Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
File: cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa (raw, json)
Hash identifier: 40yWaqmm5IXK6IS3kGGnjYdC7Hi0wKdzARwUtg//yEw=
Subject key identifier: 2E:96:F0:68:AC:E4:4D:0B:5C:B7:3B:ED:22:89:0A:D6:5F:29:59:8A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3E1587FF4B594AD533E7174F03D6D4434AD5DD5E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
Signing time: Tue 05 Aug 2025 19:20:06 +0000
ROA not before: Tue 05 Aug 2025 19:20:06 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:15:87:ff:4b:59:4a:d5:33:e7:17:4f:03:d6:d4:43:4a:d5:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:20:06 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=35fc0c72166793c9205e8c7ad302833c7e0e6b8a46beab257a96e7ef7b097706, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:14:d0:a0:ae:e0:30:93:58:50:8e:cd:19:
4b:b9:72:cc:f0:c2:06:28:83:70:e1:61:8f:5b:2c:
84:25:62:58:e1:ca:02:14:44:14:2f:87:2d:3d:30:
0f:a5:0e:3e:c8:32:dd:a6:84:98:e8:95:cd:79:75:
9c:51:b1:d5:a5:d5:61:f2:1d:7f:0c:3b:86:85:4d:
5d:e9:fb:c8:d7:24:e6:ac:0e:ca:23:88:30:d1:5f:
91:49:ce:7a:7f:46:ca:5c:b7:51:7d:79:b2:ed:17:
bf:d8:25:73:92:27:f4:1c:e5:c8:1b:e2:71:0d:55:
a7:85:08:2b:bc:e3:e2:4b:78:67:e1:de:6a:41:6c:
07:dc:50:79:4b:97:84:e3:84:e2:9e:82:fd:68:94:
1c:a3:ea:97:ec:34:15:ba:e4:4e:2b:b5:ed:17:be:
a0:5f:94:58:05:f7:ac:d3:ed:76:e7:6a:0b:47:b4:
b6:0c:e8:3a:9a:d3:13:aa:9b:37:f9:82:2d:7e:8a:
e0:ef:0f:79:ff:5f:57:0d:cd:a4:c2:6b:29:7a:b2:
9e:14:18:d6:ca:b8:fe:ae:d2:00:b7:f6:4a:d2:51:
0b:0f:df:36:cc:35:ee:0c:fe:83:e6:21:89:6c:18:
96:76:59:07:6f:ca:9e:a3:9b:fc:67:55:67:1b:39:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:96:F0:68:AC:E4:4D:0B:5C:B7:3B:ED:22:89:0A:D6:5F:29:59:8A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf8326d0-ecc0-4939-9939-2ed70f6ea536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:1040::/48
Signature Algorithm: sha256WithRSAEncryption
7f:11:57:be:98:5e:d6:d5:1b:39:be:02:5f:40:18:b0:35:e3:
d6:a9:b9:b5:29:b9:6d:09:91:b4:d9:16:c1:cf:7d:3d:3c:3a:
f6:9f:79:c8:49:40:bd:68:87:b1:78:df:06:e3:e1:d1:ac:7a:
82:1a:0a:4c:49:e4:77:de:43:58:78:eb:74:94:a0:91:b7:77:
34:29:ff:58:a7:80:02:09:fd:eb:12:5f:c1:0b:c0:71:9d:d3:
fd:f7:7c:96:3d:bc:8c:98:e6:67:d7:60:4e:81:9f:2b:3f:98:
b4:ee:1a:39:7c:2c:97:30:a0:f5:b6:6e:b3:a9:8e:fd:93:89:
df:21:01:ee:b4:4f:fb:ca:8e:78:6c:d9:cf:82:58:67:cd:3e:
7c:61:81:45:ba:6c:43:58:52:eb:39:c5:22:de:0b:01:05:b5:
a4:5c:00:d5:47:cf:4a:b7:41:f1:d5:ed:c6:b3:5e:1d:af:51:
14:14:de:f3:3e:f0:58:4e:f0:49:1f:f2:0b:87:16:b4:28:af:
bd:47:17:6e:32:20:65:b6:43:55:4d:f2:af:f0:df:34:e9:22:
28:9c:4c:77:83:41:5e:a5:a7:70:d3:dd:53:c8:74:e8:94:46:
82:8d:dc:fa:39:c1:36:76:95:64:60:fd:6f:7c:ef:b3:31:3f:
4b:33:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:13 2025 by rpki-client