Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/446c7294-15f2-4794-9a7f-77119799815e.roa
File: 446c7294-15f2-4794-9a7f-77119799815e.roa (raw, json)
Hash identifier: WPdlgdY0hxFnmD7361fyBrZWn4CNhurrd5gCIdx6Hd8=
Subject key identifier: CD:4E:5F:0A:B9:38:B8:12:35:CE:77:F4:C5:45:F7:E1:FC:E2:1F:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5FF1827F1B4C7FD4952E7A2DE45E8B3A6098F90E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/446c7294-15f2-4794-9a7f-77119799815e.roa
Signing time: Mon 21 Jul 2025 16:40:39 +0000
ROA not before: Mon 21 Jul 2025 16:40:39 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:60c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f1:82:7f:1b:4c:7f:d4:95:2e:7a:2d:e4:5e:8b:3a:60:98:f9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:40:39 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=5bc44d8e254a4a1beb95ecfd746e9b930184b65293063008252f60c3016d8cee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:47:64:6b:2c:11:c2:9e:73:b6:a2:93:dd:
81:ab:32:81:fe:e0:dd:4d:41:b0:44:5f:93:e7:62:
ad:5c:0f:3e:39:ca:6c:d7:f3:45:83:a7:77:69:4d:
29:f6:ba:20:b2:c4:f0:20:6b:61:15:ab:ec:23:fb:
49:ef:54:ce:db:08:ba:74:fb:00:38:dd:44:0e:73:
c5:00:c9:4f:6e:ae:d6:d8:a7:79:e7:5b:9a:69:99:
6f:b7:e1:22:66:40:4d:3f:b8:60:7a:3d:fc:c2:c1:
01:c8:58:cf:43:30:85:37:88:2a:5b:73:9b:26:60:
ed:1f:30:3e:d3:ad:28:b6:d1:5a:89:f8:8c:74:4a:
f2:d3:73:55:df:1f:b3:8b:f6:10:00:ba:47:1e:b0:
ff:a8:fb:50:4c:9c:3f:07:a4:e0:e9:e7:0c:18:38:
87:ce:f2:d2:ae:45:39:af:6d:95:c8:b1:d4:74:58:
d5:0e:f2:e2:8a:fe:34:ef:9f:c9:b9:b3:b3:6a:07:
ef:f5:f0:a3:ed:4b:5b:05:65:30:b1:7f:47:4d:5f:
32:fb:d9:44:35:6a:10:c2:85:a3:30:ce:2a:93:b4:
38:8e:0a:7a:dd:32:02:34:23:00:d8:d2:f6:a6:82:
dc:a8:aa:9e:0d:83:11:9e:85:96:1c:e4:b4:5e:db:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:5F:0A:B9:38:B8:12:35:CE:77:F4:C5:45:F7:E1:FC:E2:1F:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/446c7294-15f2-4794-9a7f-77119799815e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:60c0::/46
Signature Algorithm: sha256WithRSAEncryption
38:b9:a8:01:a4:e1:ee:23:52:05:54:3c:b1:4c:53:14:95:e9:
6f:34:36:2c:aa:bc:10:9c:e2:90:0b:ca:20:76:6a:89:a5:d8:
d8:82:54:a7:de:78:da:6f:22:0b:fa:cd:c6:b8:b5:8e:3a:b8:
2b:78:57:55:ec:07:0e:42:5f:e3:5e:ad:4b:22:b1:60:e8:a0:
26:ba:bb:ca:11:ab:eb:77:ac:51:fa:b3:ae:d4:60:b0:67:9e:
5d:e2:f7:65:c0:06:19:f8:7e:eb:c1:9a:51:af:ad:de:19:ad:
e0:ea:d0:b7:33:73:24:58:cb:b6:8c:e7:51:9e:4a:ee:9d:58:
34:a6:c6:f5:41:b7:12:cf:54:8f:55:0d:7e:ea:ad:ce:a8:1a:
18:2e:34:fd:d2:24:9d:78:02:3f:cf:ca:b0:8f:6d:f4:05:d9:
c2:9b:75:2d:3a:d0:dd:94:79:e5:8c:3b:d1:cb:a0:d7:91:2d:
0c:eb:ca:2e:a3:62:06:87:75:4a:f5:8a:40:24:f4:22:de:6b:
74:93:16:d6:f9:bf:e1:b2:d4:f2:79:a3:85:7e:15:5c:a4:55:
b7:8e:a1:fc:8b:f9:da:b2:31:cf:d0:24:a7:df:73:2a:24:6a:
37:a0:4d:58:0f:df:bf:a9:5c:37:a7:b6:5b:49:7e:7c:18:54:
b1:85:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:38 2025 by rpki-client