Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
File: 904a13d7-baa1-4bc7-b805-601d0b998680.roa (raw, json)
Hash identifier: lqXQLTGiZnFOv6HpxT+o7Fbu11s7fQfWuQRAN9c6q08=
Subject key identifier: 80:C9:4D:02:C3:64:95:AC:F4:60:2D:F1:EE:A4:05:AC:CE:BF:E0:68
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C1F7FEFC758FB929E1D589B120A6F775E35A902
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
Signing time: Tue 05 Aug 2025 19:40:54 +0000
ROA not before: Tue 05 Aug 2025 19:40:54 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:1f:7f:ef:c7:58:fb:92:9e:1d:58:9b:12:0a:6f:77:5e:35:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:40:54 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=0f1d86efe6209ad00112bd523698cf5671a00fb8a51029daaf20ac6e74da9147, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:74:e7:b5:e9:0e:e3:57:fc:4a:f9:5d:57:
62:22:ce:3a:a3:3f:68:2c:3f:55:d8:d6:a9:bc:4a:
a9:96:17:33:d7:97:ed:2f:b5:a9:84:e8:c7:5c:7d:
4b:80:a0:d2:fe:77:5a:b8:93:58:7a:bd:b0:61:bc:
2e:a2:0b:2c:c1:6f:a9:d5:79:89:ac:2c:25:85:ae:
0d:f7:5a:e2:ae:7a:db:49:61:a9:df:95:93:b3:b4:
9e:49:62:65:ce:07:43:b7:2d:fd:ec:36:2a:6d:d8:
ad:02:bd:ee:b0:57:99:a5:ca:2f:d1:44:7a:18:27:
40:73:2b:15:1b:4a:44:00:ee:78:54:26:0d:49:92:
88:c8:9f:47:d8:4a:cc:a2:3c:00:5e:13:90:66:fe:
9b:26:1a:80:3e:ed:6c:17:4d:32:f8:de:93:28:06:
2f:cf:8c:0d:da:6a:fa:6c:c8:dc:69:0c:2d:71:25:
a8:e0:14:ce:b5:76:f8:13:21:78:1a:2a:ef:5a:ad:
cc:b3:c0:9e:7d:2b:86:2d:9e:3e:07:89:dd:01:1f:
33:14:72:d1:de:b9:3c:1e:68:89:75:c8:65:ad:d4:
45:f0:23:21:df:2e:d2:24:c0:f2:84:e9:52:fd:5c:
90:b9:96:67:4e:1f:0e:c1:dd:2e:c5:3c:c7:f1:dd:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:4D:02:C3:64:95:AC:F4:60:2D:F1:EE:A4:05:AC:CE:BF:E0:68
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:16:c3:16:4f:2c:ee:81:18:46:f5:e9:9b:7b:df:e2:40:2b:
3c:e6:0c:fc:75:5c:5a:97:62:cf:5d:2e:ef:16:0c:8e:25:ed:
b1:db:a4:16:c4:86:10:d2:9f:b6:af:a3:dd:92:c5:30:b4:53:
48:39:a6:91:eb:0e:ea:99:c6:9a:c9:ff:f0:c3:18:76:e6:a0:
75:5c:24:d7:c0:ed:1a:8a:17:25:5a:34:a1:fa:01:89:b2:a2:
17:8e:a0:4b:4f:05:7f:ed:07:55:65:3b:7d:75:2e:ab:17:e0:
17:91:83:2d:3c:f8:bf:2b:e1:f2:ab:62:fe:5b:c0:4e:84:1c:
5c:34:a9:f7:87:ac:12:4f:07:d8:0b:23:c7:25:a5:35:21:c9:
49:0d:ad:00:8d:a1:28:c8:63:e5:96:1a:55:66:90:3f:d4:1f:
70:bc:ee:9d:1d:b5:ea:e5:f3:b1:f3:eb:41:c8:7b:2a:37:d9:
06:70:a4:f0:2d:0d:f2:76:c4:d5:40:60:6e:e4:7c:8c:0d:c5:
a2:12:59:81:14:3f:01:4e:7f:ae:e7:94:79:9c:fa:05:88:aa:
17:bc:1e:b8:d1:74:15:9c:98:a4:e3:d1:0d:34:cb:1c:5a:55:
9b:5f:f1:f5:22:43:79:fe:c3:d0:9f:9f:2d:a5:ea:8f:c9:e3:
e4:40:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:03:47 2025 by rpki-client