Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
File: c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa (raw, json)
Hash identifier: RQT7+smaWl4OTov/jfRcQhRpqyhcAvWlIg3SyJJIFf4=
Subject key identifier: 5D:FE:CA:D2:53:9C:CA:45:0A:8E:4A:EA:7E:46:D1:B5:85:F0:EB:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 140925D12293230F9DABC947BAF39ECA469D06EF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
Signing time: Tue 19 Aug 2025 16:50:39 +0000
ROA not before: Tue 19 Aug 2025 16:50:39 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:09:25:d1:22:93:23:0f:9d:ab:c9:47:ba:f3:9e:ca:46:9d:06:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 16:50:39 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=28a98a3c83f7028f6022d0af497a96c36d5c908bf12771a251c141e4fab4fab8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:b1:ce:66:1c:34:df:37:76:72:73:03:02:
28:95:c4:25:18:14:3f:d6:28:45:2f:31:85:8c:ff:
b1:7c:73:49:bd:53:89:82:d4:28:86:b9:ae:74:36:
a6:82:df:b6:8f:a2:a5:f3:4a:0c:03:84:53:52:28:
98:80:e2:89:a9:e8:f0:75:33:01:18:e9:5c:94:d4:
b7:d2:c4:db:45:d0:2c:ca:8c:f9:2c:a9:27:90:e3:
39:88:27:42:24:31:bd:b3:bd:f4:33:4b:7b:5c:20:
c7:03:79:ce:ec:dc:7b:47:3b:ce:43:13:2f:ba:58:
a4:f4:13:a3:63:3b:e5:56:85:b0:8c:59:18:0d:15:
4f:da:b6:65:b4:6f:25:06:48:c5:19:55:6e:73:51:
cb:a6:c3:3b:f6:fe:f2:6e:56:1e:88:28:10:8a:7d:
89:67:85:7b:ed:11:04:91:6b:75:d6:e1:fb:b7:6d:
08:a2:7a:8f:1f:3d:a2:2e:3e:0b:8f:d9:e3:05:9e:
d3:4a:8a:4f:d9:28:25:48:1d:f2:19:7b:4b:00:1d:
8c:2c:e9:b4:64:74:e8:a1:84:1d:67:f7:3e:7a:04:
f9:53:35:27:38:68:f8:5c:52:c3:44:fd:fc:38:a9:
c8:0f:15:61:9a:a1:a0:93:5c:49:85:1e:3e:d8:24:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FE:CA:D2:53:9C:CA:45:0A:8E:4A:EA:7E:46:D1:B5:85:F0:EB:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:c000::/40
Signature Algorithm: sha256WithRSAEncryption
41:eb:b5:5e:b0:38:bd:f8:c4:71:c6:2b:61:1c:14:5f:43:39:
2a:2f:36:ca:b1:81:54:3b:01:f0:0e:0b:99:06:8c:b0:83:f4:
3f:ae:ea:02:37:93:cd:6e:b7:9f:4a:c8:b0:55:90:4c:ab:9e:
46:ea:01:b1:75:e0:71:f4:3d:76:71:cd:ad:17:75:35:f9:c1:
03:cc:ea:6c:36:4c:96:f1:a8:68:88:7b:00:04:b3:2b:52:83:
ba:fd:2c:f1:78:1c:b6:0d:68:96:03:30:87:0c:70:97:70:a1:
80:60:1b:82:c6:a8:00:51:68:5b:52:c1:f7:58:e3:85:dc:cd:
b5:48:f0:79:0a:d7:7c:8b:98:03:d4:b1:3b:6a:61:55:dd:1a:
c3:ab:19:e6:71:ed:d7:76:3e:8d:7a:4c:ec:cf:f7:1d:58:5c:
29:70:39:9d:57:86:f1:16:43:ba:ec:2b:56:97:55:ca:18:31:
b4:4b:6c:50:54:41:ed:af:dd:d7:9e:8f:7c:b7:36:36:5c:9b:
b7:2b:42:d5:43:7c:51:0d:22:33:89:8b:d3:a5:42:71:02:16:
cc:40:d0:06:47:36:cf:29:d3:40:65:ef:2e:9d:3e:83:a8:19:
10:08:6e:87:9c:13:05:54:c8:9c:4f:2d:99:ae:9b:30:0a:c1:
ab:8d:5d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:49 2025 by rpki-client