Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
File: 2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa (raw, json)
Hash identifier: Xj67B6MKiALyPqlXj3v9xcS9ve1z5VUh5BPdcv5tUu4=
Subject key identifier: 43:DA:B7:2E:26:8A:81:22:C8:C9:0F:9E:2A:FB:BE:9C:A7:05:38:56
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F685593FB7172CF6951AC5C95332E74CCA2D245
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
Signing time: Fri 25 Jul 2025 17:00:28 +0000
ROA not before: Fri 25 Jul 2025 17:00:28 +0000
ROA not after: Fri 29 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.51.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:68:55:93:fb:71:72:cf:69:51:ac:5c:95:33:2e:74:cc:a2:d2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 25 17:00:28 2025 GMT
Not After : Aug 29 23:59:59 2025 GMT
Subject: serialNumber=8ccf1a4c9bca52711f56277d5d59172344834b20e02ec59ed8c2374acf3bc50e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:00:b2:62:1f:c0:4c:5b:aa:f6:8b:08:1f:
54:fc:91:e7:be:bd:ef:d6:b1:60:2a:8e:50:e2:25:
dd:f9:80:51:dd:2d:51:46:df:6f:b4:76:d0:e8:23:
b1:94:7e:66:75:2b:de:d8:7d:d5:49:1c:eb:bb:0d:
38:14:c1:ac:23:1a:41:81:11:ba:f8:49:4a:d8:3e:
fb:f6:85:a6:17:c9:2a:ed:16:5a:18:11:9f:98:29:
e9:70:f1:dd:78:2b:eb:d0:49:d1:7c:93:49:2c:0f:
b4:11:8e:83:db:b0:61:a2:45:c5:3b:2b:90:7d:23:
9c:b7:da:fc:7e:74:fa:6f:bd:71:ea:d2:76:d7:55:
7d:8f:f9:0e:60:9c:92:e7:1c:49:6d:c0:73:a1:de:
0a:5f:49:bc:ad:0c:8d:37:a2:65:d6:c2:92:e8:f5:
82:97:b9:ec:91:ba:18:ba:fa:07:75:ef:e6:4b:42:
71:6e:3e:81:f1:96:b7:53:e4:96:dc:57:d1:ee:a8:
a0:ba:7f:ef:2f:f2:4e:2f:10:8d:c5:10:ee:d8:ec:
a4:97:1f:46:17:19:b8:3b:6d:ec:25:fd:e7:3d:01:
2f:18:aa:d9:da:ef:17:c6:ec:f1:ba:14:85:11:1c:
49:3c:cf:bf:f0:f5:5b:ab:a1:a1:c2:52:bd:63:6c:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:B7:2E:26:8A:81:22:C8:C9:0F:9E:2A:FB:BE:9C:A7:05:38:56
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2fc018c8-db8b-4b04-8f90-3baf826fc10b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9a:cc:3e:91:b0:60:01:96:88:d8:d4:24:b9:7a:b5:37:bc:f1:
52:e5:95:4d:13:e9:7a:d5:94:e4:13:71:0f:08:bd:53:49:d4:
5a:34:9b:15:b0:b1:2b:34:b2:74:57:13:c0:83:24:6d:4a:51:
30:16:6f:95:8b:83:57:62:d6:27:94:81:28:99:5e:1d:87:a9:
dd:2d:39:72:62:36:b6:45:83:b3:b2:39:3f:c3:d5:af:52:24:
13:66:d2:51:a5:b9:8e:87:d1:9a:f4:12:3b:77:d4:64:38:6f:
8f:f3:de:3e:61:7b:28:f7:82:a3:67:a0:70:ae:2a:6c:8c:dc:
18:4a:1c:32:22:0b:1f:d7:d8:e0:28:bb:60:2c:7b:09:59:72:
b4:9f:06:8b:6a:99:a5:30:57:fc:a8:fa:62:cf:5a:05:da:d1:
66:a4:ce:5e:7f:37:ef:8f:c2:29:16:eb:85:b6:b8:c7:6c:fe:
8c:b0:7d:55:52:3e:84:9c:88:49:b3:95:b4:e8:cb:3d:e0:2d:
91:a3:c5:d6:bf:fb:78:47:8f:36:7c:be:ae:44:05:6d:bd:fa:
ac:30:0d:ec:01:14:ec:fe:7a:e0:b0:e7:3e:98:84:7c:5b:40:
d4:fc:b1:c5:41:37:73:01:d4:dc:bd:67:ec:29:04:55:fc:e7:
ea:d8:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:12 2025 by rpki-client