Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
File: 85151a34-1ac3-4b9b-801b-33bd153ac88d.roa (raw, json)
Hash identifier: dYbiuxYxA5Lnv2Q7c+H6NtaW5PWvPc3J1ne95b1P5lE=
Subject key identifier: 43:51:9B:55:5E:5D:80:B9:BD:D5:C6:B5:BE:1D:FF:03:3A:3E:13:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D2CA753E5EF308059C04542FFB4C052B03339F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
Signing time: Fri 11 Jul 2025 20:11:32 +0000
ROA not before: Fri 11 Jul 2025 20:11:32 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2c:a7:53:e5:ef:30:80:59:c0:45:42:ff:b4:c0:52:b0:33:39:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:11:32 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=c7492260506da85a6a502a3ae1c32d39b5d012cc334b7c94712602d3780cb535, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:3c:b1:0e:e7:1e:83:49:73:86:83:ff:d4:
31:26:9f:4f:57:ca:cf:c2:0b:6b:7f:2c:8a:d4:13:
7a:37:e6:64:77:0a:fd:52:57:c0:b6:70:b9:d0:d4:
9e:30:96:91:25:03:66:7d:fc:75:ad:65:44:49:1a:
0c:0a:ba:9b:63:50:67:ba:6c:6b:2e:39:0d:a0:a7:
c3:ab:c5:5d:5d:98:48:9b:39:6f:29:f2:b4:8f:8d:
f0:6c:03:7b:92:44:2f:dd:78:84:ce:28:b4:24:a6:
40:95:98:48:65:00:37:17:e5:0d:b7:c0:b1:6b:04:
04:ab:70:ab:c9:4f:53:36:87:be:ed:73:f6:27:e6:
c7:da:4b:c7:a3:2e:3d:05:7d:b6:98:96:3a:e4:6d:
4d:9e:f3:b1:d1:f1:f0:c0:ed:69:3e:37:a1:c0:2b:
28:a3:c7:8c:8d:b4:b4:4e:15:d5:f8:2f:59:c1:6a:
e6:f3:aa:46:77:b9:a7:e6:f7:3a:26:7c:cb:81:97:
3e:ad:b6:71:5f:d1:cf:40:36:ee:0d:c6:5a:f2:d6:
68:51:a0:ed:dd:79:fa:94:52:a1:c1:e9:4c:78:b5:
52:77:5b:8e:54:04:b4:00:c0:d1:8e:ec:2e:4c:e2:
b1:44:88:36:92:58:d0:cc:90:47:0c:4b:18:72:51:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:9B:55:5E:5D:80:B9:BD:D5:C6:B5:BE:1D:FF:03:3A:3E:13:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:1000::/40
Signature Algorithm: sha256WithRSAEncryption
7a:55:ce:29:cd:df:5c:b4:cd:82:a1:79:0d:09:d4:24:20:4f:
a8:17:5b:ee:04:b0:6f:1c:d5:f4:35:f4:ab:9b:fa:4f:b0:80:
0f:6c:95:65:2f:6c:db:ee:aa:1d:af:9c:78:9e:10:f2:92:66:
ad:84:12:89:53:b6:ce:4d:93:f8:14:8f:99:5e:0c:ac:56:72:
7a:a9:d6:46:da:45:7b:0e:65:e7:35:dc:4f:71:8f:9b:87:64:
50:33:b8:f9:5e:41:39:bd:a4:e7:8d:08:95:a3:6c:03:a1:57:
87:ef:2a:72:c7:86:32:89:a4:7f:64:06:74:7f:ab:93:a3:22:
a9:57:86:a5:f2:71:27:26:55:6b:88:54:d8:84:77:5e:f5:45:
4e:d7:1a:c1:87:5a:d0:44:df:0d:7e:be:33:6b:4a:1b:aa:ca:
8d:d6:67:9b:64:8f:26:36:1b:10:80:ed:b1:80:e3:65:51:68:
37:b0:90:35:6f:1e:36:bc:2e:07:63:bf:fb:55:60:65:7b:b5:
69:bc:cd:f4:75:d9:8f:7a:05:00:47:80:d4:56:17:76:ff:ff:
72:b8:bf:2e:ab:58:7e:61:d0:38:72:ed:c8:da:43:07:52:dd:
ba:51:15:9a:cf:3e:9f:23:d5:21:e2:63:d6:cc:8b:c6:71:e4:
df:69:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:01 2025 by rpki-client