Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
File: 1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa (raw, json)
Hash identifier: hLMFM0e3zO75rVUUNfInp0iMui7ljGgItFZ16DJ5+aY=
Subject key identifier: 95:D0:48:69:5B:69:61:7E:F0:89:A6:DF:4A:61:A7:EC:F5:CA:83:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 366675D7BA0312D2AE3AC098FA68AA33991365C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
Signing time: Mon 28 Jul 2025 16:11:05 +0000
ROA not before: Mon 28 Jul 2025 16:11:05 +0000
ROA not after: Mon 01 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:66:75:d7:ba:03:12:d2:ae:3a:c0:98:fa:68:aa:33:99:13:65:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 16:11:05 2025 GMT
Not After : Sep 1 23:59:59 2025 GMT
Subject: serialNumber=fee275f59e09031db2ac4a6a0e350c21cad8183e9f4e7a32e7a2bf990c4619c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:86:52:48:cd:6b:5f:01:44:2b:88:30:91:
16:cf:21:55:aa:99:d2:b9:71:b9:9c:9f:e8:a7:1a:
10:df:71:fc:91:58:1a:cc:d7:50:df:2a:98:44:d0:
45:ea:8d:6b:fc:81:e5:08:09:52:a7:47:c9:d4:fd:
a6:7c:1b:35:2c:72:8e:f6:de:3c:04:e9:5d:75:a4:
87:2b:33:8d:79:f9:10:e9:20:d0:30:a2:7c:37:87:
de:a6:26:2e:66:cb:1e:f6:16:85:35:5c:30:2c:66:
8c:96:34:59:d8:49:f8:b0:16:de:8b:62:b0:ec:4d:
61:50:62:e8:cd:5e:c1:20:47:a5:e9:d9:bb:3e:66:
50:f6:d5:05:68:9a:a8:41:47:89:79:4f:37:be:87:
f9:8e:1c:6c:33:35:af:9b:5a:3e:15:9b:ae:52:2b:
ed:be:38:93:81:d4:03:32:c7:2d:d1:0c:6c:42:b9:
2f:68:dd:4d:d0:01:d8:54:f2:ae:ed:9a:ef:8d:c0:
59:56:da:9a:47:f7:b4:a6:82:a0:7b:80:ab:02:5f:
fd:31:01:eb:76:3d:3e:a4:a7:ad:c1:4f:b9:49:93:
38:2b:24:19:5e:f1:41:65:1e:48:28:df:82:1d:ae:
d9:ad:fd:0a:d4:49:2b:71:90:6b:1b:b0:0a:cd:9c:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:48:69:5B:69:61:7E:F0:89:A6:DF:4A:61:A7:EC:F5:CA:83:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
94:f3:f3:50:51:f8:e6:57:44:0e:75:48:9d:22:4d:54:e8:b1:
dd:c9:86:5e:6e:5a:d0:ac:81:bd:45:57:34:d7:48:dd:92:5a:
ab:dd:39:e7:18:e5:fe:12:ad:dd:86:03:94:12:ae:36:d6:61:
f4:41:92:08:95:b5:53:1c:dc:ba:95:ab:ad:0c:b5:3d:eb:82:
7f:4e:55:79:b8:72:50:aa:f8:f1:cd:56:6e:cb:71:09:b6:79:
53:54:88:34:f6:d2:57:ce:b9:c3:2f:65:9d:be:a2:0b:94:04:
f9:18:1e:e5:73:6d:af:c7:f0:54:fc:3b:2d:3a:8b:41:f7:51:
42:39:50:a8:fa:56:9c:bd:f6:45:2b:a6:25:e9:8d:0f:45:43:
b4:ec:44:6c:ca:b9:f0:df:3c:3b:7e:4d:94:54:aa:a5:34:86:
c4:0c:aa:76:f1:c3:f3:0a:b4:5a:13:99:53:16:8f:9a:92:43:
6d:5d:9b:0b:6f:14:43:3d:4b:bb:f3:9d:64:f2:b6:45:e7:f2:
ad:92:11:72:1f:3c:e1:5a:9c:e9:4f:91:1a:24:6b:f4:ba:76:
6e:4f:5f:26:3e:e0:31:a7:58:a7:48:83:9b:01:6a:7d:f2:89:
92:af:a9:d4:b3:44:a4:9b:ee:fa:2b:51:ab:ce:02:44:90:d7:
e9:55:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:50 2025 by rpki-client