Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
File: fa3b401f-ea91-45a9-8182-d567cfac077a.roa (raw, json)
Hash identifier: uSWzfyPUfP6j+UFxYZjBybd1BM5Lswtd+G01Pp4lQDI=
Subject key identifier: 5A:0C:14:52:F6:D2:17:16:D3:0B:35:01:BE:7B:4B:06:E7:9C:24:1D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: D8C998C87064A7CE6C0FC1089422E8BD25D0B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
Signing time: Tue 05 Aug 2025 18:50:10 +0000
ROA not before: Tue 05 Aug 2025 18:50:10 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d8:c9:98:c8:70:64:a7:ce:6c:0f:c1:08:94:22:e8:bd:25:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:50:10 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=7b6686b04ab62ce11862c3107a62685831fceb7813ff264ac5c232208592baf7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:3b:64:19:5f:c0:1a:cb:ac:02:25:04:58:
2a:dc:2c:ee:2e:67:63:f6:59:c5:58:f0:3a:58:9b:
18:e6:3a:39:e0:31:af:9b:d1:bf:14:e4:d4:8b:99:
23:c1:6b:ae:55:3a:e5:e1:b9:e8:58:ee:18:99:4a:
42:33:10:5c:33:4c:e1:fe:06:83:af:88:d9:50:0b:
08:51:1c:5f:0f:9b:08:39:38:a5:31:e6:fa:df:a3:
9a:55:cb:b9:9a:6a:2c:1e:53:cc:4a:b7:c1:3e:5b:
7e:62:99:58:f0:4a:e4:4a:6f:88:a1:36:c9:3f:6b:
ca:88:e3:15:bf:75:58:ae:26:4a:11:d3:40:ab:63:
78:3b:bf:76:22:34:4f:f4:f3:62:1b:ab:78:c8:50:
a7:62:9e:8c:ae:51:ea:db:1c:8c:89:15:60:ab:21:
07:65:22:3e:a8:78:1a:24:4e:07:96:1b:00:56:c2:
91:2c:d7:ed:44:aa:15:e7:e9:e5:c2:61:d8:c1:db:
84:d2:05:54:48:13:ad:a3:18:a3:5e:e5:12:10:66:
c0:88:d4:dc:bf:05:d7:87:0d:a1:f9:ea:a9:06:f7:
7d:83:76:76:03:9a:e4:08:08:61:ee:4d:c4:0a:d7:
3f:33:bf:7a:39:3d:ca:d3:63:09:f5:f9:fc:50:5b:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:14:52:F6:D2:17:16:D3:0B:35:01:BE:7B:4B:06:E7:9C:24:1D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:b080::/48
Signature Algorithm: sha256WithRSAEncryption
a5:74:ff:f4:41:cb:f3:5d:31:9b:c4:4b:12:1e:9e:82:54:8c:
64:dd:4e:d3:21:2e:3d:f3:e1:1e:c7:a7:92:fe:58:fa:aa:bf:
b0:08:44:4e:d7:90:72:fa:6d:c9:25:2a:1b:b8:70:07:13:c7:
73:be:19:3f:af:42:56:ee:45:63:37:0d:6b:b0:ed:07:90:36:
ee:72:6f:81:f9:9c:64:ac:69:62:14:f7:64:bd:0d:1f:a4:68:
0d:53:8b:f4:af:b8:d6:18:dd:5c:21:14:c0:c5:f2:31:3c:a0:
80:30:b4:9e:a1:38:f3:32:c1:ce:02:56:46:e8:c4:3d:cc:cb:
9e:47:3e:52:67:e5:92:2d:e3:41:48:65:6e:69:26:e5:c0:60:
7f:00:5d:49:f4:8e:42:03:ca:c8:1f:6b:b6:6f:a3:0f:0d:b8:
d4:fb:60:b9:eb:1c:b5:5e:02:79:5f:53:4b:03:cc:18:41:ec:
5a:c6:bf:e6:4b:83:db:b7:31:b6:28:14:5e:d3:ce:22:7c:71:
7a:3f:49:8b:48:6d:39:2c:a5:df:d3:1b:21:c0:75:12:81:49:
3a:f9:9d:a9:d1:56:6c:07:cd:6c:7a:6e:d8:37:d7:15:c1:03:
00:b0:e8:25:8b:52:7e:49:94:65:f2:66:b4:56:b4:13:7b:6c:
a9:5d:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:35:00 2025 by rpki-client