Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
File: 786da755-a3b1-48c5-b605-b8cfe294d18b.roa (raw, json)
Hash identifier: 7yTudpFCOPGlI6ciP7mGYmI7oXDWSNThH1BKN2Ok17w=
Subject key identifier: 1D:D7:0C:05:86:7B:5E:89:C0:EA:EF:F5:AC:8A:81:DC:81:D7:47:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AF7D388E021C9F48BF8DF27384A2D5ED2F699F7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
Signing time: Fri 15 Aug 2025 15:50:07 +0000
ROA not before: Fri 15 Aug 2025 15:50:07 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f7:d3:88:e0:21:c9:f4:8b:f8:df:27:38:4a:2d:5e:d2:f6:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:50:07 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=c8d71f94478f8e072fe89499c3bd314196123e3c513f2bc3f680641eb719f268, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:39:5b:30:26:0f:e0:59:e7:32:fc:4f:09:
c5:52:93:e0:4a:dc:60:83:a9:02:dd:95:75:56:2a:
71:a4:c7:94:88:37:c3:e9:bf:d6:bb:43:32:df:de:
ab:3e:db:21:c1:1d:44:a9:6f:0e:05:69:72:3e:8d:
25:01:54:c1:31:96:09:c0:70:b0:81:c0:32:fd:23:
29:84:e7:fe:ef:27:ca:36:10:e8:b4:d9:89:de:d4:
a5:67:b7:c5:26:25:04:86:da:56:a0:4c:4c:bb:d7:
2a:7b:cd:76:fd:b3:b5:ad:76:26:09:48:01:75:2a:
8d:14:f3:7f:77:de:84:cf:dd:3b:4b:ec:a1:67:02:
b1:41:fa:a8:89:cd:94:b2:e7:46:3a:dd:2f:98:4a:
22:ff:01:00:30:59:b1:96:ea:bf:08:47:d0:37:e8:
e6:66:e5:f5:9a:11:e9:27:58:76:28:3b:bd:36:6a:
bc:8b:7d:0a:70:73:34:05:bc:fd:4b:97:2a:2e:21:
38:7d:3f:61:87:e0:4a:9c:2e:03:c1:08:05:92:8a:
88:a7:15:61:a2:0a:f2:1b:f2:12:2c:98:5a:5a:6f:
14:0f:c0:3d:ab:2c:a1:a7:06:8a:94:89:b9:a4:0f:
5c:4f:d7:ca:56:f8:b1:0d:ac:a6:00:5c:fc:3b:9b:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:0C:05:86:7B:5E:89:C0:EA:EF:F5:AC:8A:81:DC:81:D7:47:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040::/32
Signature Algorithm: sha256WithRSAEncryption
aa:83:04:82:79:ed:0e:0b:80:3a:3f:41:13:de:b3:d4:b6:35:
81:98:27:55:62:84:36:9a:b8:57:cc:8e:ef:8e:6a:b2:41:ec:
1d:60:06:95:44:21:4c:ce:9a:43:c7:a0:3d:dd:33:d7:2e:95:
a8:a4:9e:59:4c:18:e9:67:1f:d3:4f:c3:a6:6e:8e:d3:6d:b6:
c3:fb:c1:f5:e2:ab:4d:3f:29:1f:c9:07:e0:c0:4a:df:1a:df:
f0:61:ac:3b:0c:ce:f1:2e:6f:cb:f2:eb:57:9e:d5:e7:fa:96:
e4:0f:dc:cf:12:67:7f:1f:24:96:0a:91:bb:15:c9:ad:0a:30:
58:fd:b6:c3:15:08:a4:6c:dd:46:91:0f:b3:0f:51:e7:df:60:
e9:3d:9d:15:99:01:a9:43:2b:60:37:13:42:24:00:5b:43:e9:
3b:ae:85:34:a4:cd:6a:34:d2:de:89:1f:07:6c:a0:12:62:b2:
5a:75:76:b0:4e:c7:86:06:94:5a:dc:5f:6c:f2:6d:46:bb:3d:
04:ba:75:6f:21:ff:89:e5:23:d4:4c:e1:29:d2:c0:77:66:34:
08:f8:c3:c9:04:71:52:23:c9:4d:85:23:35:0d:a3:a5:ae:32:
48:f3:a2:87:a6:80:43:68:61:07:41:d8:4e:f6:2b:06:d4:c1:
c6:46:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:57:11 2025 by rpki-client