Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
File: ea9f1f24-552b-49dd-a167-4872d5575c1d.roa (raw, json)
Hash identifier: 5hI9Q/55h8NvIWX2btzebPJzzrPB2ofTRdJf97BfaM8=
Subject key identifier: 30:88:4B:EB:D4:B1:A1:9A:59:50:D1:CD:65:48:0C:9E:07:BE:E8:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29AE8140701C2EF6CD3056AF70251DD0BC679573
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
Signing time: Fri 26 Sep 2025 18:20:49 +0000
ROA not before: Fri 26 Sep 2025 18:20:49 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ae:81:40:70:1c:2e:f6:cd:30:56:af:70:25:1d:d0:bc:67:95:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 18:20:49 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=9b8fe6b39094a925fc7f063eb4188d58c45c30cf884ff49cbeff36dffe22a955, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:a4:a7:32:ba:b9:29:e9:fa:63:13:14:36:
56:45:d6:ba:ed:a6:41:28:ba:41:71:88:04:74:74:
fb:f3:d7:be:51:3c:2c:92:67:87:ac:8e:39:be:a4:
01:8f:62:7f:f5:5d:76:3a:1f:81:23:50:7e:dd:9b:
f5:c0:27:2a:c0:93:5b:e9:f9:f8:70:c8:7b:df:e7:
e9:1f:18:32:cb:14:96:81:3e:26:84:69:64:fe:99:
27:e4:c6:0b:f3:16:e3:df:13:19:54:3e:78:a6:39:
c8:c8:89:3d:d2:29:97:27:74:ab:8b:0b:ff:48:61:
ab:fc:b5:2e:99:1b:60:e0:18:b9:43:db:ef:8e:4e:
3a:93:3f:6e:30:85:27:a9:07:11:aa:60:15:94:8c:
7b:ea:ab:15:c2:1a:35:7e:ea:91:34:2a:b1:14:f5:
53:62:9e:f9:f0:39:9c:a8:52:d8:da:09:31:8a:f9:
47:d6:91:d2:89:55:7f:a2:d1:c3:d1:91:bb:c7:e2:
9d:84:70:05:3b:7d:54:10:85:4d:05:fb:45:4a:6b:
58:33:e9:5b:ba:0f:73:b4:d1:68:03:21:c2:47:8e:
e4:f9:a8:5d:cd:2d:f4:e4:fd:a8:ae:ae:18:d4:91:
43:8f:0c:18:93:ac:18:a4:0e:43:4d:4a:55:fd:19:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:88:4B:EB:D4:B1:A1:9A:59:50:D1:CD:65:48:0C:9E:07:BE:E8:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea9f1f24-552b-49dd-a167-4872d5575c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.120.0/22
Signature Algorithm: sha256WithRSAEncryption
79:fa:4c:f8:b3:a9:bd:71:2d:9b:ec:26:0f:6c:8e:cd:7c:b3:
58:97:b6:11:56:3a:01:fb:72:46:8f:b3:c8:4d:4a:c3:96:a6:
16:20:37:9c:75:59:ea:fa:9b:fa:c9:92:a8:b1:2d:c5:02:8d:
a8:5c:5b:73:6e:73:23:d8:79:6e:04:14:64:0a:c6:4e:a8:47:
8f:e2:96:a7:cd:36:1e:a9:7c:64:3f:05:8b:aa:22:e4:f8:12:
33:e3:c8:49:ad:1e:07:39:68:6c:8f:bd:d3:a2:8a:9e:ed:99:
59:7c:63:30:49:81:18:36:f3:6c:d6:a9:b3:c4:96:4b:40:d5:
7f:9a:77:05:77:78:b7:ac:7c:25:c9:85:bb:b0:67:47:3d:92:
49:9d:cd:b5:1c:a2:14:2e:6a:d6:f9:fd:14:ff:a6:91:92:1f:
d5:25:03:15:28:23:40:08:fb:f5:fb:97:7b:e5:20:cb:6f:19:
b5:7d:42:f1:80:4e:28:fe:c7:b3:45:c6:8e:ac:c7:cf:3a:da:
7e:bd:df:3a:72:e1:0b:88:dc:4f:1c:4e:05:97:bd:bf:ed:be:
b0:55:5e:2f:74:5c:20:b0:ec:a1:41:17:d9:c6:4a:21:ac:8a:
d2:d4:07:22:d4:d5:62:a1:8c:a3:86:d9:03:50:ee:6a:88:e6:
02:b8:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:46 2025 by rpki-client