Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: Bbs/vPBrC0yW2zJTqyY8p/+yNL6GtHVOMdjJVxd843A=
Subject key identifier: 6B:31:DA:65:56:F9:BE:F1:E3:DB:38:FC:2D:3E:AC:AE:05:95:99:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1210297742DAB0C8E773DC0666495AEC16F1B611
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Tue 05 Aug 2025 19:10:31 +0000
ROA not before: Tue 05 Aug 2025 19:10:31 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:10:29:77:42:da:b0:c8:e7:73:dc:06:66:49:5a:ec:16:f1:b6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:10:31 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=85cb5bd467e3b96c12b34185bf3e50c3ea64a2357352bb61c61f273c7b60b12f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ff:52:67:3e:ca:a0:9a:e1:bb:3a:dc:8e:f8:
ae:91:41:35:7b:69:1d:1c:70:73:75:d7:c8:48:f5:
8a:68:6c:33:aa:34:6b:7c:9d:85:b3:b3:d2:36:64:
64:b3:c4:66:bb:93:b9:f9:27:fa:78:26:ee:17:8e:
a3:81:05:0e:6f:ed:59:83:52:da:e2:dc:9f:48:d8:
b8:c0:d9:c4:3b:1d:17:b6:63:8e:c2:4a:86:3b:e6:
00:79:b2:dd:67:a2:cf:94:58:5f:94:a6:5d:02:13:
10:b0:6f:0e:5a:1b:e7:0a:f3:db:c6:2a:89:b0:75:
48:41:b9:d4:a9:df:ab:72:83:31:5f:f1:57:8c:8c:
12:cc:0f:2e:46:66:a0:f1:c0:60:75:15:a0:04:19:
b1:c0:64:b1:f3:92:e1:ad:27:2c:ac:f0:e0:ad:26:
2f:4d:48:e2:14:06:1d:df:a5:b1:49:c8:7b:84:3a:
ec:5e:59:96:46:c9:88:88:c7:51:41:57:28:d4:b5:
81:30:ba:f8:3a:d2:d2:56:3c:51:cb:bf:3b:7c:6e:
22:c6:32:19:55:f7:ec:54:af:5f:dd:e6:f2:a2:e2:
15:00:99:ac:25:65:06:a0:eb:bf:89:c3:83:73:f3:
f1:7f:93:41:e8:85:2d:c7:f2:cb:1b:1d:3f:9c:eb:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:31:DA:65:56:F9:BE:F1:E3:DB:38:FC:2D:3E:AC:AE:05:95:99:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
49:19:e0:5d:22:c9:26:c5:e8:76:a9:e0:a7:83:5c:a9:40:c6:
33:3f:88:5e:98:b2:5f:3f:95:0d:02:60:19:d4:86:6d:17:62:
b6:65:5b:00:e5:47:f3:f4:0c:a8:a3:1c:87:c8:64:3c:25:d0:
11:94:34:d1:a2:b0:2c:4b:28:2f:66:26:4e:a9:6a:53:f2:c0:
f2:e4:af:f3:30:f4:8a:37:7c:c5:52:e8:76:40:98:4c:5a:da:
0b:e6:7c:e0:35:b7:b8:05:98:cf:b4:a4:15:4f:72:f5:e5:60:
57:c5:82:6f:3c:d6:40:58:46:a6:03:e3:39:41:73:d1:f9:73:
8e:3f:e4:0f:4e:11:b5:4a:9e:be:99:df:58:c7:e2:ce:0c:64:
79:18:70:76:c9:eb:af:b1:62:fa:78:cd:26:be:4e:93:79:ad:
cf:02:87:fd:ed:5c:b1:9f:c0:ad:b6:02:81:6c:6a:7e:1c:1d:
78:52:12:09:ef:b7:a9:de:e0:ea:8b:0a:00:79:c4:2f:79:96:
31:51:c7:bf:2f:ca:89:38:69:e5:6c:1c:fc:5e:99:75:48:00:
0d:31:74:a7:1e:67:48:05:14:7a:4f:aa:02:51:7c:f8:b3:e4:
f4:9b:15:3f:f1:27:35:1b:43:12:12:d9:8e:e8:f4:b3:30:77:
98:91:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:46:09 2025 by rpki-client