Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
File: fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa (raw, json)
Hash identifier: gKZ/0jVIjLmoCcDZvkSLOZhPnP2jxKR8ZVk6XPD2je8=
Subject key identifier: FD:7E:9E:93:1B:FC:59:62:5C:12:CC:AA:30:EE:89:B0:9C:5F:E1:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1271DD8EAA3A52E13694CE03CAEDC66B3CDC34C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
Signing time: Mon 06 Oct 2025 18:00:57 +0000
ROA not before: Mon 06 Oct 2025 18:00:57 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:e040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:71:dd:8e:aa:3a:52:e1:36:94:ce:03:ca:ed:c6:6b:3c:dc:34:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:00:57 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=5f20561c6f89f9faaa3c53e2316c3102a05c27a696fba97f1d81577c7549152a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:f5:3e:fd:79:00:10:ff:d5:84:35:c9:99:
0b:d5:1c:69:ed:03:c3:31:7e:c0:18:d1:82:55:4e:
49:4e:c2:55:3d:5a:1a:60:6f:9c:4f:82:c4:18:44:
dd:cf:26:e5:1c:13:ee:6b:cc:d4:f2:5f:47:8f:4b:
5a:18:65:55:67:f3:84:40:e2:1d:14:6e:0a:1f:4c:
1f:a7:6f:d6:a2:e8:43:61:4f:76:e0:e1:8d:3a:8c:
b1:4d:08:0c:8d:20:ce:ae:ce:53:88:5f:bf:28:04:
b3:07:69:46:b2:0f:11:7c:3f:04:29:7f:ac:c9:04:
8e:91:e2:61:9e:6c:fc:1c:a8:bc:58:07:12:6b:ae:
eb:bf:61:06:3c:18:4e:bb:bc:20:90:de:ce:34:70:
6f:b0:ac:71:f2:7a:79:7c:94:f9:02:b4:2a:b2:a1:
5c:66:65:e7:35:06:34:46:df:05:6c:5c:ae:77:38:
c1:31:da:d4:27:7c:af:b8:61:6c:91:41:67:e6:2e:
c1:58:8c:1e:b0:08:f7:47:a4:62:03:5e:70:77:58:
75:68:dc:5d:d0:65:ca:3a:37:66:8c:3c:a3:00:e3:
f2:94:24:25:36:36:4e:3b:9d:26:94:76:28:e8:b8:
9f:d4:7a:50:49:62:8e:a3:a4:49:19:3a:b1:80:93:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7E:9E:93:1B:FC:59:62:5C:12:CC:AA:30:EE:89:B0:9C:5F:E1:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fe6fcb9a-8ca7-4681-82e6-40ea5f801980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:e040::/46
Signature Algorithm: sha256WithRSAEncryption
23:40:29:c3:03:5b:19:96:af:85:02:27:1d:d7:db:10:08:8b:
74:bf:c7:da:87:f0:b3:22:01:d4:7c:df:f5:b1:58:1c:82:be:
5c:8b:4d:1d:cb:31:71:63:53:80:99:98:cf:db:49:71:af:00:
f9:ae:3a:f5:86:e9:74:c4:20:d5:3a:09:21:4f:93:76:cc:ce:
32:ba:fc:de:a7:6f:9b:9b:be:f8:7b:24:06:3f:59:d3:09:3c:
ea:fc:c0:50:7a:a0:27:c8:f2:b2:77:49:c2:a4:c3:ee:a6:11:
be:51:4b:96:5f:ce:ca:23:4f:46:dd:d9:c9:42:46:35:a1:49:
c5:a8:5d:b3:cb:a2:a4:48:94:64:56:06:54:a1:8e:c4:c2:42:
5a:6e:67:7d:63:01:25:69:cd:97:5c:d3:72:b4:9e:c3:5f:90:
2d:30:a6:5d:c1:85:c3:d4:4b:32:e0:bc:4c:bf:28:dd:81:90:
f0:98:4d:69:16:a0:3f:cd:b5:3f:e3:07:1c:db:5c:09:27:4a:
f3:68:61:33:1f:69:fa:78:b7:1c:7f:15:8a:82:fb:b9:e9:7d:
9b:24:b6:6b:1b:39:5c:fb:32:b4:cb:f3:cf:d3:0f:44:05:5e:
46:c1:72:af:7a:5f:12:70:09:21:22:51:e3:f5:11:f2:ef:dc:
90:9b:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:13 2025 by rpki-client