Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
File: a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa (raw, json)
Hash identifier: Wqf7InrUjSQWjCZxQsne0Wc5k55jScGkLbMn16JbmnQ=
Subject key identifier: 0B:F2:2E:C1:68:C0:5D:52:23:06:D7:7A:F6:21:10:4C:78:D3:F9:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72D32F8B490FCFA31659F4375FD7E2E89E6225A8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
Signing time: Tue 05 Aug 2025 19:41:23 +0000
ROA not before: Tue 05 Aug 2025 19:41:23 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d3:2f:8b:49:0f:cf:a3:16:59:f4:37:5f:d7:e2:e8:9e:62:25:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:41:23 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=edd89a87aa2c8deebd3cae9bec3b3828354ea2b745dfa342e2ac4cb9799bdd5b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:b5:da:77:57:65:f4:2e:f1:7f:3b:4f:7f:
05:c8:3b:d0:d9:bd:7c:30:2f:92:01:05:f3:6a:c3:
63:fb:f8:b1:71:16:61:70:8a:98:be:53:bc:a6:7e:
5a:70:bc:3d:67:2a:46:b2:0e:aa:be:2c:84:86:04:
61:e3:b8:97:c9:77:5b:56:fb:d8:8a:c0:20:b6:66:
57:5a:c3:f4:2e:98:78:d1:2c:3f:c5:e5:6a:18:04:
75:d7:07:94:c3:b8:16:96:5f:8d:b4:7d:88:9b:ea:
0c:03:e4:43:7c:02:59:55:13:b6:07:96:9e:0b:e8:
9b:8e:ee:62:72:28:ea:be:73:db:c2:7b:64:13:31:
3d:75:b2:cc:23:08:da:54:e5:d2:ac:1d:b5:a7:b3:
60:d8:2a:59:3a:20:c1:4d:65:f5:6a:f9:85:0b:a0:
a1:47:a4:15:b0:cb:dd:69:de:66:c9:70:44:3c:ec:
ee:f1:76:e3:40:88:96:db:11:75:52:aa:f7:f2:a6:
50:dd:65:a5:19:f4:0d:d9:14:34:eb:9c:31:62:79:
a8:23:2e:16:9e:65:1d:ce:55:eb:ca:05:2b:f6:c5:
fd:53:69:2b:41:8b:3f:b4:30:14:10:e7:88:b9:4b:
2d:20:df:61:81:5a:6a:f4:77:5a:f9:67:f6:88:4e:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:2E:C1:68:C0:5D:52:23:06:D7:7A:F6:21:10:4C:78:D3:F9:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6bd87d5-c11e-4508-ada5-ef58a495d3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:9000::/40
Signature Algorithm: sha256WithRSAEncryption
0a:e5:23:6b:bb:71:ce:8f:8b:d5:be:67:49:5b:e5:1c:12:18:
20:26:91:d4:ef:cc:13:82:81:5e:8e:8c:ab:a7:50:5e:c6:19:
67:cb:64:a1:e3:18:1c:2a:6d:1e:2e:f3:cc:00:1e:69:4c:26:
62:8d:90:ae:b8:53:fa:58:d7:c1:0a:7d:04:7b:39:77:a5:64:
e9:f7:1c:c6:81:ed:27:be:ce:87:bf:a4:82:72:e7:37:a0:9b:
e8:a9:ec:d4:60:7c:83:75:2b:c7:87:ca:f3:32:b3:6d:0a:e3:
72:cb:dc:39:de:58:07:9f:08:33:5a:85:22:b2:70:33:a8:a1:
4c:8f:32:93:a1:d9:49:5d:a4:82:51:15:dc:89:6a:fe:e3:85:
b7:1a:fa:17:86:57:f3:ee:db:68:0b:67:91:51:42:47:b6:10:
58:a1:de:55:13:3a:39:03:dd:ec:5b:a2:69:d9:1c:bd:f8:b2:
40:de:f4:b7:b9:f9:f5:84:33:35:3a:a7:0e:6d:8a:b5:e4:5d:
27:15:9a:1a:4f:2e:8c:ce:94:20:50:00:ee:a3:b4:17:ad:04:
ca:49:a9:58:e1:90:3a:48:f2:69:31:2c:35:48:29:f4:df:42:
9f:00:d0:5f:79:21:05:7d:ec:3f:31:7e:3e:d3:ad:75:5a:22:
f0:17:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:50:52 2025 by rpki-client