Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
File: 4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa (raw, json)
Hash identifier: JB+UlzuH/Y1gkZ/BkfXWbpshkJg8pGH4kpqY+gAkPi8=
Subject key identifier: 16:94:2C:66:CA:71:95:89:94:69:21:3E:05:AF:6A:0B:78:4D:9D:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71E007A106DC793C16942DC80C7F4F81FC70DE01
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
Signing time: Tue 05 Aug 2025 20:11:33 +0000
ROA not before: Tue 05 Aug 2025 20:11:33 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e0:07:a1:06:dc:79:3c:16:94:2d:c8:0c:7f:4f:81:fc:70:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:11:33 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=81d9530a883f0b691062d4d985b1b997ed7b5e1fdfd9868d135b708a8dda620f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:3f:26:57:89:58:89:06:f9:9e:38:d2:ec:
10:20:ba:6c:1e:41:e1:9d:e9:10:27:45:f4:39:5c:
75:4a:7f:be:e4:e5:92:dd:4c:63:6b:d3:a7:4a:ff:
da:c6:91:bb:93:90:b0:b8:e9:11:cd:ae:a3:b9:20:
41:e9:3b:10:01:02:b6:be:b5:30:4c:51:44:0b:d8:
cc:2a:2e:88:d5:a3:9a:c9:ce:26:fd:ac:30:c9:0b:
ef:69:c3:48:c5:26:26:e8:7c:bd:47:2a:09:00:98:
4b:ac:e0:09:de:11:e8:b3:f2:f6:72:f6:48:42:4d:
7f:f7:d6:13:fb:49:65:8a:4e:50:8b:5f:e2:9d:ea:
35:b9:a9:1e:dd:d1:32:cb:06:f2:73:94:4f:11:c2:
e1:62:80:87:ec:99:3f:d1:66:db:d7:07:bd:aa:a7:
47:4d:a4:d1:1b:ac:e8:c9:e4:d8:c0:e9:b0:36:80:
ca:f3:c5:f2:a8:f7:65:39:f8:c2:3d:65:54:7b:9d:
6f:26:dd:26:88:25:ed:c8:82:33:07:8e:71:d5:2f:
d6:23:05:e3:64:bf:1b:35:04:ce:d3:54:4b:ad:b6:
b2:43:84:ca:f3:fe:4e:d8:48:0f:e6:5c:93:6b:4f:
93:06:ba:27:8e:69:09:0b:8f:1a:72:26:2c:6f:e8:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:94:2C:66:CA:71:95:89:94:69:21:3E:05:AF:6A:0B:78:4D:9D:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a077699-48cb-42a1-9f1b-1e7c9a3ae808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:400::/38
Signature Algorithm: sha256WithRSAEncryption
3b:e6:6a:3b:8c:0a:8f:8e:22:f7:8d:0a:8b:1d:d2:a5:da:99:
4c:bb:db:4d:1c:ce:11:3a:7e:a2:cb:fa:46:60:6d:2c:9b:00:
16:78:21:d2:40:d6:5b:8b:36:2e:27:c3:b6:d0:a9:ec:7c:e7:
68:e8:e4:1c:4c:07:c0:da:8c:74:eb:29:9f:cc:92:30:5a:40:
17:18:a7:88:d6:63:4d:f3:49:46:f2:e9:4f:76:ac:20:18:25:
c0:53:3f:65:2c:39:36:2f:6c:cd:26:e3:37:68:6b:9e:08:59:
71:12:d5:0e:49:fe:d3:73:35:a2:65:a8:14:2f:70:e6:27:ef:
9e:89:c1:c6:bf:1f:cf:3e:94:26:bd:11:fd:a2:97:ce:02:8b:
e5:d6:78:b4:4c:06:7e:a5:8d:4d:58:61:84:bb:b5:b9:54:d5:
6e:50:f9:a9:4a:c8:e6:b1:26:84:38:1a:97:53:37:30:47:01:
6f:80:9c:d4:7a:32:19:6a:4c:28:b3:cc:a7:fc:f2:41:c3:1f:
67:63:81:c9:6d:07:61:01:aa:bd:cc:b0:58:3c:d0:23:35:11:
a9:da:97:48:65:b2:a8:64:a8:02:dc:48:5e:b8:20:35:ad:b2:
ca:da:fd:af:b5:37:44:fc:c3:98:54:b8:98:c2:c0:cf:54:68:
71:80:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:50:50 2025 by rpki-client