Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
File: 470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa (raw, json)
Hash identifier: ZjJVAZOTCQvA90k9rDAiZ2O8E+zHV8EKliRFkNq0j64=
Subject key identifier: D2:87:53:9F:F1:56:9B:08:DC:E0:EC:F0:08:B1:20:CC:76:45:0F:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A2A771EBB8678BD8AB3DC343B174A328AE05B1B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
Signing time: Tue 05 Aug 2025 19:31:29 +0000
ROA not before: Tue 05 Aug 2025 19:31:29 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2a:77:1e:bb:86:78:bd:8a:b3:dc:34:3b:17:4a:32:8a:e0:5b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:31:29 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=0979bdc1bdb9523f6cd373b9e9a8e60cc86c983a06e82569c551ba12f94abd40, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:d4:c9:f3:51:29:be:b4:be:41:bf:93:64:
ba:2f:2c:46:cc:57:6b:7e:ca:c9:23:7c:c4:d7:6a:
03:56:51:e3:37:ef:b3:d1:b1:9f:ce:76:0c:4c:42:
a8:df:9f:cd:0a:5d:86:a5:fd:b8:d7:6b:2f:b1:be:
cb:d1:c2:ed:d1:26:a3:11:60:46:da:94:5b:26:e1:
a1:cd:51:a5:94:8e:ce:17:79:bc:a8:9d:1a:92:21:
97:da:6e:95:80:8f:bf:a2:cb:b6:9d:2e:03:64:cb:
a1:80:90:2b:c6:39:18:c7:96:b2:e1:e6:d6:68:2e:
e7:0f:c3:d6:72:57:99:a0:0d:9a:b5:43:a7:ae:56:
a4:4e:7e:bb:3f:1d:55:55:bc:e0:34:b8:61:0a:2c:
d6:86:b2:15:85:5d:2b:16:c5:9d:6c:ad:b6:96:7f:
a0:dd:82:dc:b6:5f:ba:10:90:2e:89:cb:f6:47:87:
83:0e:da:b9:08:54:ec:5c:97:7a:18:e4:19:b4:a6:
b3:e1:63:3e:bb:76:a0:81:cf:4f:15:74:b8:83:3a:
7d:94:1d:84:f1:85:72:fb:b7:95:98:ae:37:cb:35:
e6:9b:e2:df:1d:47:36:8b:85:99:b0:8c:42:3c:07:
a9:bc:6b:d0:23:00:cc:ee:d0:62:9a:93:aa:7d:3a:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:53:9F:F1:56:9B:08:DC:E0:EC:F0:08:B1:20:CC:76:45:0F:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:ee:04:9d:82:36:e8:bd:fd:47:2c:af:7a:da:4e:91:cf:cb:
74:be:c0:37:aa:67:42:29:92:06:34:6d:4e:64:c7:47:9e:ae:
5d:54:6c:16:cc:2d:c4:65:4c:91:9d:92:72:03:00:0a:b2:ad:
25:8f:db:f7:36:40:aa:d8:d2:61:02:b2:23:30:d7:ce:47:65:
5c:26:1d:c8:46:b9:f3:52:80:c8:b0:24:31:71:40:a6:7e:50:
85:2a:95:83:a6:54:6a:90:76:b3:eb:ed:e9:d2:08:7a:52:08:
ba:6d:05:aa:e5:7e:a4:1a:b9:21:6a:5b:38:e3:ea:93:73:54:
79:bc:e4:f6:9f:6a:cf:7d:4f:8d:d5:99:e9:45:11:5c:12:a4:
42:53:bc:52:e9:33:a1:b6:75:4e:17:42:11:18:59:8a:9d:26:
3c:78:97:53:a2:90:41:72:51:0a:12:91:d2:be:fb:2f:9b:48:
92:22:3b:eb:b2:18:2c:32:20:26:f9:05:45:6a:25:9d:bd:a5:
d1:66:c3:38:dc:25:f5:81:1d:24:76:82:d7:1a:3c:37:4d:39:
ea:b2:83:ee:39:14:d5:7c:f7:d4:58:76:5f:a5:c9:f5:7d:2f:
42:48:f5:af:53:be:c2:5e:73:5c:52:e5:df:d6:10:a0:39:0c:
79:8f:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:25 2025 by rpki-client