Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
File: 1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa (raw, json)
Hash identifier: 8FYNxtqra33HmUerP3zz+zuN16ucQFxdzTOJDmvHBl4=
Subject key identifier: 42:C5:F1:3A:53:E7:D9:39:86:AE:17:57:65:3C:6C:8D:9B:0F:24:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E0C0823B57E028E637B5454C019015CDF6BB822
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
Signing time: Wed 30 Jul 2025 20:07:10 +0000
ROA not before: Wed 30 Jul 2025 20:07:10 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0c:08:23:b5:7e:02:8e:63:7b:54:54:c0:19:01:5c:df:6b:b8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 20:07:10 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=fc02527c518b22a55548c5b8ea2e568fafc029d3f66002008bb49064fe4a72ec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:e5:87:87:fb:44:c4:89:98:52:62:df:da:
55:08:70:39:18:11:eb:78:73:33:ac:79:e8:b2:af:
1d:8b:37:d5:89:5e:24:73:df:8e:be:fc:37:a6:f5:
13:a9:d9:85:b1:8d:9c:02:47:bc:35:7b:29:5a:c9:
8d:35:67:24:b1:26:db:e1:29:c1:d2:8a:27:3b:36:
52:d1:89:d7:d4:b5:fd:61:28:ac:1e:8f:87:62:1e:
5b:9f:e8:08:87:05:3a:9c:78:81:ef:68:55:6d:64:
71:6a:2d:5d:46:68:20:fa:d2:e7:5c:a9:be:c8:d0:
db:21:9a:a9:df:71:b0:23:3a:cf:5c:c7:01:12:39:
2d:2a:5f:6f:ec:2d:7b:cd:12:c5:af:cc:de:f0:36:
77:3c:5f:19:cc:58:5a:9b:c2:b9:04:23:c0:33:b1:
a1:e6:63:21:3e:f9:1f:97:40:52:f9:a8:5e:02:1e:
07:8a:4f:9b:72:ab:43:17:06:86:d9:ae:52:c1:2d:
c4:78:ad:02:3c:ec:fd:74:da:92:a0:9d:d1:ab:75:
53:15:8f:6b:0e:70:15:88:c9:70:06:83:80:14:e2:
90:ab:2e:79:0e:ef:c2:f8:31:f7:97:0c:69:df:c1:
fa:fb:db:43:e0:6d:79:5b:c8:cf:24:ba:a4:51:6a:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:F1:3A:53:E7:D9:39:86:AE:17:57:65:3C:6C:8D:9B:0F:24:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1811ff20-0d9a-4507-b8b3-5ee8130e32e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:1000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:56:1a:a3:a8:81:61:51:ae:82:e0:62:9f:72:e6:e7:eb:4e:
ff:9b:ba:4e:ee:3e:f8:e3:ae:fd:3d:e2:17:dc:62:d4:3b:f2:
7d:fe:a8:3c:1b:61:ca:28:20:3c:b3:f8:f1:c3:96:6f:92:09:
6e:8d:65:4b:6a:70:15:29:3a:ad:5e:62:03:02:81:9a:89:b3:
3f:21:30:da:b7:e2:8b:4e:8e:22:e1:f2:a0:83:3e:48:ac:c3:
04:59:67:78:54:42:26:ca:c1:9d:a7:79:26:96:0a:cc:0d:0a:
e4:5a:73:46:3a:6a:f2:e2:b4:55:06:0d:03:22:79:28:d9:72:
a3:e1:43:42:32:8e:4f:e1:3b:42:d2:b6:df:03:29:73:15:7a:
f8:ef:98:8b:b8:36:e3:10:ec:76:69:00:8b:6e:a8:63:52:e6:
a8:95:2f:fb:77:8b:c8:10:eb:c2:88:8b:ca:5a:1f:41:e9:11:
08:32:95:8b:3c:b6:91:6a:06:c1:c4:16:c6:f7:41:08:68:bc:
0a:c4:ab:02:51:b0:71:01:2f:be:ca:26:2e:9f:81:e1:9c:17:
5a:c3:58:78:3a:de:45:ef:73:a9:83:a7:cf:25:b6:29:f3:e4:
81:17:47:59:4d:4f:fe:dd:58:7f:be:47:02:04:1f:91:ce:e6:
ef:fe:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:57 2025 by rpki-client