Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ffa6bfd-cc78-4a05-ad58-fd42ec48307e.roa
File: 0ffa6bfd-cc78-4a05-ad58-fd42ec48307e.roa (raw, json)
Hash identifier: 5srI5iFBaZZX+lHHVlaBFi7kGxdkysED8fNfqoC4fn0=
Subject key identifier: 01:F3:23:0B:B4:BC:EA:F2:FD:81:0B:41:A9:46:6B:B5:17:2A:08:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 373D4DA76AF3808D58153869E8C74000222A05D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ffa6bfd-cc78-4a05-ad58-fd42ec48307e.roa
Signing time: Mon 21 Jul 2025 16:51:23 +0000
ROA not before: Mon 21 Jul 2025 16:51:23 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:9080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3d:4d:a7:6a:f3:80:8d:58:15:38:69:e8:c7:40:00:22:2a:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:51:23 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=2c1f94bb02e6ce297ca3b122d3c5e618149167ad0bfdcbad161950a052f0ed13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:d2:d5:b0:e9:22:c4:37:06:e0:ba:e3:18:
00:20:29:f1:07:65:e4:f6:8a:29:85:3e:a0:ff:31:
c5:1b:d0:13:af:d5:a9:fe:02:3d:e6:95:08:24:67:
21:7d:7d:b2:f4:c2:9f:63:27:a2:c4:45:95:50:69:
0e:e6:9c:94:a7:35:44:f7:ad:fd:c5:8c:c7:d4:dd:
12:7c:31:3a:09:bd:73:39:ff:a0:4f:14:bc:fa:7b:
19:c2:18:4b:96:6e:74:5f:f0:3d:8a:71:fc:df:4d:
d7:fb:5d:10:ef:3c:87:39:52:85:e7:5e:e9:82:28:
7c:a5:c5:2b:bd:aa:3c:62:82:d7:d4:a6:87:f3:13:
b2:0e:ce:06:6c:d0:17:b3:4e:b2:c3:47:d2:a8:96:
11:90:6d:39:d1:fb:16:d7:90:db:0c:e8:f1:e4:55:
76:8d:6c:10:d3:47:a6:fd:80:b6:9f:81:a5:dd:7d:
36:76:57:6c:2a:c8:f9:a7:c2:2e:0f:e2:ca:83:4c:
07:4b:9e:63:ed:64:8a:3e:7a:a5:e3:27:48:e9:c8:
54:39:fa:52:8d:8d:0a:64:c1:49:fc:87:1f:67:6c:
15:09:98:ab:b1:27:bc:97:a0:61:02:8c:43:a2:ec:
58:ac:46:0c:33:66:01:42:c8:36:fd:5b:d4:19:2f:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F3:23:0B:B4:BC:EA:F2:FD:81:0B:41:A9:46:6B:B5:17:2A:08:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ffa6bfd-cc78-4a05-ad58-fd42ec48307e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:9080::/46
Signature Algorithm: sha256WithRSAEncryption
9b:2e:d7:69:6a:5a:e3:07:e5:54:b8:2f:e3:a9:3e:50:a5:b1:
37:e4:bf:13:4e:57:94:85:5d:39:48:66:11:83:64:1f:e8:ff:
ee:fa:5d:30:4b:c7:7f:76:76:5b:fd:c5:6c:95:54:a8:f2:d8:
8f:dc:ac:74:8b:5e:11:0e:a7:81:6d:e0:30:5f:ad:9c:be:ae:
c0:cf:77:d2:72:05:5b:c2:49:a0:d3:b5:72:b6:73:bf:69:b2:
1a:20:ec:25:af:1b:c1:aa:74:a3:4d:20:58:be:ac:a8:5e:72:
b7:76:cc:f3:df:5b:8a:06:84:32:da:13:eb:ed:be:12:c8:f3:
e1:73:8a:e7:e3:07:80:7c:d5:77:c6:b2:57:dd:c2:f7:0d:35:
6f:a6:6d:38:bc:1e:32:9e:60:8f:f1:7e:a7:80:82:7d:e1:38:
98:c5:de:ef:e4:8f:50:15:65:5a:8e:e6:af:79:08:5d:3b:f6:
6a:b2:56:12:b1:44:7e:82:a3:5f:5a:07:af:b7:cf:91:61:c7:
74:be:82:94:ba:c9:14:2a:ed:90:29:59:83:cf:12:d2:8d:d1:
58:0b:72:98:0c:0a:7d:e8:19:bf:80:db:87:42:1e:c1:10:95:
a0:d4:c4:67:fa:bd:f5:f3:d5:f4:ea:c5:4e:2d:e7:36:39:b4:
73:33:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:27 2025 by rpki-client