Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
File: 8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa (raw, json)
Hash identifier: 26E4d/qv/BNkzv+h7tQURJEDMh41h4OodNKPxDZ82QE=
Subject key identifier: 5F:77:3B:95:04:55:AF:E7:8C:B0:F1:AE:F3:14:DD:29:41:B3:3B:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 525F4C6CCE6533E0EF69CC5BF1EA341D259E5A01
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
Signing time: Tue 05 Aug 2025 19:10:09 +0000
ROA not before: Tue 05 Aug 2025 19:10:09 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5f:4c:6c:ce:65:33:e0:ef:69:cc:5b:f1:ea:34:1d:25:9e:5a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:10:09 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=3131c4d4eb3f29f724c8573593cfe06af1a78f4e038b0521e85125ec53a1736e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:12:ec:26:f2:74:88:d7:0e:6b:e4:f4:e0:
29:2e:42:78:da:a7:82:5c:9f:3c:b4:fc:4b:fc:5e:
51:59:35:82:ce:17:a0:f0:19:f9:3d:86:e5:ff:c3:
70:3f:d0:6f:76:e2:f8:e4:be:b9:99:6d:14:18:bd:
47:60:d4:46:b2:65:0e:77:4b:19:cb:64:cb:50:e0:
52:a5:09:a8:9e:5e:da:a6:ba:3e:d6:3a:28:ee:51:
08:dc:d4:46:0e:c7:12:8d:02:36:58:3b:43:23:92:
20:9a:e3:0e:4c:0b:f9:72:b0:02:7c:9a:80:b7:40:
5b:e8:39:78:ef:14:d1:8d:18:e5:f5:26:19:34:57:
5c:66:c9:92:9e:87:a1:c4:5c:09:2d:9d:f0:d5:12:
4b:82:28:a7:01:bc:b1:e9:4e:cc:92:30:31:f5:7d:
9f:e6:10:b2:99:86:f0:d1:66:7a:29:38:f1:b8:8f:
13:e5:e6:16:d4:a9:af:44:95:b8:ce:5d:54:5e:3d:
5d:97:a6:5a:af:d3:c3:9b:10:22:c7:91:8a:d8:55:
a7:86:41:aa:e1:be:d8:36:05:8f:6f:41:61:e3:ac:
cd:44:b6:32:22:96:5b:7d:32:0b:6d:03:c7:1a:d5:
38:50:a0:0d:e9:25:22:32:ec:6c:ed:0d:fa:4b:2b:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:77:3B:95:04:55:AF:E7:8C:B0:F1:AE:F3:14:DD:29:41:B3:3B:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
88:90:57:37:a2:40:80:29:c6:16:d5:26:91:1c:c7:31:f1:3c:
3d:70:e0:f9:a5:1d:e0:91:1d:5e:20:eb:38:53:f2:c9:ef:43:
24:9a:83:f6:d9:56:33:a6:68:b6:ff:7a:76:ee:79:70:31:3d:
9a:7a:af:f1:05:63:70:89:03:ea:44:8a:91:c0:77:8b:12:f1:
e0:49:4c:50:a5:c8:30:e0:d0:1c:61:3f:04:5a:22:57:0c:85:
6c:c3:ae:bb:9e:0a:60:9b:20:6e:cc:1b:87:a8:20:a2:0b:11:
6f:67:f9:3d:3a:f7:58:69:1c:32:6e:d8:4c:da:2b:25:4b:6e:
d6:8d:93:24:09:a8:98:eb:b2:09:a1:4d:41:7c:ac:d1:01:8a:
a8:aa:31:a7:8e:16:d1:6c:62:be:c9:f6:99:a7:fd:74:8d:a1:
56:bd:95:9e:65:2e:15:7a:cb:dd:57:aa:9e:c5:f1:0b:0e:fc:
40:3e:5b:9b:3d:dc:c7:57:61:cb:78:31:5e:00:28:5d:f6:ff:
1a:45:a9:56:1d:8c:f1:db:da:03:39:92:f1:e7:b1:64:e2:ef:
19:34:85:7f:82:7d:51:95:20:1d:bb:c7:f9:85:1d:ea:1b:5a:
9f:ab:a1:00:9d:a0:19:99:e2:80:79:03:68:fa:12:b7:7e:15:
07:ec:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:50:50 2025 by rpki-client