Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
File: 4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa (raw, json)
Hash identifier: h8EFbTyBBheoTjh9d5UXbTHgIxEsui5m/alUKjBlAYo=
Subject key identifier: 46:67:7F:BF:3A:A7:DA:05:EA:FD:05:A0:CF:1D:41:9E:BE:89:89:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25617A92F05C7554C9EB3C093683E6B4CCF62D43
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
Signing time: Mon 29 Sep 2025 15:24:13 +0000
ROA not before: Mon 29 Sep 2025 15:24:13 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d034:6040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:61:7a:92:f0:5c:75:54:c9:eb:3c:09:36:83:e6:b4:cc:f6:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 15:24:13 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=e01b3549d37e94a42cde2c50a9d9c668550c8f9177c0963c5fd41d716b336b1b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:13:c6:7e:1b:b9:38:2c:66:23:29:57:0a:
2b:12:fe:34:52:06:7d:f2:93:73:18:5f:44:15:52:
11:0e:ab:ba:b8:41:b5:ed:dd:db:8d:30:e4:73:21:
04:87:4d:07:b9:11:04:8f:a9:63:96:5f:35:bc:62:
67:b3:9a:44:81:71:e4:9e:53:cb:c0:a2:a0:22:3a:
b4:2a:d4:89:69:0e:ec:51:1f:1b:f7:a6:c0:31:cb:
be:5e:d1:84:4b:1f:16:fe:df:b9:80:c9:ea:73:49:
d6:4d:c2:a3:6f:45:41:0b:92:10:c8:34:7a:d7:03:
cf:8e:f4:e3:87:0a:bf:7d:f0:f7:20:68:d6:43:6e:
17:f9:5b:a3:ac:20:86:93:e6:da:d2:ea:c3:a0:c4:
ed:dc:d4:c5:47:8f:03:3f:f4:62:e4:ea:b9:af:77:
0d:92:55:c9:c6:01:b1:1f:ae:13:0d:c9:9c:dd:18:
80:d2:90:00:8c:f4:0c:ce:59:b2:58:a0:e2:34:58:
a3:06:89:a8:15:5a:60:d4:4a:f0:f1:e1:c6:05:da:
4e:24:d5:a3:ff:82:b7:73:1b:54:1a:a1:a7:3c:14:
a5:0e:8c:28:c2:5e:76:a2:85:d9:cb:da:69:44:1e:
98:fa:5c:31:1d:c4:4e:91:d2:36:a3:4b:42:c3:da:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:7F:BF:3A:A7:DA:05:EA:FD:05:A0:CF:1D:41:9E:BE:89:89:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4abf1b04-0256-404f-a4c7-5d1c2c8ad9b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:6040::/46
Signature Algorithm: sha256WithRSAEncryption
75:65:52:5d:7e:a1:03:bd:50:b6:66:4c:18:8f:5a:ab:ce:f0:
2a:54:87:90:8d:8f:0e:a8:9b:19:bc:c2:3f:21:eb:fa:6a:df:
70:22:be:0b:ce:4c:03:a8:6d:6d:e7:e7:b8:b1:30:07:26:f3:
98:65:59:78:01:1b:b5:46:bc:5e:7c:53:92:6e:67:9e:c2:36:
06:c2:8f:10:62:18:1f:61:24:6f:95:ca:46:28:27:25:f1:a1:
05:ba:52:d7:0c:21:19:c0:d9:6f:fb:42:1b:d0:6a:7a:9a:c3:
87:a3:8c:b7:56:29:71:b6:5b:c9:93:5b:5e:94:37:05:58:92:
e5:b4:22:93:bf:21:26:88:43:ef:61:7a:9f:39:5a:0b:1d:ee:
40:8f:35:51:e0:b5:28:b6:c4:76:5b:e3:f7:19:34:13:bc:36:
26:32:58:cd:29:f2:83:e0:72:f8:0a:73:8b:5d:30:16:59:fe:
1f:12:ad:d5:41:20:47:58:66:31:dc:d0:f9:6b:d1:12:90:a4:
26:a0:3c:73:25:cf:3f:c6:02:1d:79:41:8f:7c:ed:75:41:df:
11:a9:87:48:63:76:4a:d1:75:84:93:a4:eb:9b:19:72:d6:81:
7b:3a:89:02:8a:b2:cb:f7:cf:d6:2c:ec:4e:82:08:62:d0:40:
b1:f6:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:39 2025 by rpki-client