Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
File: b41919f2-4e07-4adf-8fc6-43f8940080d4.roa (raw, json)
Hash identifier: cMU7bvpwK290eN3GpG7rFO90PSjmb6NfnWejoZLf/V0=
Subject key identifier: D3:C6:94:23:AF:DD:65:7C:E2:11:FD:F3:3A:11:0E:15:55:66:AB:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3600AB5266208FD1E9E5DDB20E52AD2A49EB0011
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
Signing time: Mon 28 Jul 2025 16:11:04 +0000
ROA not before: Mon 28 Jul 2025 16:11:04 +0000
ROA not after: Mon 01 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:00:ab:52:66:20:8f:d1:e9:e5:dd:b2:0e:52:ad:2a:49:eb:00:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 16:11:04 2025 GMT
Not After : Sep 1 23:59:59 2025 GMT
Subject: serialNumber=f96aba2254e4c7d4546e75b336d109d71d302f1a2a97e08f8093f996d8f51095, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:fc:e7:5c:e3:67:d3:e4:a6:cf:12:f4:08:
8b:fc:9b:de:ae:75:5c:11:12:c7:9e:bb:72:4b:05:
f8:85:87:40:4b:7f:51:00:69:b9:bf:01:af:ee:db:
a0:8e:c9:e0:9d:0f:26:c9:61:8c:8b:e6:b8:55:7e:
cf:36:b4:0b:2b:b4:1a:2e:82:c6:f6:25:58:33:dc:
a1:24:6c:be:b1:0b:40:bd:34:ed:2f:6d:7e:2c:52:
b6:dc:d1:2b:4b:0b:92:b6:73:71:db:f9:2f:40:fe:
4f:2b:38:b3:d7:a0:76:dd:1c:14:1b:14:fd:6d:85:
4f:0b:3f:52:f6:86:08:69:00:53:c6:70:a2:d6:f5:
80:3c:75:45:df:a5:22:2d:e3:58:63:d2:29:d6:21:
7a:64:da:46:fc:63:c0:f0:ee:7c:60:b2:95:ec:90:
5a:0c:c2:b5:3c:59:fa:88:36:2d:5f:60:36:7f:ed:
33:e3:01:d1:67:4d:83:e2:ea:db:34:26:83:5d:f2:
47:b3:21:53:2e:e6:d3:74:ec:76:4b:6d:77:c0:91:
4f:9f:79:f0:34:5a:90:62:5b:a6:79:de:06:a2:80:
51:f7:c1:c6:98:8f:20:63:aa:af:0e:33:34:a3:51:
bf:ea:b7:78:5f:06:41:a6:53:3c:a8:7b:b7:de:ad:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:94:23:AF:DD:65:7C:E2:11:FD:F3:3A:11:0E:15:55:66:AB:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:9000::/40
Signature Algorithm: sha256WithRSAEncryption
a2:df:49:84:d8:e0:35:a5:ee:55:c4:59:ff:d9:33:a6:36:3b:
47:34:6a:2e:eb:84:88:33:a9:86:7e:56:5b:bc:40:9b:90:4e:
7d:5a:d4:8c:8c:9a:6c:56:a6:53:13:94:b8:1b:c7:76:16:71:
ec:dc:86:f5:ef:1d:f3:e1:c0:b2:ca:93:ca:bd:3b:c7:3a:30:
a7:3d:c0:ab:be:e2:98:24:97:8e:d9:af:ad:45:41:08:87:2e:
43:f1:f2:29:43:f5:8f:04:62:5e:e2:a6:f7:ab:52:9f:87:af:
11:ca:bf:84:e8:8e:e4:4a:0b:ba:01:85:fe:63:7b:d6:59:ad:
39:f2:3d:78:2e:1d:3f:8c:2e:f9:b4:43:d4:ac:cf:dc:6a:2f:
0d:4e:cb:67:1b:84:b2:3f:07:45:53:d6:fd:63:1a:78:71:26:
a4:05:98:54:3a:dc:60:58:be:2a:97:93:05:c9:d2:39:f6:ec:
3b:30:ef:b0:80:f4:1d:a1:30:39:6c:26:66:43:d5:51:a0:8d:
cd:95:31:2f:cf:3b:7f:dd:66:83:e7:da:38:d9:9d:77:35:48:
d7:b8:81:4a:69:23:40:e4:be:3d:81:63:61:77:bb:82:6a:ad:
8c:6d:ef:0e:da:ab:92:03:de:44:79:28:82:16:51:4f:6d:47:
e1:ed:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:31 2025 by rpki-client