Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
File: 86433272-8233-4231-82ff-92246d0a41a5.roa (raw, json)
Hash identifier: NVQ5W9hg9S13HgP1p+6z7DO2qB/jVLoVjxu0UDb0N7g=
Subject key identifier: ED:83:B4:FF:C5:2B:5F:C3:9A:4B:93:BF:8C:60:23:FF:B9:42:31:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1CCBE8FB9DEFE6EA0FDDD104C9EC06AEC6524E8C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
Signing time: Tue 05 Aug 2025 19:10:52 +0000
ROA not before: Tue 05 Aug 2025 19:10:52 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:cb:e8:fb:9d:ef:e6:ea:0f:dd:d1:04:c9:ec:06:ae:c6:52:4e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:10:52 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=f26f5cae8d4f732a3f066a4f5e2a16b8cc6ea15008b8d18bf6d793be711b98ae, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:12:88:25:60:c6:a1:ac:b4:55:f9:f9:8e:
ae:e3:78:f7:88:fe:12:dd:5b:3e:ab:1e:ea:18:b2:
ba:b7:b0:fb:6f:21:d6:a3:26:c3:6a:b4:fb:cc:6b:
dc:c1:b0:3c:e6:6c:eb:2b:1e:82:90:5f:10:63:03:
5b:4d:00:b3:e6:fa:fa:5d:fa:73:98:eb:fd:fc:4f:
94:c6:fe:ba:98:b7:4e:aa:37:8b:95:59:b3:a2:bf:
88:99:fe:5b:27:28:c0:ad:77:da:11:90:19:09:30:
02:83:39:08:bb:8d:51:48:d9:8a:15:3b:4b:48:5a:
84:21:36:6a:e7:8b:11:42:92:08:75:fd:23:b9:9b:
11:28:cb:be:22:37:04:91:5a:ba:a8:65:c5:ad:b9:
ba:13:25:88:77:9a:bf:df:58:fa:be:ee:0b:24:b2:
e4:5c:2a:6b:c4:85:75:6b:03:23:00:74:64:3e:db:
58:49:97:36:6f:5d:70:94:03:2a:62:11:9c:38:40:
a9:1e:07:f4:f9:0a:18:2b:48:cc:dd:3b:e6:9b:39:
e5:a3:b1:72:9c:b2:9e:e6:d2:ee:ee:e6:cb:b4:8c:
3f:33:e3:cd:7a:18:57:92:51:c6:23:9b:ba:1a:d2:
75:36:1f:09:32:8e:71:a8:7d:32:bd:66:64:b2:55:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:B4:FF:C5:2B:5F:C3:9A:4B:93:BF:8C:60:23:FF:B9:42:31:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:6e:ac:fb:6e:05:ed:69:fe:8a:b4:f5:04:c9:8c:48:97:ab:
33:12:1b:22:42:f1:be:be:24:97:4f:9e:91:4d:b3:18:a7:10:
38:16:b4:e6:f8:b3:2c:8d:9e:be:45:43:f5:69:87:56:1f:0e:
b5:aa:01:38:65:79:7a:45:15:db:35:bf:36:d2:87:a4:b5:be:
ff:e1:87:c4:30:43:b5:14:2d:09:89:18:49:e2:16:02:98:4c:
f2:54:ca:43:23:08:93:37:5c:6c:2e:36:94:5a:87:69:28:54:
69:d3:47:7e:a4:ea:92:1f:96:fa:40:88:9e:57:06:96:5c:5d:
35:56:42:8e:d3:42:a1:6a:49:83:eb:9a:7f:11:5c:68:eb:ff:
50:77:cc:78:0c:b5:91:2e:94:a8:36:a9:f4:84:dc:db:25:b5:
a8:06:ac:2d:10:63:25:45:19:53:d5:14:a3:37:76:69:c2:26:
8d:06:bb:d9:df:95:1c:2d:1e:da:9b:2a:e8:32:ec:43:90:61:
b5:77:ee:51:7a:56:b9:50:08:e5:06:59:9e:7d:ba:b6:ac:5e:
c8:42:d7:78:19:73:87:df:23:b3:d6:e0:94:0c:9f:b4:9c:d8:
07:bd:a2:6e:46:c0:2f:d7:2d:68:2c:f3:78:8c:34:7a:32:58:
d0:c8:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:58 2025 by rpki-client