Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
File: 83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa (raw, json)
Hash identifier: YRQw/ImkxfF8eAvEQXQWnW+6ObtZBT1ShM7CTVfzra4=
Subject key identifier: 12:3C:D1:79:D9:66:3B:95:D2:69:E1:26:28:A2:6E:75:71:95:FD:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71B25A1722C9D97159B2F24914E49EFBF0C2AAFA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
Signing time: Fri 08 Aug 2025 00:31:07 +0000
ROA not before: Fri 08 Aug 2025 00:31:07 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b2:5a:17:22:c9:d9:71:59:b2:f2:49:14:e4:9e:fb:f0:c2:aa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:31:07 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=566be18c517653e9ec7201d9f54dadefcc24fb5b708195c8f7f159a77ad3ee5a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:4b:95:c9:e8:0b:64:38:6e:ba:35:90:c8:
0b:53:2b:83:41:6d:32:57:5c:31:f1:51:65:e9:6d:
c8:90:6f:74:26:67:8e:43:28:ad:79:dc:a8:74:84:
81:2f:90:01:a9:f1:15:3c:67:b3:c2:8b:95:4e:d1:
53:9c:0e:9f:db:ce:15:76:89:8c:c3:a1:ef:f5:d6:
bf:cd:b1:b0:38:0a:be:87:34:f6:50:61:e5:4c:90:
58:4e:28:3e:dd:3d:6c:c6:3b:8d:25:cb:90:06:df:
39:69:b5:fe:42:2a:4c:d2:29:71:83:9f:a7:0f:db:
9e:79:e6:ac:78:83:86:10:44:a2:63:df:ef:c5:a9:
31:42:06:e6:28:fe:e2:f4:ed:28:dc:b4:90:fa:48:
d9:ce:45:da:82:f3:56:fc:e4:42:89:cf:7a:3f:68:
73:2d:82:45:d8:9b:bf:8a:87:ad:6d:0a:31:09:10:
60:d3:2c:76:cd:f7:99:86:3e:ad:c8:d1:6e:52:36:
9e:a8:70:3f:29:b9:c7:5d:ce:79:a4:7b:c2:9b:f2:
48:d7:08:09:29:00:42:ec:bf:f7:10:7b:17:86:a9:
2d:78:a5:5d:85:70:78:63:d4:b5:bb:d1:f8:37:b3:
46:9b:9d:5a:7f:b2:6b:c2:4b:d7:b0:2e:b1:c4:20:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:D1:79:D9:66:3B:95:D2:69:E1:26:28:A2:6E:75:71:95:FD:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/18
Signature Algorithm: sha256WithRSAEncryption
48:b3:8d:17:a6:f9:17:75:8d:aa:cc:3d:c3:99:8e:e2:75:0a:
97:88:03:dc:c1:31:77:1b:36:1d:86:84:19:fa:2f:a3:56:27:
13:29:7f:80:38:bd:5e:76:15:13:01:86:02:02:39:75:40:4b:
83:70:c5:20:42:1d:b3:5d:cb:0a:6e:46:15:fd:5a:79:01:c9:
1c:78:77:a8:3d:9f:cf:a0:58:f6:4f:94:51:d9:03:16:6d:fe:
ba:83:73:83:9e:55:8e:c4:75:ec:23:a3:0a:bf:2b:3d:74:1b:
ca:88:05:25:04:82:96:5e:86:93:00:a2:69:ae:7b:70:b8:e9:
52:49:e9:c4:91:be:a4:ad:de:79:89:bf:f0:8d:55:f9:e1:41:
45:70:78:32:33:91:20:3a:d5:6a:3d:e7:39:e7:b1:49:77:f2:
ba:19:ad:41:06:1b:5a:92:28:d0:91:32:63:28:ff:90:00:54:
45:46:15:d8:de:a3:23:7d:3e:7d:a2:f2:09:9e:ac:24:e4:ab:
12:98:fc:93:2f:63:aa:37:95:e6:42:39:56:63:13:90:f2:51:
a4:e3:00:14:44:ea:26:83:43:f6:e9:bd:85:99:03:eb:a6:3e:
b8:eb:29:da:d5:ce:d6:ac:51:3f:23:f7:bd:28:37:fa:4b:3b:
83:0c:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:35 2025 by rpki-client