a0:
a4:2f:c2:29:49:c9:50:9a:68:8d:ef:d6:69:7c:10:87:32:0b:
13:08:06:20:ea:56:ad:99:00:c5:6d:ea:49:2d:3c:22:c7:4e:
06:ad:15:11:58:6e:86:91:94:f0:06:e7:cd:c3:0f:fb:57:41:
ec:a3:d3:4d:d5:cc:7c:cc:65:67:20:84:2f:f9:21:30:af:05:
c3:b6:29:c6:c8:2b:8f:d2:c1:ad:04:cc:76:50:ee:bc:dd:4f:
cf:22:b3:a3:4b:97:0f:40:ce:0f:24:90:03:61:64:b6:58:06:
6a:a8:01:ac:0e:63:5e:fe:e7:27:bd:43:a2:ca:ec:02:c0:8f:
e0:ce:d8:ed:0d:ee:e2:e3:d7:65:69:32:c3:a2:5c:fd:c0:6c:
fe:b9:c2:00:3e:9d:6e:78:fd:15:b5:ba:b7:3f:99:70:59:5c:
e8:42:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:07 2025 by rpki-client