Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
File: a039a10b-545b-441d-bef2-b67325de50a1.roa (raw, json)
Hash identifier: 1xQbZPAC6ly4/O73swn0XTpsbTWqHcel7PWUjBhfHkc=
Subject key identifier: 44:9D:A1:40:D0:0D:C4:70:61:62:AF:C6:F3:F3:2F:F2:23:9A:06:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7962E6400BDA18B303D2CAFF20DBD956283E062A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
Signing time: Tue 05 Aug 2025 19:31:10 +0000
ROA not before: Tue 05 Aug 2025 19:31:10 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:62:e6:40:0b:da:18:b3:03:d2:ca:ff:20:db:d9:56:28:3e:06:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:31:10 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=801dc4fd1b93307f1a761bd6a1048d3fe9c54238f4ffdebabfa7b14e0083bae6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:fc:4d:f2:ae:33:63:5a:9e:59:30:ca:d5:
ec:11:1a:54:47:79:23:96:3c:ee:8a:ab:9a:0b:e9:
c3:ac:49:a0:fc:27:0b:59:c8:26:00:35:38:c8:a5:
5e:90:65:b3:b2:d4:6f:cf:85:f0:42:57:8a:aa:a5:
55:8f:60:54:82:cf:36:59:c7:3b:c2:eb:f7:81:e6:
9c:0f:fe:75:80:48:18:86:da:30:87:75:00:11:0c:
3b:0f:17:6a:d8:ed:c6:16:8e:6c:3e:2e:05:1d:05:
19:01:2e:b2:66:2a:aa:be:b3:63:e5:35:2e:63:9e:
ed:06:c0:bb:dc:9f:71:35:90:b8:bd:98:29:8e:5e:
29:a3:73:b7:2d:66:bb:f3:27:b8:12:c9:75:7b:b8:
11:8e:69:79:fa:67:e9:59:4e:a9:c6:62:19:d0:b5:
c2:0c:06:14:26:a5:e0:e9:5f:39:97:0e:9c:e3:7c:
7c:31:c1:d6:46:8b:ea:5e:68:a5:7c:bd:d7:b6:9b:
9f:66:12:80:4a:89:f3:1a:82:b8:3a:82:0f:a0:c7:
31:1f:f9:c3:ed:7a:91:b7:ee:ce:e3:6c:0b:cf:10:
1d:99:ac:85:f5:40:28:a3:83:60:0c:c8:ae:5c:a5:
70:97:c6:e5:c5:b4:f3:55:88:25:21:47:43:c0:7b:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9D:A1:40:D0:0D:C4:70:61:62:AF:C6:F3:F3:2F:F2:23:9A:06:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a039a10b-545b-441d-bef2-b67325de50a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:6000::/40
Signature Algorithm: sha256WithRSAEncryption
65:34:17:0f:2f:76:71:7e:68:be:f1:ae:b2:0a:40:cf:2c:aa:
ce:6f:18:4a:83:ab:37:16:18:5e:60:bd:48:87:bd:b3:65:54:
d0:e1:62:b7:b9:e5:e1:a4:44:d3:b4:0d:98:3f:c8:b9:e5:91:
ad:d8:fa:a5:82:4c:7a:46:85:e5:f1:46:03:f8:84:80:b2:d5:
59:fb:5a:39:1a:db:d9:21:41:39:2f:92:77:7b:94:13:a2:59:
47:91:15:75:86:13:4c:c4:2e:2b:85:9b:29:35:f7:5c:04:9a:
ac:64:f7:49:25:69:3c:8a:c3:f9:a7:4a:1d:a0:38:ea:53:f9:
a4:37:5a:2b:aa:9a:95:3d:d8:e8:8b:58:67:74:4e:60:b4:40:
21:4b:d0:02:8d:66:70:3d:2b:30:2f:84:0f:56:84:7d:1e:ae:
0a:78:34:67:2b:88:11:ac:20:4c:bc:16:44:41:db:45:b9:89:
e3:8b:e5:7b:53:68:bb:bd:61:80:87:fa:1f:80:2d:c0:ec:35:
fd:34:47:12:51:97:d6:40:58:32:78:0f:72:67:74:07:3a:1b:
e9:bd:5b:50:3d:c5:99:59:0f:1f:23:81:2e:8c:34:fd:30:b8:
db:80:26:46:c1:74:ab:8f:0a:a6:26:38:5b:39:ed:fd:5d:9d:
2c:b3:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:35:09 2025 by rpki-client