Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
File: 788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa (raw, json)
Hash identifier: FQML5m7ywJmIsjfXdEoPVcnQGyNGOo+IdULjB5Gp35I=
Subject key identifier: F7:65:1C:0A:A3:B8:47:39:F9:C3:B7:3A:75:A8:4C:4B:61:17:DB:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BFD84AD392ED6EDF2FBBF824006463C5AB345CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
Signing time: Wed 06 Aug 2025 00:50:03 +0000
ROA not before: Wed 06 Aug 2025 00:50:03 +0000
ROA not after: Wed 10 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fd:84:ad:39:2e:d6:ed:f2:fb:bf:82:40:06:46:3c:5a:b3:45:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 6 00:50:03 2025 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: serialNumber=cfd17827ed106b80b92e27d45ac1ac47bae95c3be7e14e2bffb2a191be8a299a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:44:ff:21:ef:a7:8d:5e:1d:86:a7:3e:9e:
46:c4:e7:14:1e:10:0f:fe:0c:d7:03:fd:5c:8b:6d:
80:47:5f:90:3e:0e:d6:a3:53:b5:f4:11:46:dc:f9:
72:0b:5e:f1:df:0d:74:00:ce:43:3f:1e:40:d7:ea:
69:5b:f3:1c:de:34:1e:38:b6:e0:c9:ff:8b:24:45:
88:0d:ce:b4:4f:5a:b5:fc:2e:bd:92:1e:3d:cd:97:
9c:7a:30:ce:94:09:6f:17:f0:db:6d:b8:02:3b:4d:
cf:9e:f5:8f:b2:50:d8:76:4f:f3:96:ca:e0:5f:32:
45:aa:78:75:9d:fa:ba:fd:06:df:2f:f6:4c:46:33:
aa:15:39:1c:c1:90:d2:62:e7:f7:41:25:96:f6:af:
7b:d6:9c:1d:42:dc:bf:a7:2d:4c:47:69:c3:b0:7d:
22:25:6a:11:33:15:56:4b:4e:a3:9a:c3:cf:97:9c:
e8:14:5f:f8:df:39:5d:16:da:b6:4d:74:ad:eb:c0:
0b:cf:f8:b3:88:7f:1c:9b:9f:5a:61:5d:eb:2b:ac:
c1:6a:3e:69:40:85:8c:79:91:e3:b6:c0:17:c5:e0:
30:3a:72:37:4e:54:6a:01:4c:85:a8:3c:bd:a9:d3:
9a:2d:99:17:6b:57:45:d5:c2:77:b5:61:9b:5f:78:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:1C:0A:A3:B8:47:39:F9:C3:B7:3A:75:A8:4C:4B:61:17:DB:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/788d9d23-ba3f-42c4-b1a3-80f2414efb46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:9000::/40
Signature Algorithm: sha256WithRSAEncryption
c4:a0:71:65:ab:c7:43:79:46:af:af:6a:08:01:dd:2a:43:56:
4b:1c:87:9d:ac:19:06:ed:13:9e:40:08:b7:27:dc:7b:49:3c:
76:7f:bf:2b:26:0b:09:90:60:48:ea:89:97:40:73:5a:a4:4a:
76:de:64:de:01:40:4f:7b:72:2f:3a:55:02:61:30:04:89:84:
20:a5:10:f4:ba:da:04:29:f2:cb:b8:ff:70:4b:a6:50:2b:1e:
87:d1:06:bb:1d:04:8b:a4:75:52:e2:15:e6:dc:31:bf:5a:e5:
3b:5a:fe:c8:72:e2:3e:b8:70:1a:1d:df:2b:39:49:6a:7a:57:
4b:50:6c:e6:04:8d:93:7d:73:7b:67:f5:f0:77:63:b5:06:2e:
72:e9:3d:e2:50:52:ee:d9:c1:1e:30:0c:09:00:aa:f9:de:25:
23:9a:04:ec:f4:63:75:10:3f:9e:8b:ee:f6:83:2c:a1:18:84:
7d:18:bb:ee:46:16:62:e1:52:04:14:2f:3d:0b:85:6b:3a:e0:
49:eb:74:a1:9a:60:58:9e:6e:68:76:e6:b7:70:0f:e6:84:c0:
e2:93:6a:16:bf:8e:4a:2a:a1:c6:d7:ea:47:57:85:b3:d7:fb:
8f:21:b6:2d:4b:87:6f:4b:07:54:01:03:df:79:15:bd:03:8a:
4f:93:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:55:24 2025 by rpki-client