Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
File: 4581b00e-602d-4a4b-b191-1af16885c541.roa (raw, json)
Hash identifier: T21DD7RlSbsNtThsmVaeZhmiv+grBf3/xzXGhUGpi08=
Subject key identifier: 52:8C:A4:51:8A:78:9A:43:74:BC:B3:E0:98:00:12:0E:0D:4E:8F:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F197925903E75C740AE5FF843E3E3F4343FE40C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
Signing time: Mon 06 Oct 2025 18:00:59 +0000
ROA not before: Mon 06 Oct 2025 18:00:59 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:19:79:25:90:3e:75:c7:40:ae:5f:f8:43:e3:e3:f4:34:3f:e4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:00:59 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=e54f043157e1ed5fd75b60acd12ba6598ea753960ca1b8e62151b2fc4116a300, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:c7:d7:66:8f:a9:a9:4c:e5:74:2d:a6:66:
bf:32:f9:9e:4c:53:75:21:68:ff:dc:aa:75:d6:5f:
13:89:46:93:f7:64:49:39:33:ec:8b:5e:73:a2:d4:
6f:3d:be:ab:ef:9c:ba:42:c1:60:07:53:49:b9:e7:
57:1e:97:72:dd:81:15:79:14:fa:d2:5b:03:88:f2:
e6:13:0f:ac:8b:1f:ed:92:5a:92:33:c2:7e:fa:28:
fa:d3:68:20:d0:c4:b6:2a:6f:f6:43:2f:7b:76:50:
4e:f3:e8:c9:71:d8:88:b3:3e:33:3a:60:0e:79:17:
e6:e5:e0:ca:e5:09:d7:50:16:bf:a0:84:fb:44:a1:
82:83:c1:78:57:b9:96:40:31:05:4d:c6:ed:7e:c3:
c7:19:fb:37:52:1f:8c:97:80:72:6c:9a:31:70:01:
1b:c3:55:ba:4e:2d:58:7c:1d:ff:6f:13:d1:fe:6c:
f5:36:16:1c:2a:4e:64:d7:bd:04:2f:dd:ad:97:a7:
8e:b7:89:65:b6:44:3b:d7:d8:2c:d3:29:c9:61:a1:
0d:21:aa:ed:4b:d8:d0:2a:0f:57:d7:a6:c6:64:84:
db:41:87:1c:fe:63:86:7d:f5:95:1d:d7:90:e5:8a:
0a:47:60:21:30:36:9a:e6:c2:d5:13:fd:65:54:db:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8C:A4:51:8A:78:9A:43:74:BC:B3:E0:98:00:12:0E:0D:4E:8F:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4581b00e-602d-4a4b-b191-1af16885c541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:5000::/40
Signature Algorithm: sha256WithRSAEncryption
53:22:79:04:b4:d1:64:ba:dc:a7:f6:9f:fd:bf:45:72:38:af:
b2:02:4a:64:07:e9:ab:e7:e5:69:2d:be:b8:77:a4:81:7a:d5:
84:ec:3b:cf:82:55:16:12:55:52:36:8b:82:68:fd:2c:cb:37:
3a:f0:2e:84:96:f6:eb:d9:37:61:8a:9a:8a:4a:36:f9:9c:6c:
b8:72:b6:e3:df:c9:73:c5:ad:fc:29:c0:c7:4e:1c:5e:25:ca:
c0:4e:a4:a6:52:d4:41:f8:e6:d1:0d:7c:39:e9:b6:f7:d3:e3:
d5:c5:20:9d:fc:e6:74:87:6b:84:be:61:b5:9d:12:da:d8:c7:
55:2a:5f:ad:cc:25:6f:04:32:96:cc:2e:3d:c6:a8:e8:a3:32:
93:ef:ad:ed:bd:4b:ef:b6:45:7e:74:c4:dc:66:23:da:d5:f0:
e3:d2:be:3f:22:83:f0:3b:a3:86:b1:49:5a:4c:d8:0c:fc:f1:
0e:e4:8d:ce:fb:5a:ad:99:ae:57:65:c0:55:42:c6:04:08:3a:
97:9e:fc:1e:51:d8:8b:f2:4c:75:68:0f:74:2b:55:06:01:24:
40:c5:25:43:32:c9:4e:38:2e:0b:e2:73:e4:95:90:7d:10:b9:
c1:a8:32:9a:9e:ca:f8:8c:53:1a:f6:38:92:01:a5:50:2d:1c:
0a:53:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:02 2025 by rpki-client