Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
File: 53380a08-b071-4729-9c41-f9a83d36f4c0.roa (raw, json)
Hash identifier: YDZghXky5KikDNwrzNwRd0UOGXA/KXI5nYjw0vVlp1A=
Subject key identifier: 65:C0:3F:9F:B7:50:9C:2D:9D:C1:D3:DD:C2:25:FE:F9:79:98:DD:37
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D01B83393046DF91BB69D44FBBAAB333867B37B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
Signing time: Mon 28 Jul 2025 16:00:11 +0000
ROA not before: Mon 28 Jul 2025 16:00:11 +0000
ROA not after: Mon 01 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:01:b8:33:93:04:6d:f9:1b:b6:9d:44:fb:ba:ab:33:38:67:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 16:00:11 2025 GMT
Not After : Sep 1 23:59:59 2025 GMT
Subject: serialNumber=dfc5b546bb8fdf3909f99e98cce73eadf354092288bf9dab307c633e41add42f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:e1:ce:22:04:5a:44:36:55:37:78:20:80:
cf:b7:f9:17:8c:c1:ea:a7:39:ce:9c:5c:bf:63:b3:
82:6d:02:31:a5:c1:04:53:06:35:77:2d:19:5d:46:
5d:72:82:1d:be:eb:58:ce:f0:28:7e:3b:7e:3f:8b:
03:e1:d2:c6:84:e9:0f:9b:0b:9f:3d:14:ac:6f:98:
11:e3:f8:77:8a:c7:a3:2c:75:89:95:62:13:77:97:
f3:da:a5:b8:7b:ad:7d:65:13:18:f5:3a:32:69:e1:
0b:01:ff:f8:7e:6f:94:c6:1c:00:3d:97:b9:0b:bf:
a0:7c:cf:37:2d:23:46:40:34:da:0a:88:25:fb:2d:
9b:9d:85:63:15:76:a3:ea:1f:49:cf:25:b3:32:d3:
18:2c:a7:62:48:f2:fb:f1:02:0a:0b:ff:22:b1:56:
1d:67:d2:6f:66:57:77:39:5c:77:27:8f:be:82:99:
a6:e5:f0:7d:19:fc:53:90:59:a0:50:86:44:60:61:
e6:e5:6d:0c:58:99:f9:b1:28:b0:a1:38:0b:5b:6e:
99:58:1f:77:a7:e0:07:ef:12:ef:95:c7:eb:fe:82:
09:2d:4b:d6:8b:cc:07:1a:6f:ea:af:64:96:2c:f5:
5f:67:40:c9:ef:1c:5e:3f:b1:91:17:1c:85:9f:cd:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C0:3F:9F:B7:50:9C:2D:9D:C1:D3:DD:C2:25:FE:F9:79:98:DD:37
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53380a08-b071-4729-9c41-f9a83d36f4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.80.0/22
Signature Algorithm: sha256WithRSAEncryption
24:96:55:a6:8c:98:84:4b:34:06:29:af:87:65:7f:7a:50:36:
f1:29:86:6b:54:05:3a:1e:ac:ed:4c:ca:a5:69:57:b2:db:f6:
3a:eb:df:0a:4e:e7:e3:39:f4:e9:3a:72:ac:10:c4:2c:ed:7a:
18:3f:01:86:c0:c4:13:b7:18:42:85:1e:8f:81:a2:f3:55:84:
01:60:c8:43:19:cf:91:09:06:63:d6:9e:eb:95:3a:fd:25:5b:
f6:c5:d6:6f:af:e7:78:d4:59:b8:da:fb:d8:bc:ac:ed:a6:da:
c3:62:f5:18:55:0a:b5:22:ff:12:92:f6:63:da:22:1d:ca:3b:
f7:91:7b:62:38:b1:ea:61:fe:4f:c4:88:1c:c5:ac:0a:bc:0e:
5e:b3:07:75:00:7f:d3:89:2e:8e:df:b6:5d:66:1a:ed:72:5d:
38:0a:4e:68:85:01:04:93:ac:9a:02:e8:f1:f0:69:7a:aa:48:
4c:fa:38:c5:70:58:c6:45:40:be:44:74:11:e8:16:2d:7f:fe:
bd:c1:b1:c1:6c:89:de:43:a6:a9:f9:a6:a7:c0:16:ab:51:15:
d9:25:e7:1d:26:9b:06:57:79:bb:2d:fc:82:69:87:3a:ca:3f:
ef:de:7f:ac:7d:d3:35:07:e9:37:34:10:b4:e6:12:55:72:c6:
3c:d1:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:47 2025 by rpki-client