Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa
File: 77bc679b-5199-43c2-8199-be5c04a6c0d9.roa (raw, json)
Hash identifier: 8AdeMFYgP8H+H/gnp3UkTwnUbUUVjDeMwCGZfEDigEc=
Subject key identifier: 04:5E:54:30:17:61:BB:05:F5:1E:DD:0D:E7:E6:43:F2:F0:7C:62:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40954ACC44F862DA895AA032B229BA1636278719
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa
Signing time: Tue 05 Aug 2025 19:20:08 +0000
ROA not before: Tue 05 Aug 2025 19:20:08 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:95:4a:cc:44:f8:62:da:89:5a:a0:32:b2:29:ba:16:36:27:87:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:20:08 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=3ba7fb4dc6ced78be7fd3de091d105738af12ee3d619411572ffeb6baafa1eb0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:e2:0d:9d:fe:57:12:9c:65:f2:71:96:fe:
0e:da:ad:bf:85:91:7c:b9:75:41:2a:43:70:f7:c6:
66:eb:ad:23:c5:92:5a:06:eb:bf:0d:2b:91:5b:e1:
58:c9:a9:ff:f4:94:a0:ea:cc:4a:49:2e:ab:eb:68:
a3:2b:df:69:ac:10:1a:25:93:cb:56:d8:13:d7:04:
74:b0:93:1c:e3:51:9f:3a:f0:6d:2e:cf:51:72:4d:
54:7e:a8:b7:3a:e6:ce:cf:14:6c:ef:d9:ea:ee:5f:
65:f4:50:f2:64:c0:9f:fa:80:79:80:4f:97:9b:16:
0d:09:b5:80:ae:2a:bb:ab:81:82:8a:d4:dc:2a:96:
a6:98:09:29:79:c4:81:76:57:75:c2:59:50:8e:6c:
d5:f4:1f:27:81:04:fb:3a:01:e5:d9:07:e8:8a:79:
e7:73:db:c8:16:1f:ea:b8:90:da:67:25:b4:b3:53:
89:0e:df:bb:39:b1:0b:a5:42:16:50:43:e8:93:22:
a5:7e:c2:5a:e2:f4:8d:8f:a4:b0:67:d0:7f:93:e2:
06:33:d5:d1:82:1e:e3:3b:30:70:0f:c5:fc:e5:6d:
ac:ce:99:60:d3:df:49:ea:70:86:76:8f:1d:58:39:
e6:aa:6e:e2:79:14:25:6b:64:4a:76:6d:aa:d5:22:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:54:30:17:61:BB:05:F5:1E:DD:0D:E7:E6:43:F2:F0:7C:62:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/77bc679b-5199-43c2-8199-be5c04a6c0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c040::/48
Signature Algorithm: sha256WithRSAEncryption
bf:16:da:6b:45:1d:59:83:60:17:ce:d4:5d:33:9e:9c:ca:3b:
be:a3:fa:69:8e:f8:30:59:5e:dd:69:37:1c:ca:ec:75:df:3b:
da:ef:32:c8:8d:e9:75:c3:76:3f:2d:bc:8c:a4:4e:26:7f:95:
cd:b4:b8:cc:5b:8b:be:14:03:4f:cf:ee:6c:c7:b7:40:7a:08:
c2:b9:c9:43:03:1c:6f:ea:7c:7a:56:d0:5c:e8:1b:99:70:96:
55:23:95:be:84:fd:6c:9e:7c:7b:31:19:5d:7f:3b:39:f2:56:
b7:f2:d0:7e:f0:32:87:d3:54:cf:92:9c:e0:d8:a3:c0:2d:a1:
4a:29:88:d1:63:9f:4a:39:fc:76:a3:8b:0f:0b:d0:e8:aa:c3:
33:c0:0c:8e:c7:90:6d:a6:b2:ef:8c:cf:2d:43:4c:e4:f1:59:
19:91:24:e9:65:28:57:03:a5:e9:67:d7:4f:ab:82:8c:f7:19:
4d:09:c8:e2:ca:d5:53:03:14:74:da:83:d8:5d:72:a2:1c:60:
66:f5:85:88:08:27:da:ae:dc:5d:70:66:b9:fe:fd:34:f1:74:
50:b9:7b:00:df:05:0a:1a:4a:97:00:26:18:be:ab:d3:30:03:
84:6d:8d:6c:11:c1:f2:3d:d3:fe:39:cc:66:a5:7f:3d:a0:85:
63:50:cb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:35:24 2025 by rpki-client