Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
File: 5767e356-231b-4b87-98ab-c496dcc2d53f.roa (raw, json)
Hash identifier: QUoUSDiiOMMIJTFjKpz0eZmyKoYSCkGcbtUZ8usoM4g=
Subject key identifier: 41:90:09:00:F7:64:C3:A7:02:79:D3:51:5C:37:9A:62:F4:41:05:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 054262B3727CB8B028B63BFFFA552AA6BAD37827
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
Signing time: Tue 05 Aug 2025 19:40:41 +0000
ROA not before: Tue 05 Aug 2025 19:40:41 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:42:62:b3:72:7c:b8:b0:28:b6:3b:ff:fa:55:2a:a6:ba:d3:78:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:40:41 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=b3f7983a70bf4f3f7d517af07931211b0954704665259d0262db705813d2de6b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:23:47:88:d8:94:7d:de:bd:74:01:af:90:
9f:d3:4e:16:93:66:9d:9e:d7:ab:14:0c:83:1b:21:
b7:f5:1e:6a:9a:ae:53:f3:fd:0f:02:90:ae:07:e7:
82:cb:a5:76:68:ee:10:de:01:38:27:e9:f8:24:5d:
fe:88:e3:97:be:6b:f9:47:03:55:21:62:ca:8d:cc:
96:54:e4:2d:1c:98:48:83:c7:2a:62:28:b0:7e:df:
e9:ca:32:71:35:2a:ce:bc:3f:fb:d4:67:7c:52:c3:
8e:90:e8:f4:1f:c0:f7:72:94:c9:4c:0c:db:9e:7a:
62:3b:a3:ec:7a:58:38:bb:01:c2:ea:fe:ea:b8:6b:
c2:77:60:91:d4:6f:74:b9:b0:9b:21:7d:99:5a:f2:
6b:57:ce:3b:2e:ec:b4:82:e5:56:fe:e9:88:68:b2:
ed:f7:75:6b:c0:ff:3c:65:ca:b0:9c:72:3c:38:74:
c5:b5:e6:c7:34:2e:74:d1:ab:61:e3:39:3b:22:ee:
f6:00:73:f6:92:7d:04:3d:ff:5c:fa:2f:5f:d4:85:
db:32:c5:7c:d8:af:08:0f:b7:f4:0d:b2:8a:f4:f9:
e0:b5:b7:d3:14:79:97:36:72:3f:82:e5:d6:62:bf:
5c:11:ba:11:31:30:81:f0:7b:73:be:1e:12:4e:8b:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:90:09:00:F7:64:C3:A7:02:79:D3:51:5C:37:9A:62:F4:41:05:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5767e356-231b-4b87-98ab-c496dcc2d53f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:c000::/40
Signature Algorithm: sha256WithRSAEncryption
29:98:62:e3:c3:05:84:45:90:13:e9:09:b4:73:f7:ea:b6:d7:
c2:ea:37:f1:62:d3:d2:c9:a3:bd:1d:83:db:96:21:f9:35:d6:
05:81:ac:bd:5c:7c:b6:1f:60:9d:e2:2d:d0:ee:b6:51:a6:c3:
5d:07:c5:33:49:56:fe:8b:98:30:56:17:17:2a:e8:e2:29:ac:
b1:6e:bb:1c:57:ac:b2:2b:88:50:08:ef:96:c1:b8:f3:75:5f:
03:2c:e7:92:32:6f:e5:44:95:33:ea:e4:5e:7e:be:b5:44:ac:
a7:de:c1:e7:6d:da:73:a1:73:f3:92:85:47:07:47:3e:d5:cd:
36:6d:2c:90:cd:ef:b8:84:ae:f6:bb:59:15:cb:37:50:e3:fe:
14:f9:cf:d6:3a:38:65:1e:99:ae:a4:77:02:72:9a:73:bd:11:
d3:01:48:4f:ff:01:df:fb:35:ef:e5:97:b6:af:7a:8d:a1:89:
9a:6d:02:5b:c6:4e:c2:e1:1b:ec:ee:31:a2:22:cd:0f:ee:13:
a2:7c:42:75:98:f2:da:3c:ae:98:a8:d2:54:da:6d:cb:48:04:
37:9e:1d:5a:96:df:d6:9a:3d:f2:60:60:3a:9a:e4:69:38:57:
a0:ee:fa:86:bf:17:b6:20:24:6b:fe:ad:67:62:ed:b0:6a:78:
a8:05:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:00:03 2025 by rpki-client