Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa
File: 4622ab3d-f2d8-4bec-a18b-b056342928a8.roa (raw, json)
Hash identifier: Nj+Qsx1NiAiaHAxF+qxDUNPimTh2Dhc260Vzf6fLmeU=
Subject key identifier: F7:78:7E:A1:70:AC:03:9E:3A:69:C1:92:23:90:63:CE:6D:43:11:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 35F487FF820DC07972602B223B6CC25917FD5F37
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa
Signing time: Tue 05 Aug 2025 18:50:08 +0000
ROA not before: Tue 05 Aug 2025 18:50:08 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f4:87:ff:82:0d:c0:79:72:60:2b:22:3b:6c:c2:59:17:fd:5f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:50:08 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=91c700dad6309e2e192821b283f810b2efeba16fc6a05ff4f4ad3d36988625ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:fe:95:24:da:bf:bd:b7:42:5b:7b:61:2d:
0a:94:b3:dd:01:a9:14:3d:a7:9f:0d:de:b6:7b:f2:
43:d9:e8:ff:d9:a4:cf:67:35:c1:19:03:63:12:57:
44:38:67:11:df:6f:e5:be:94:91:38:02:3a:83:85:
b2:d9:2e:c8:31:bb:bd:23:30:44:91:3f:9b:94:e8:
b3:bc:55:cf:7c:1d:e4:c2:af:85:70:f9:a4:b1:a6:
e2:0e:1f:98:c4:62:73:45:d8:90:1b:88:bd:bd:2f:
35:88:45:f0:fb:22:e3:87:61:ad:54:9f:29:ac:a0:
23:d8:de:6d:3a:ec:d8:9c:69:de:81:96:e7:b1:63:
b4:0f:ad:4e:2d:51:44:a7:2b:8c:16:4a:27:6d:b8:
dc:81:f2:63:fa:db:cc:d6:4d:48:d4:2c:e1:4d:1f:
4a:39:60:63:1e:ec:eb:30:a6:a1:39:08:06:e3:c5:
5d:f9:55:41:93:47:b6:5a:0b:aa:00:f2:3d:6c:22:
f0:3e:90:05:7d:d7:70:f8:6b:f4:73:89:c3:cd:46:
7b:d5:b1:a4:54:f6:ae:40:ed:dd:3e:2e:5c:fa:13:
e5:74:ec:f2:c4:15:61:a3:2c:c9:2a:83:fa:93:65:
b0:17:57:8a:63:22:f0:6d:04:3c:62:c1:b1:6c:cd:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:7E:A1:70:AC:03:9E:3A:69:C1:92:23:90:63:CE:6D:43:11:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4622ab3d-f2d8-4bec-a18b-b056342928a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a080::/48
Signature Algorithm: sha256WithRSAEncryption
67:9e:e3:17:12:82:f3:75:47:5b:9e:78:19:ee:ce:b6:23:65:
f0:ef:59:9d:ad:ba:d2:c3:dd:94:ad:8d:ce:12:2b:05:5a:27:
6e:8a:9d:74:90:11:99:2d:e8:2a:54:ed:1c:b8:77:ea:6e:5c:
44:d5:10:cb:86:eb:70:2e:be:95:34:f5:1f:40:ca:63:fa:09:
dd:4c:46:04:87:15:7a:60:d4:c7:27:3a:d4:90:af:88:e5:85:
24:d1:00:33:67:2d:56:d9:25:8b:a0:32:ac:56:4d:56:e8:55:
a1:16:69:40:2c:71:ee:0c:0d:be:d3:ae:61:e3:31:31:4c:56:
9e:00:95:0a:99:33:5b:2f:87:04:ab:91:19:f8:15:59:3d:87:
2d:46:bc:7e:4c:a5:23:d8:3c:7d:e7:03:19:c5:99:03:d0:c0:
9a:54:23:8e:d3:0b:74:2a:4f:ed:5a:35:f9:9e:c1:10:6b:80:
09:f2:e1:9b:b3:83:f9:44:2c:5b:a0:99:4b:7d:cc:77:23:58:
a7:14:cf:c5:b4:8c:25:f3:47:89:08:f5:b7:5e:1b:16:d4:af:
56:d7:42:e2:cf:bf:6e:0e:5f:38:f0:46:e7:0e:a5:92:9f:71:
4b:f1:2b:e6:00:71:54:5e:b6:aa:f0:99:ad:64:9e:ae:a6:f4:
65:2b:ba:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:57:12 2025 by rpki-client