Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json)
Hash identifier: LKHJnAHpg+JXjoFr9twOAbdkZrVNcbAgeH/lkkgmkuQ=
Subject key identifier: 04:83:02:52:26:68:2A:AC:EF:83:79:CF:F1:8E:0A:4B:3C:17:C0:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7819DBE3425C7B218ECEFFB4A97D2A06EDF099B1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
Signing time: Wed 06 Aug 2025 00:50:18 +0000
ROA not before: Wed 06 Aug 2025 00:50:18 +0000
ROA not after: Wed 10 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:19:db:e3:42:5c:7b:21:8e:ce:ff:b4:a9:7d:2a:06:ed:f0:99:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 6 00:50:18 2025 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: serialNumber=31b9ba5d5ae836e2484fae023a324ab401210758a6a772b7bc6fdffdf6c8ad3d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:cd:33:b2:f9:0d:1a:8c:fa:fe:20:fe:92:
80:85:d5:85:80:4b:5c:b5:03:c9:bc:f7:cb:89:b8:
ee:ba:e3:56:fd:9e:08:86:c5:c6:c7:b1:3f:13:74:
2d:60:f4:f6:18:f1:9f:73:9f:d7:3e:c2:4a:d4:b6:
fd:87:ea:56:15:47:4a:c0:ad:d8:97:9b:6e:8a:b2:
e8:e2:57:8b:7f:86:df:cd:b3:fe:39:96:1b:6b:6c:
16:05:8d:9b:50:eb:8e:39:26:bc:7f:4c:32:47:9a:
ac:a4:d3:1e:a8:18:4a:38:c5:db:e8:0c:88:72:f7:
42:76:cc:ae:92:b1:96:87:91:72:ad:07:fa:f5:c6:
3b:9c:25:5e:ff:0c:42:49:50:25:a9:aa:01:80:6b:
1e:82:88:af:36:89:ff:18:20:c8:38:e5:4a:a4:c0:
ce:14:22:19:2d:86:a4:b6:33:47:19:63:99:47:5d:
47:0d:96:63:b9:64:65:38:11:c5:f1:6a:75:56:e9:
4e:8b:9d:06:cc:73:63:d6:3b:cd:90:52:45:8b:15:
5f:cb:58:e2:97:30:68:a7:d1:bb:40:b1:bf:6c:da:
39:5d:55:26:00:e9:b3:46:d7:9e:72:5b:e0:f1:cb:
b9:34:07:45:75:a4:83:e3:91:c6:20:5b:22:65:ce:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:83:02:52:26:68:2A:AC:EF:83:79:CF:F1:8E:0A:4B:3C:17:C0:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:fd:5c:64:9a:4f:b4:69:3e:7d:aa:d8:7a:b8:70:ff:12:bf:
eb:91:9f:29:68:7b:ca:46:96:f5:02:04:fe:cd:0b:e9:87:3d:
01:11:14:87:f8:e6:a4:1e:dc:9a:bd:17:d4:49:88:fa:57:e0:
12:59:92:a2:0f:f0:18:77:a9:53:68:1d:fe:fb:79:f1:f2:7b:
d6:8a:c5:14:71:d1:dc:a0:60:70:72:b5:53:68:c6:43:57:b9:
ea:4b:23:2c:67:d5:93:65:9c:9e:6d:fe:a3:be:c4:c6:ff:70:
7f:ce:7f:8a:a7:25:b7:33:61:b4:fe:ec:7d:7d:df:3d:ae:8a:
9b:2b:1c:da:e5:17:e5:2f:c9:06:13:1f:97:af:af:3e:60:27:
14:32:32:d2:52:96:f0:24:76:44:f0:ba:12:fe:02:a4:81:f6:
17:2b:fa:3f:dd:6a:5f:57:c7:02:00:e1:e9:37:87:1e:77:77:
7a:0a:0b:d1:6e:09:3f:c8:ef:91:95:08:1d:fe:d6:69:84:39:
4f:a1:86:8e:28:94:27:be:97:6f:ef:4c:56:b4:87:b1:c4:c6:
e1:02:c5:72:54:a4:6e:83:3f:52:df:be:13:fd:44:bd:c4:9b:
57:62:8f:e3:38:c5:80:1a:8d:a2:10:89:ab:d8:3c:a9:25:35:
c1:32:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:32 2025 by rpki-client