Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
File: a6c61029-f559-411c-89fd-a1970cac6bc1.roa (raw, json)
Hash identifier: OVFMqrCilr1XanBJNHvUeMo/0o1z+JMPwRfWUM5CeEY=
Subject key identifier: 07:59:F5:4A:F3:18:BA:D3:02:07:DE:D4:15:FA:03:5E:2A:F6:13:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 349F043B5A95FEE565DD94CE0F0D7E5458B830A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
Signing time: Tue 05 Aug 2025 19:51:38 +0000
ROA not before: Tue 05 Aug 2025 19:51:38 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9f:04:3b:5a:95:fe:e5:65:dd:94:ce:0f:0d:7e:54:58:b8:30:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:51:38 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=b4722c0371016dc849cff874432d42915b3f6737782148bb91bd88175224b7ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:58:ca:22:68:58:c6:0f:27:46:c2:0b:5d:
4d:fb:38:7d:33:59:f8:be:fb:34:bf:1c:4c:32:a7:
14:40:73:b5:00:20:c0:f8:2a:9b:0d:16:dd:6b:62:
02:a4:db:3e:5b:2a:44:d8:3d:20:c5:78:4a:46:95:
15:0c:db:4f:96:cf:35:34:6a:39:ba:1c:d4:71:0b:
16:e0:e8:9f:a8:37:76:fc:ba:4a:9e:6d:52:d5:b8:
d2:1a:6e:98:6b:ec:95:20:46:c8:c5:5d:dc:82:53:
0b:9d:a4:c5:db:8f:b3:29:7a:ca:88:43:f9:11:87:
f8:c7:1e:16:d3:ff:5d:f7:48:f1:19:7f:54:63:3b:
74:97:14:f3:e1:9c:85:60:3e:4a:90:a4:15:1d:b9:
47:75:84:40:15:b4:fe:0a:2a:94:4e:29:07:74:db:
64:7b:7b:dc:7d:bf:f5:ba:da:1d:3c:f7:18:86:89:
69:95:06:e4:d5:e4:01:8a:d6:e9:af:41:a1:a6:63:
df:ec:ae:61:c3:d3:24:38:4a:37:f8:bf:5e:e6:77:
47:23:47:d9:f2:e1:bf:b1:b7:ce:32:2d:ae:17:60:
4c:2b:bb:cb:3a:8e:25:15:30:26:73:e0:c9:ed:fa:
0a:2e:b0:15:4d:9a:65:a1:6b:1b:b6:ca:7b:a2:93:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:F5:4A:F3:18:BA:D3:02:07:DE:D4:15:FA:03:5E:2A:F6:13:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:9000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:1a:ab:f3:ba:5b:f8:84:87:d4:61:22:35:13:4f:79:d3:d7:
1a:6d:1b:24:ad:f6:16:d6:df:6d:ee:2d:8f:c2:67:68:bb:5a:
ba:3f:29:07:58:b2:89:20:ab:bf:65:46:64:df:0e:99:d6:47:
f6:ea:65:24:8c:31:08:b5:1e:6c:32:ed:60:01:6a:79:ba:63:
57:e0:73:66:f4:ff:51:4d:29:bf:38:d3:87:a7:b9:1c:fc:4c:
ff:5c:ca:51:f3:c3:80:1f:70:75:c9:6c:73:ad:25:b0:9a:71:
07:13:f8:6a:36:77:5f:29:98:94:ed:2b:85:4c:dd:ce:9d:ac:
63:ef:db:40:0a:e9:da:02:1b:4a:61:07:62:d5:34:ef:0d:54:
19:74:66:38:13:a7:cf:a4:e8:d1:29:a2:78:d0:91:a6:59:4d:
22:b6:c5:22:8a:31:8a:c3:5c:5a:20:9d:04:06:cd:97:12:26:
c9:77:9f:6b:c4:bd:53:02:e7:9d:43:f7:a2:6d:34:3a:9e:d3:
30:c2:82:64:ac:50:13:f9:3d:4c:bd:c0:a5:2a:05:ce:13:ae:
7f:75:ff:a0:b9:34:15:7e:ef:89:55:d7:26:90:bd:33:c0:4f:
8c:eb:9a:39:d2:26:8d:80:cf:b6:8f:a6:21:18:fc:17:96:e9:
66:20:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:04:07 2025 by rpki-client