Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
File: 581266ac-af97-4864-a566-36693b593269.roa (raw, json)
Hash identifier: 6bJTD7gKglpGxOEc/sVI5p/KsLtQ6KnVv0qMEtEfL0U=
Subject key identifier: 36:27:7A:C2:E7:1B:2B:D2:31:2E:42:2C:25:46:C2:75:D0:47:22:6B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CCB74E75A3BC975E20BEC2BA285E7695D968F3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
Signing time: Tue 05 Aug 2025 19:31:32 +0000
ROA not before: Tue 05 Aug 2025 19:31:32 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cb:74:e7:5a:3b:c9:75:e2:0b:ec:2b:a2:85:e7:69:5d:96:8f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:31:32 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=79c01209f8e1308e7fb03c6b92353650a2cf236792e809ef2e6a07f6aa57fe8e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:e1:ff:6c:92:78:a1:d8:4a:89:dd:3a:43:
d3:56:4e:0b:0e:8b:93:13:87:a1:d1:ad:16:51:d8:
65:ef:72:31:fc:2c:37:b0:2d:9a:8c:0b:33:0e:f6:
e0:49:38:ea:c8:d5:6b:37:fa:a8:c2:f5:17:3d:9c:
83:8e:32:e4:04:03:d5:96:f9:2e:af:dc:24:f2:69:
c3:a3:4e:94:9d:70:d7:20:eb:ac:86:fa:1b:89:c6:
74:b3:92:ad:13:36:46:38:cc:50:ff:7f:59:9d:31:
3e:c0:91:ce:97:9f:ab:1b:47:36:64:ca:85:a8:52:
47:25:db:1d:ea:0b:af:14:c6:76:73:72:9e:07:6d:
7a:e6:c1:e5:5c:32:5f:e3:5f:7a:67:b6:fa:2f:f9:
26:21:6a:c6:35:7e:31:10:7f:86:f6:5d:01:bf:0a:
fa:33:aa:01:23:86:ca:d3:4c:20:7f:80:25:6b:82:
47:b9:ee:b9:99:da:3e:d7:f5:db:19:f6:65:d7:66:
58:b4:c9:48:b9:bf:11:a5:75:14:d4:65:44:9f:35:
3a:ef:66:40:3f:73:9b:15:e8:78:eb:97:36:9c:b0:
97:62:90:f6:38:ca:78:d3:ea:60:e6:21:48:75:01:
d3:0e:c7:bb:be:fc:2f:7f:8d:0b:b5:63:41:67:e0:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:27:7A:C2:E7:1B:2B:D2:31:2E:42:2C:25:46:C2:75:D0:47:22:6B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/581266ac-af97-4864-a566-36693b593269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8000::/40
Signature Algorithm: sha256WithRSAEncryption
14:e7:3d:9d:54:3d:8c:0b:70:3c:a6:44:bc:93:2a:eb:8f:a4:
2c:56:71:0e:ef:2d:86:e3:78:8d:33:38:c8:cb:a4:95:78:2a:
52:d3:6f:88:5e:cd:31:02:c0:70:5a:c4:7e:c5:e6:c7:f1:21:
8f:a2:a2:2f:74:06:bd:15:01:e7:86:aa:0e:53:6b:3f:c5:6f:
ff:70:22:ef:f8:6b:97:dd:0e:ae:b5:88:82:e9:d2:29:4c:94:
d4:f1:78:b1:6c:a8:a7:95:0d:3e:a3:05:e9:e5:39:f3:b1:4d:
31:da:8f:f6:88:d1:c6:43:99:6f:80:78:82:4d:de:ef:93:3e:
a2:96:e2:c2:74:2d:88:1a:92:52:4f:5c:81:d0:f7:da:8c:e9:
80:90:d1:6a:c0:69:f7:ae:f7:bd:99:91:fc:79:30:e7:a9:4e:
3d:46:6b:0b:de:1e:e3:31:b6:17:75:c6:ea:e3:cf:c1:d5:11:
50:68:99:ca:c2:6c:c8:08:5f:cd:9b:e3:c7:af:f7:74:f7:1c:
55:7b:90:3f:d6:82:2c:b9:34:d9:1e:2e:b9:c4:19:fd:85:c9:
e1:3e:1d:54:71:e9:9a:c0:59:a0:b4:be:c3:69:21:c6:1e:6b:
98:8f:22:b8:e0:f3:4b:ab:4a:82:1e:41:34:5f:bb:f7:99:95:
a5:6a:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:05:09 2025 by rpki-client