Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
File: 58699fff-50fe-46a7-8e85-38dbafe34c1b.roa (raw, json)
Hash identifier: ucvG0P0o3smjefpCUmQsbd696jD+bnRc2kUgqflFhRs=
Subject key identifier: D5:D8:F6:65:84:A7:EC:9A:92:A2:DC:BE:26:76:D0:AB:C7:C1:E9:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 795A4FC763AE5C158766B85F3CDA9CCD24E07FF5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
Signing time: Wed 06 Aug 2025 00:51:15 +0000
ROA not before: Wed 06 Aug 2025 00:51:15 +0000
ROA not after: Wed 10 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:5a:4f:c7:63:ae:5c:15:87:66:b8:5f:3c:da:9c:cd:24:e0:7f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 6 00:51:15 2025 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: serialNumber=7a29351c6a70c7340b79b8ab65b995ce443311d3adb3911cdb6c931ff143f33c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:28:5f:6c:c0:ae:61:06:ca:4b:41:3c:d1:
58:84:dc:43:c7:dd:89:5c:53:9d:a6:47:f0:31:97:
72:a5:b2:ad:e4:73:0a:8d:e7:45:69:e3:76:8d:44:
67:e5:f3:4a:9d:4d:e6:61:5d:30:08:19:de:3e:bb:
4e:b8:14:3b:fc:b6:0a:c4:c5:cb:4e:7f:0b:aa:1c:
69:38:c1:fe:a7:10:c5:66:3a:62:39:49:d7:03:cd:
c1:24:dc:f6:36:86:d6:26:28:a8:8d:c4:87:22:a2:
9e:2c:d7:fe:21:14:d8:1d:a1:2f:fc:91:59:fc:b5:
e2:92:09:05:fc:d5:36:7e:42:a7:9e:e3:18:5b:54:
d0:bc:1c:6c:48:d8:a6:8b:b5:48:85:7e:82:51:2e:
ee:c0:52:7d:9c:73:52:05:62:2b:e8:26:27:6d:b8:
06:f9:53:81:b3:a4:0e:10:f0:a9:bf:72:54:58:db:
d7:df:b5:f6:35:42:74:fb:f6:f1:3a:3e:b0:a8:33:
57:9e:c8:2d:9e:0a:7b:d5:7c:24:df:10:33:8f:42:
a4:79:cb:ac:34:80:0e:6e:ad:98:16:63:10:30:5c:
64:39:35:44:5b:36:ae:c6:0e:08:c8:b9:3f:e8:cb:
70:a9:39:b5:b6:24:56:f0:c5:8c:ac:1c:78:49:6d:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:F6:65:84:A7:EC:9A:92:A2:DC:BE:26:76:D0:AB:C7:C1:E9:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58699fff-50fe-46a7-8e85-38dbafe34c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:9d:a5:84:d7:8a:f5:e9:d5:98:92:36:d6:9a:3c:d8:67:68:
59:5f:4f:19:03:22:50:25:35:a2:d7:44:08:2d:5c:64:bf:0c:
f7:16:ab:79:c5:47:94:93:d1:32:ad:6d:ca:1b:42:6f:21:2b:
58:3b:21:4e:cb:f5:ad:7e:6c:7a:d7:10:b7:31:bd:72:76:00:
82:13:35:94:0f:35:22:1d:60:a7:01:75:87:77:58:1b:d7:ac:
f1:fc:13:14:33:55:49:4e:8d:7c:54:25:a4:d9:27:02:d8:2a:
8f:c2:ae:73:b3:11:71:00:f2:35:56:fe:33:d4:42:a2:3a:1a:
70:ec:71:44:0d:4d:5d:47:c6:dd:27:33:d2:5a:2f:51:d7:87:
61:e5:fc:f9:17:3d:76:d8:4a:e5:45:bd:0a:f7:1d:fc:15:11:
76:10:97:1d:3b:3f:bc:26:d9:12:d6:39:4f:00:5a:9c:00:37:
58:6b:68:30:de:a1:00:8a:6d:b4:fd:f0:15:9f:27:57:0f:d9:
db:74:93:d8:97:c1:dd:34:fa:cb:6d:79:87:2d:5b:3a:0f:fd:
9f:3a:a7:39:3e:60:8f:51:a7:1f:19:52:18:a1:e2:63:3a:bc:
df:77:51:d1:bc:18:68:2e:5d:96:71:b2:99:a0:d9:9e:ff:3e:
e0:76:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:05:14 2025 by rpki-client