Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
File: b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa (raw, json)
Hash identifier: GC+jPMI3tVxhBzpzi6MvhqOTTov1QZROBxrwAYJYYqE=
Subject key identifier: 58:71:80:0C:4E:4C:B8:62:69:30:5F:99:91:D2:37:2B:C9:6F:AF:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B42BACB765E510B9B489E74D716464D50B6954D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
Signing time: Tue 05 Aug 2025 19:10:15 +0000
ROA not before: Tue 05 Aug 2025 19:10:15 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:42:ba:cb:76:5e:51:0b:9b:48:9e:74:d7:16:46:4d:50:b6:95:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:10:15 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=38448a67299d2747de2f7ce672ca7799b3623ef4886ef8f2f9b2f1f381bb7192, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:81:a6:e9:dc:a0:4c:d3:17:2d:0c:cb:64:
69:48:54:fd:3d:68:c0:85:db:fb:7d:ed:5b:e6:90:
13:4e:25:36:8c:bc:32:48:cd:a7:05:2e:c9:52:b9:
e7:b0:e9:27:ed:57:6c:57:c2:ee:2c:cd:c5:31:66:
1d:80:0c:dd:06:68:fe:8b:6b:c0:60:47:31:33:5a:
7f:28:9c:c1:17:ef:fc:02:9c:1b:31:16:11:2b:ff:
ed:7e:f8:a6:7b:7a:9a:49:57:90:54:5c:3b:99:c3:
23:a3:8c:a4:eb:d1:b7:5d:e1:5e:3c:65:e6:9f:07:
ce:29:d7:32:59:c3:89:51:d5:5a:e2:9d:25:2d:16:
59:0c:12:a0:b9:c8:82:e4:8d:2e:11:1b:a1:9d:41:
7f:df:fd:9f:c7:70:9c:a7:c1:14:1e:8f:5b:a5:16:
e5:c1:79:92:34:1e:04:f0:a2:b6:18:03:8e:6d:3c:
25:9f:19:bb:27:a9:6d:e2:5f:3c:d9:61:cb:3f:d7:
bf:9d:de:ed:92:24:1e:30:26:46:b5:10:bd:3e:61:
3b:06:c2:2b:01:7f:c4:fd:37:74:d5:b6:94:62:c7:
25:d5:56:24:ce:05:5f:8a:c5:66:dd:44:57:a1:09:
ee:35:24:71:d6:a2:96:d3:f7:91:8e:e4:d6:6e:8e:
8b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:80:0C:4E:4C:B8:62:69:30:5F:99:91:D2:37:2B:C9:6F:AF:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c080::/48
Signature Algorithm: sha256WithRSAEncryption
b8:5d:e8:9c:5d:9b:92:da:db:e9:3a:3d:62:0f:0f:11:d2:a4:
cd:6d:54:89:6c:d8:c2:04:62:de:f6:0e:c1:ab:dd:4e:d3:f1:
4b:fb:1a:70:38:5a:06:bc:65:e2:0a:60:1d:ac:f7:32:c5:a6:
4e:1a:f5:dd:9d:4d:82:b9:37:ab:92:1b:87:5b:dd:61:31:b8:
1a:62:cd:7b:3f:8f:7f:3f:60:75:af:31:5a:3c:ef:69:99:c4:
9c:f9:7d:16:96:cf:02:60:06:da:f6:95:24:53:46:7c:83:6e:
2d:4a:b4:ba:7a:02:59:74:7e:5b:b0:d7:6c:3f:ca:bc:39:1b:
74:dd:5c:81:36:9a:01:f1:4a:6e:b8:af:a6:da:74:a2:df:70:
96:53:42:8c:5a:fb:55:89:08:83:47:9b:26:a3:1f:53:b5:fd:
e3:d2:ca:40:35:b4:95:0e:23:47:b0:a7:6f:87:81:4b:8a:95:
aa:04:f6:ac:ae:b9:c6:d8:d0:13:45:27:fd:1c:04:c0:07:83:
16:7c:9c:12:75:da:2a:db:0a:14:7e:e0:96:69:2a:d0:8b:a1:
58:f0:4e:84:e5:9a:93:b7:fd:11:62:a1:db:04:2e:34:8b:20:
cb:07:e4:b9:04:77:b5:8f:3f:0e:0b:5a:fc:1c:b8:93:fe:39:
71:47:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:55:26 2025 by rpki-client