Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa
File: 4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa (raw, json)
Hash identifier: lBIKQB+3ib+NnNqDbQTwelgdAEFN6vew5wP/MJji/Nw=
Subject key identifier: D3:4F:44:0E:D3:3A:BC:93:14:F7:3A:8D:EC:62:C7:95:0C:01:C7:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32D2A5B7D2835AFCB82CBD514274AC95D4DFF666
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa
Signing time: Tue 05 Aug 2025 19:40:53 +0000
ROA not before: Tue 05 Aug 2025 19:40:53 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d2:a5:b7:d2:83:5a:fc:b8:2c:bd:51:42:74:ac:95:d4:df:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:40:53 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=85ea28913014e32b7d0173124940e72478c96c2a3499b2d5e52ab40b652c6acc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:98:b9:1e:ac:e4:9e:6e:5b:f3:89:61:cf:
96:8a:fc:8f:e7:8f:fc:8a:33:7f:4d:df:ba:b0:f6:
45:f0:a3:95:1a:9a:f1:08:d3:21:b1:9f:5a:1d:cd:
d4:51:db:bd:4d:aa:86:65:e4:50:4f:6f:ba:0f:57:
66:fd:18:2b:55:76:25:38:c8:8c:cc:57:34:47:04:
72:75:eb:15:83:5b:4a:3a:52:55:92:f6:92:7e:6c:
b5:da:76:27:87:f9:74:44:0c:76:7c:5d:63:58:46:
ca:40:e1:38:1f:6a:93:48:5c:fc:4c:52:c2:52:9b:
85:ca:4b:e8:2a:ca:19:b6:72:12:be:0a:6a:c7:38:
65:0b:a0:57:7d:d1:e1:3e:bf:30:d3:cc:54:6b:fc:
10:59:2d:5b:bd:a7:e8:00:9c:28:00:3c:d7:6e:0a:
fe:13:fc:d0:38:74:73:93:eb:9f:ae:d4:78:b2:29:
02:e9:04:64:62:35:d2:dd:24:31:39:c3:a3:25:8f:
d7:19:bf:ab:69:0b:a4:04:7b:cf:0d:42:5f:d5:71:
d2:94:f3:87:1c:39:7a:fb:2b:2c:ef:fa:e4:74:f3:
ec:67:22:6a:ed:fc:22:49:bf:35:17:da:d3:52:e6:
59:0b:aa:13:19:09:2c:77:38:8d:49:fa:78:59:89:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:44:0E:D3:3A:BC:93:14:F7:3A:8D:EC:62:C7:95:0C:01:C7:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b6ddca7-172f-4f0e-9a83-9a359f62c43d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:4000::/40
Signature Algorithm: sha256WithRSAEncryption
68:17:a7:6c:08:56:7b:6c:0f:c7:01:6b:0e:ff:6f:d8:c6:0c:
59:9b:61:4d:05:de:c0:9e:ba:ba:63:bc:1b:91:ba:66:95:8d:
59:b4:05:a5:46:2a:95:79:92:67:e5:5e:0e:72:62:93:8c:fc:
dc:4e:1d:3c:60:4e:bf:93:24:e1:74:b9:0d:b8:50:5e:20:9d:
d8:88:98:50:29:4b:80:22:be:7a:1e:fb:1b:3d:bf:98:ee:5b:
d9:99:8a:14:3f:e9:5d:57:fd:14:b3:28:5c:35:40:6d:a5:76:
13:30:f2:29:34:c9:d9:68:ea:1d:d4:4f:e4:5b:26:97:ae:ab:
05:7d:e0:31:8d:f7:1a:88:66:ed:d7:fb:82:2a:91:3b:bf:ae:
48:dd:63:c6:f2:a0:58:d5:f0:54:04:a9:da:2e:18:64:24:ad:
45:2c:83:fb:cd:7c:49:f2:78:be:f5:b7:d7:43:4c:22:4b:f3:
5d:e1:7b:de:1b:15:12:53:64:c9:78:3a:5e:cb:df:6d:0f:6f:
d1:18:63:40:cd:42:b7:e0:74:0e:63:1d:53:b0:c7:e0:1a:bf:
93:b7:70:7f:61:77:d6:55:e7:3e:81:a2:22:de:36:b3:65:7c:
b9:28:cb:c2:e6:e9:89:bf:34:d7:98:25:dc:81:ad:62:bb:0e:
23:e9:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:51:43 2025 by rpki-client