Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
File: c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa (raw, json)
Hash identifier: E2ZB2g4EgKwnH3BEVHvOA6iPQaXHw3LRpMGaLIP9xNU=
Subject key identifier: 8E:3E:3E:CB:D3:06:6C:4B:0D:40:25:B5:41:40:81:C4:D7:8D:46:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D4251EC4A1B5D805BC1550814A5A39BE27AD57D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
Signing time: Tue 05 Aug 2025 19:51:01 +0000
ROA not before: Tue 05 Aug 2025 19:51:01 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:42:51:ec:4a:1b:5d:80:5b:c1:55:08:14:a5:a3:9b:e2:7a:d5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:51:01 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=a78faa790d0d011aa2eab42dd42d3fac0597a961f5e94834e6f7fd31670987fb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:c9:0f:6a:23:5a:0f:80:09:bc:a4:c2:3b:
f2:68:b2:d9:db:4e:cd:bf:13:1b:36:55:72:12:21:
c9:29:e5:6f:48:e5:43:4e:b5:76:b0:bf:50:3b:d7:
3d:0f:40:d1:ce:88:bf:5d:cf:95:89:f1:8b:aa:0b:
2a:cd:08:09:02:ec:eb:61:e5:77:5f:4a:ac:6b:2f:
d4:4b:30:db:d3:a6:ed:b0:f0:7e:70:b0:84:c3:5c:
c0:e7:03:d8:5f:80:f9:65:d2:7e:75:85:ae:2a:1a:
66:7e:03:3e:e6:b9:4f:c7:51:07:5f:2a:25:b7:b2:
3f:01:26:30:df:a6:0a:5c:cf:d0:80:7d:3e:82:11:
5a:5a:89:5e:59:91:9b:82:fb:6f:98:72:ea:18:4f:
8c:f6:69:6b:ad:12:2e:f7:58:7a:f7:35:3b:71:b8:
67:63:aa:42:99:b5:52:56:52:1d:2e:eb:15:ff:0c:
13:4b:c2:3e:17:62:69:18:ac:57:74:32:57:32:5a:
bc:3b:e7:6d:31:ef:19:8e:3a:be:ed:f2:42:a7:ed:
32:eb:7b:ee:55:89:ef:f6:70:a4:d6:85:f5:18:f5:
77:6a:12:54:59:cd:4a:be:2c:b4:3d:9c:e2:90:88:
19:72:26:b8:56:30:11:c7:18:c6:8d:d4:be:5c:90:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3E:3E:CB:D3:06:6C:4B:0D:40:25:B5:41:40:81:C4:D7:8D:46:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:2000::/40
Signature Algorithm: sha256WithRSAEncryption
00:5c:e8:1e:8d:2d:46:f2:e7:e4:e4:38:fd:bb:b7:8c:f2:51:
2c:80:8a:99:67:51:a6:2b:70:eb:6a:4d:56:97:a8:19:46:6a:
55:9c:86:71:46:03:98:c6:40:26:5e:b3:8d:7c:82:62:07:22:
0e:22:4f:e9:d3:c7:f2:56:c9:27:63:53:f3:d4:ed:ac:4a:fb:
6b:92:36:17:96:e4:59:a8:8b:c7:5e:64:37:90:d8:cf:be:53:
ae:73:69:64:45:a3:03:b0:73:62:3e:fb:9b:ec:54:ab:f8:1c:
3e:78:ac:f3:e9:d5:90:58:59:25:1c:76:6d:b3:45:98:ab:08:
65:cb:fb:82:7b:3d:25:10:78:37:c9:e9:3f:21:4a:b1:fa:fe:
57:fa:15:ed:c8:21:cb:b2:fe:63:dc:c5:9b:5f:53:e4:fd:04:
ea:6f:33:9f:45:1f:60:b4:0a:cd:cb:70:b0:35:cc:0d:a4:2f:
86:89:6b:3f:cf:72:12:38:19:7d:e5:d3:3a:ea:fb:84:e9:56:
d5:07:e2:8f:0a:60:f5:e6:7b:46:d6:97:97:8b:2a:c4:6e:0f:
6c:a4:03:80:12:e4:ae:a8:ec:e7:df:79:8e:bb:91:e2:95:f7:
63:15:62:f9:3f:fc:9f:57:36:08:fa:f4:ed:8e:3d:c5:0a:c4:
52:01:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:03:59 2025 by rpki-client