Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
File: 5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa (raw, json)
Hash identifier: 5Tbe9u8tbArp4TjqkKTA+v4QuhDzB7nYYVyaYUBiu8c=
Subject key identifier: 50:B9:38:9E:8C:81:74:EC:62:9A:FE:C7:7A:E2:4D:24:3A:43:44:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2053C346F35084B9D8C9B452684D2121F3F15E3C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
Signing time: Tue 05 Aug 2025 20:20:16 +0000
ROA not before: Tue 05 Aug 2025 20:20:16 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d025:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:53:c3:46:f3:50:84:b9:d8:c9:b4:52:68:4d:21:21:f3:f1:5e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:20:16 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=c206e114ee288f49824b56a6470e2769538e8499776b42f5320531a738f09bf8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:9d:90:46:2b:4e:b9:6c:ff:45:82:2a:80:
66:d9:e4:be:b3:49:b2:16:d3:bd:fb:dd:30:bc:b5:
fd:ed:26:dc:1f:8e:bf:08:d8:8f:11:54:15:be:b2:
49:e6:9b:3f:c6:1f:20:7c:d5:93:e9:27:bb:9d:f0:
bb:8a:fb:ef:18:b2:19:bb:59:32:56:1d:9b:94:18:
83:c4:f1:d8:f8:b7:7c:7c:2d:05:73:91:c3:d3:c0:
c7:bc:e3:04:0d:fb:c5:b9:17:67:ef:61:79:cf:46:
02:9e:d1:42:76:56:f5:e8:38:64:c9:d7:1d:10:90:
81:55:50:97:d8:ed:07:ad:67:8e:19:09:c2:35:e3:
67:35:e5:ab:5e:e2:86:bf:62:e3:d0:bf:ca:33:07:
bb:75:ea:e1:e0:80:00:f7:36:9f:c0:59:8d:ad:08:
a5:f8:ed:bf:6e:f0:7a:ed:85:0b:0d:c8:80:a5:78:
46:ec:b6:61:64:ed:ba:a7:c8:08:7a:d7:fc:1a:e9:
54:f2:5a:20:75:b7:42:c9:cd:1a:d2:f0:b7:5b:54:
62:b9:e4:7d:f1:55:e8:2f:95:78:4b:2f:7b:55:0a:
42:e0:61:be:0f:71:3f:d2:2f:d9:35:7d:ce:b1:45:
ef:75:f6:88:24:10:cc:3c:fe:1d:8e:d0:a5:71:70:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B9:38:9E:8C:81:74:EC:62:9A:FE:C7:7A:E2:4D:24:3A:43:44:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a585e9d-8bf0-4bc1-ad7b-b6c3e0bf9b93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d025:1000::/36
Signature Algorithm: sha256WithRSAEncryption
9b:95:84:21:a5:0b:7e:3a:af:8a:4b:e3:42:a3:d2:f6:0c:e2:
03:f8:80:ff:06:c6:79:ee:de:60:91:17:eb:31:5b:93:ec:a3:
e3:a6:29:82:44:b9:44:0d:02:61:03:b6:cb:a6:4d:08:3b:47:
5b:84:26:21:92:a1:88:da:44:c8:02:d7:92:41:01:f8:96:7f:
06:23:f0:2a:e3:e8:b3:31:a8:0a:d7:29:7a:41:46:ad:d8:92:
a1:72:ff:e1:61:00:0b:ba:1f:11:2b:38:2f:42:f6:d0:e9:67:
54:f3:c9:4d:98:de:32:c4:c4:24:0f:e5:71:df:43:d4:35:8b:
05:6f:3d:36:c1:b0:a8:d2:10:16:d2:d5:8e:67:f8:79:d8:97:
47:73:16:25:10:aa:5d:7e:b2:70:f0:81:03:dc:5c:9b:5a:16:
ec:5f:e2:f6:27:6c:c3:ef:c9:51:56:a0:d6:10:55:13:dd:99:
50:ce:8e:e8:ea:10:fa:ea:02:90:5d:53:9b:d1:7e:8f:78:dd:
3f:81:40:77:fe:ea:91:22:b5:a0:b5:48:5a:21:5a:d5:2b:00:
55:0c:52:ad:3e:65:9b:bf:1f:01:7a:ff:79:13:66:65:b5:26:
b0:5a:8f:e6:e1:9c:db:41:d5:7b:c9:ca:52:40:ee:bc:98:2c:
9d:01:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:04:02 2025 by rpki-client