Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa
File: 04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa (raw, json)
Hash identifier: LP4wxNAL8aa/Nylz591BqKWZgd5p+giA+3UGzd05hq4=
Subject key identifier: 67:4B:A6:1B:CF:73:85:5D:27:48:A4:CF:55:54:61:CD:35:A8:2B:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34164C12E8D990AD5857DB82919574A3F7E0C0CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa
Signing time: Fri 25 Jul 2025 16:50:09 +0000
ROA not before: Fri 25 Jul 2025 16:50:09 +0000
ROA not after: Fri 29 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:16:4c:12:e8:d9:90:ad:58:57:db:82:91:95:74:a3:f7:e0:c0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 25 16:50:09 2025 GMT
Not After : Aug 29 23:59:59 2025 GMT
Subject: serialNumber=c29c07cf6f253db798d72a3a31e965a9dc97c01b90de58868c5ef890174e8268, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:02:64:7e:96:7a:52:b3:ee:01:d2:d6:7a:
90:81:43:ad:55:6f:cc:b1:a7:1f:b3:77:0a:ff:a7:
2b:bb:d4:32:3b:49:0c:f9:28:c2:5a:1d:36:ff:7f:
87:25:50:f7:52:d8:83:3b:76:c6:01:b7:1b:a3:24:
f2:34:a8:2f:c8:dc:b3:0a:5e:11:7d:36:a6:8a:fc:
23:27:6e:98:61:33:e2:59:9c:3b:5a:f7:7b:87:df:
e9:d1:9f:71:d0:17:76:05:03:b2:19:e0:2e:84:34:
b0:47:87:a3:6b:96:94:f4:61:30:0d:50:ee:cc:ef:
b1:a5:fc:51:0c:2a:18:e8:d6:03:f6:8f:ef:a8:e0:
ca:a3:8a:33:19:9b:01:78:e5:4e:cf:f4:56:eb:53:
8c:4c:96:4c:41:95:d3:e1:e0:43:8e:9e:3f:fa:e1:
19:bd:b9:0f:27:4f:db:2c:ef:7f:67:c5:9d:53:9a:
0d:31:a9:4c:90:39:a7:3d:a8:ff:49:ba:e9:15:2a:
fc:8e:8c:e7:f5:0f:46:97:30:e1:c1:cc:de:b1:7e:
f6:d2:bd:33:f5:88:bb:c1:ba:4e:a6:dd:12:10:c3:
72:ef:52:7f:53:d4:f4:99:36:60:ad:86:60:32:98:
35:c8:a6:a2:e2:e7:82:c9:e6:64:4b:fb:23:fa:8b:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:A6:1B:CF:73:85:5D:27:48:A4:CF:55:54:61:CD:35:A8:2B:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04034306-aaa4-40c8-9c1b-c3f1cfc23d5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:b000::/40
Signature Algorithm: sha256WithRSAEncryption
7f:46:40:e0:99:4a:ec:0b:08:76:81:f3:ff:2b:05:d5:4b:e6:
7a:2b:71:91:e4:de:63:3e:1d:52:c2:34:c5:42:dc:11:f2:7b:
47:da:f6:f6:d3:67:17:61:8f:83:1f:7f:aa:38:80:2c:b0:86:
db:68:60:0b:23:a2:b4:36:e1:ee:0b:63:1a:ec:4c:3c:4d:e2:
ac:56:bd:00:cc:09:ab:3d:65:05:e6:14:9a:84:2f:1e:d7:f8:
97:f0:bf:c6:51:16:ca:f1:e0:85:84:e9:60:c0:e6:b6:b8:b7:
a8:ca:32:32:16:b3:2b:16:f4:ee:4d:b1:f8:1d:66:79:2f:79:
49:58:bd:d3:d1:09:11:fe:cd:1e:d0:0c:55:81:75:5d:ca:a0:
6b:16:80:d0:5c:8d:ca:10:90:f2:9d:9c:6a:65:c5:e4:d1:31:
00:1f:d3:24:b6:24:47:f9:24:63:4b:c8:13:e2:ba:81:a0:ec:
7e:2f:1b:ed:03:e7:b8:f1:c6:27:62:80:7a:82:ee:25:9d:b5:
2f:41:79:d5:98:65:61:39:10:0b:bc:47:07:c6:75:67:40:74:
34:eb:dd:fd:95:60:80:ee:39:f1:1a:17:20:1c:92:c6:23:30:
5a:64:95:1b:d5:11:94:48:54:22:9d:9c:08:de:96:27:df:47:
07:20:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:58 2025 by rpki-client