Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
File: 93c73d28-6ada-4f65-bb8d-8fbee434c001.roa (raw, json)
Hash identifier: y2HFUk7KXT9CAvpqTOgT9AeZuC2fG5Uv8Xdx47oIghI=
Subject key identifier: 60:52:59:6E:D7:07:BC:2A:D5:67:39:41:E7:F1:36:B0:B9:E7:8C:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7513EB8FF0F56BAA5CD9BEB9A66DF351DBAFD06B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
Signing time: Tue 05 Aug 2025 20:10:12 +0000
ROA not before: Tue 05 Aug 2025 20:10:12 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:13:eb:8f:f0:f5:6b:aa:5c:d9:be:b9:a6:6d:f3:51:db:af:d0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:10:12 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=782ed9d95982117ea9f371317e925625257bcaa44c4dd32a1c25ee5f2f3dfab5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:b2:e4:6b:a3:d4:0a:0b:b4:b9:22:bc:14:
2f:f5:ed:da:5e:b5:9d:43:fd:13:b4:0e:16:40:bb:
f7:16:7a:cd:0f:67:d0:10:82:a1:2c:1f:6c:65:8a:
19:ed:75:0b:93:1c:4e:80:53:7c:a5:42:02:3a:bb:
1b:46:ae:a8:a3:84:f4:b5:3d:a1:10:8e:a5:c6:e0:
a4:42:63:14:87:06:5d:28:c3:d7:00:7a:aa:4c:6e:
99:1e:a1:3a:e9:9f:9a:f8:44:9d:07:f2:d4:81:2e:
95:15:31:50:c1:7c:7b:cd:77:24:74:7f:2d:c0:ba:
10:9a:7e:20:20:23:c5:45:0b:3e:1f:0f:bf:b3:ba:
ac:6b:b2:a9:a3:d9:43:fe:ef:82:17:1c:96:e8:d7:
93:63:af:5b:1a:af:2f:cb:e7:08:f4:3d:62:90:20:
9c:24:e2:9a:b4:10:12:d4:76:99:de:c3:10:35:f2:
cb:46:fe:05:91:99:5e:b6:56:1e:56:95:2c:51:a2:
08:72:1b:9e:c5:f1:59:2e:6a:3a:9c:57:e4:67:e7:
37:34:5e:75:9b:16:41:fe:a2:c5:e8:64:17:13:35:
45:67:fa:e4:02:9a:c2:df:5f:0b:a3:b2:d3:0b:da:
e2:be:4c:bd:71:4b:3b:fe:57:03:4a:22:85:3e:9e:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:52:59:6E:D7:07:BC:2A:D5:67:39:41:E7:F1:36:B0:B9:E7:8C:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/93c73d28-6ada-4f65-bb8d-8fbee434c001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015:400::/38
Signature Algorithm: sha256WithRSAEncryption
60:05:f4:37:dd:06:12:fc:40:a8:4d:f1:a3:58:89:b7:6e:01:
41:54:3e:ee:74:86:e7:92:26:16:44:b6:0d:1b:99:20:d8:00:
38:09:b3:c6:1a:41:77:38:0f:72:2f:f5:8f:2b:c5:7f:df:54:
8c:95:91:a0:3e:6f:db:80:60:5e:e7:5a:c5:8b:d0:64:d3:7d:
68:32:cd:de:2b:8f:60:64:03:2d:2c:ca:52:c5:a6:cf:60:6e:
db:b5:b7:e9:3a:f0:97:8d:87:a3:4e:71:b4:07:7b:a0:c2:56:
d9:fc:de:3a:bd:4a:fc:5d:10:e3:09:db:ab:30:eb:2a:4e:6e:
69:47:2e:65:08:66:15:58:c9:05:18:e2:90:8b:10:ae:96:aa:
88:7a:47:08:89:4e:00:5a:e9:c2:0c:5a:26:a2:91:a5:8a:a8:
e1:03:e5:3a:10:bc:30:ce:ef:f2:4f:d0:07:a2:7e:1c:f0:b0:
0b:bf:a1:36:0e:65:c9:e5:97:0f:d4:55:d1:e2:5e:28:f0:73:
4f:75:33:d4:52:9c:f9:37:73:70:70:3b:cc:87:75:1c:db:25:
48:6a:a6:22:aa:7c:c5:fc:7b:1e:0a:2b:d7:69:a7:40:28:e9:
99:76:87:50:df:e5:29:92:41:d9:f6:de:f0:10:69:40:e4:b6:
0a:3c:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:16 2025 by rpki-client