Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
File: 87659113-4050-43f4-ade6-cfd7a3483d5c.roa (raw, json)
Hash identifier: WVMqPxdmDzOzsJJhfHBCxGR04Ct+ffKccK56gXbM5g8=
Subject key identifier: 16:AF:B5:B7:F5:77:5F:0D:23:8F:1D:FB:42:28:75:31:62:4A:8B:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17956FEB29ACBCE7EDAF6B81464EEF2E0FDC3CA0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
Signing time: Tue 05 Aug 2025 19:51:06 +0000
ROA not before: Tue 05 Aug 2025 19:51:06 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:95:6f:eb:29:ac:bc:e7:ed:af:6b:81:46:4e:ef:2e:0f:dc:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:51:06 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=cdc619c369ee45ec3b44b1d969e3e88ec5e54652ac14fc421070ad9bc7e81445, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:c6:8d:c7:1a:41:2f:09:e4:75:4f:00:f5:
89:b3:30:8c:ea:62:94:7e:17:61:6c:6a:9c:fd:94:
a6:66:e4:36:c0:16:8e:44:a3:b4:b6:10:01:2b:45:
04:fe:93:78:32:2c:56:a9:e2:2a:de:2c:71:22:98:
a9:21:85:e0:98:e6:26:aa:71:09:1a:60:8f:17:3e:
fe:34:0a:e2:82:a2:c6:77:7d:f1:ca:fe:3b:45:be:
e5:dc:96:39:e8:f6:a4:b8:5b:ac:bb:03:5b:93:0e:
75:e0:08:89:a1:cf:34:c0:ea:bc:b5:6d:fc:fd:52:
77:50:50:6f:70:60:05:e2:c1:8e:e1:70:a8:9e:64:
d4:e4:b7:45:09:f0:90:56:3e:f4:25:1a:d8:70:43:
45:b3:0b:81:d2:43:23:1d:19:99:b1:1a:46:cb:bb:
9e:69:e4:1d:30:66:bd:87:41:24:14:d1:89:bc:19:
a0:96:6d:41:a8:16:0b:75:d4:bd:2c:66:3f:ee:92:
be:3a:7d:65:d7:2f:e9:11:6f:83:bf:99:8e:d3:5d:
52:a7:13:d8:ff:eb:f2:26:e6:31:3f:59:c7:f1:25:
1d:d7:d6:50:fd:fb:18:ea:45:46:c1:f0:33:10:0d:
49:44:6a:42:bb:df:e7:fb:08:2c:6f:0d:a5:64:3e:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:B5:B7:F5:77:5F:0D:23:8F:1D:FB:42:28:75:31:62:4A:8B:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:8000::/40
Signature Algorithm: sha256WithRSAEncryption
18:48:fc:5c:fe:71:09:f9:bf:90:71:b1:6e:44:c8:d1:b2:4c:
7b:2e:dc:08:c9:5c:03:24:8e:dc:d2:78:06:17:f1:d1:0e:ed:
b1:d3:6c:c7:95:09:20:f7:e5:58:b5:04:7e:e2:b7:93:c7:46:
49:ef:e3:f2:94:63:63:eb:c8:fa:18:6a:3a:af:3a:8f:ba:6c:
1b:41:34:95:e1:6e:86:13:e6:be:37:eb:cf:c6:4b:b8:95:a4:
a7:9e:f5:6d:2a:37:03:3a:73:19:47:f4:51:73:35:f7:db:4c:
b9:a0:4c:40:d8:00:58:b8:77:44:81:3c:7b:0e:44:4f:47:c0:
d2:1a:b8:87:e0:eb:37:5b:0a:7f:3c:60:1b:1c:67:84:76:5b:
a4:88:13:0e:87:72:24:e1:f6:43:10:51:e7:de:85:86:9b:6c:
97:12:7a:7c:d8:27:93:34:ef:9d:3e:72:a6:f1:df:3d:5c:ab:
c7:2f:55:03:f7:1d:1b:75:f8:8a:84:85:9d:49:16:3e:bd:7c:
b2:92:5c:34:9c:54:cb:bf:bd:7a:99:3f:25:26:b8:87:d0:76:
23:3f:7a:1f:cf:29:09:ed:f1:00:78:c0:04:9e:70:69:9c:e6:
8b:26:9b:ff:da:34:8f:41:d8:aa:a0:d8:f2:fa:e3:34:5c:70:
c9:96:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:04:10 2025 by rpki-client