Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa
File: bdfda4b5-843e-4797-9739-e616ff3d5825.roa (raw, json)
Hash identifier: kVgpmRhzF4qjuWQ7OP5GgHcjlCmxdFfRaEcD/bIMhyU=
Subject key identifier: 41:C2:4A:3F:1D:51:56:AB:A1:6D:19:7E:0A:4A:43:C3:6F:BD:DB:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2534CD07BB9B8596C1EBAD65F47E401F596BE4E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa
Signing time: Mon 28 Jul 2025 16:10:06 +0000
ROA not before: Mon 28 Jul 2025 16:10:06 +0000
ROA not after: Mon 01 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:34:cd:07:bb:9b:85:96:c1:eb:ad:65:f4:7e:40:1f:59:6b:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 16:10:06 2025 GMT
Not After : Sep 1 23:59:59 2025 GMT
Subject: serialNumber=4cd48dc9af53255f55f3ae839545b3cd34a1e8d246bfc4925bc6aa31b6c89f8a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:c0:ee:b6:f8:0f:66:ad:8d:5e:7d:0c:19:
f9:23:65:c9:37:b8:75:df:97:1e:a5:c9:d5:63:17:
8d:54:ef:5b:37:4a:4a:0a:88:60:9d:b2:63:b3:d4:
d6:ae:b3:1b:d0:97:22:5e:a7:af:86:22:7b:38:b5:
c6:05:f3:3d:79:0f:99:81:ac:53:f5:42:a9:06:07:
29:73:d6:de:b2:2d:f8:43:0e:7b:1b:3f:4d:a1:6e:
5c:1f:8f:a5:a6:e7:c5:32:27:85:b4:eb:a9:82:40:
7f:0e:2c:7f:cb:76:53:db:56:82:e6:2b:ff:ae:19:
56:c4:1a:8e:48:c4:8b:0f:a4:14:77:0b:aa:ec:4e:
31:33:d6:36:7c:ec:56:51:ba:49:92:ff:7d:d2:7c:
db:c4:da:83:d4:88:d2:c5:5b:04:b0:3d:6f:0f:2b:
80:96:1b:8a:9a:d3:2d:f0:19:05:61:f4:e1:df:99:
c7:4f:4e:7a:0e:aa:9e:03:79:df:b9:51:1a:0c:2b:
af:21:5b:6e:6a:b6:74:d1:90:d7:77:1c:84:b6:76:
cd:2b:08:bc:6e:bb:79:64:e2:75:92:c1:2d:a3:4f:
e9:80:66:73:3b:87:3d:2f:16:ac:bb:82:31:9c:7a:
77:c4:ea:b8:c1:d9:9c:90:c7:e4:cf:d9:b4:ea:b7:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:4A:3F:1D:51:56:AB:A1:6D:19:7E:0A:4A:43:C3:6F:BD:DB:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdfda4b5-843e-4797-9739-e616ff3d5825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:8000::/40
Signature Algorithm: sha256WithRSAEncryption
60:cd:bf:16:85:44:c7:7a:62:3a:74:8a:a5:6b:83:f5:76:2a:
07:f7:f1:65:da:b4:67:90:b0:ff:b7:6b:8f:7f:16:c1:52:c2:
62:4b:25:10:f8:4e:24:5d:d3:e4:c6:d7:18:72:e5:ca:5a:7a:
2a:27:de:1a:d0:5b:ad:41:9f:1d:37:0c:92:f9:03:a1:62:a1:
d8:1f:e3:60:b0:42:d4:06:ff:c6:33:96:73:59:5f:ec:e6:e9:
56:7f:c3:b7:48:ff:59:b0:ec:e0:7e:70:f0:ab:d0:97:3a:99:
21:a7:e5:39:fb:86:42:cf:f2:ec:d8:e2:2e:7b:d0:83:cb:ba:
06:0c:cb:39:92:24:55:07:b3:0f:b2:2a:cb:25:6d:34:9b:6f:
aa:01:42:56:12:88:26:19:2d:cd:be:5a:60:70:b2:b7:36:5f:
d1:1a:f0:60:a9:a6:fd:81:b9:76:0d:9f:be:b4:e3:26:12:f0:
f9:64:c7:04:55:72:c7:db:d2:82:92:3a:06:6f:f4:e0:76:2d:
6b:d1:5d:93:0c:ee:12:56:31:b2:b6:a3:0b:29:3d:f2:28:d0:
22:32:09:24:16:2b:60:55:79:21:ae:e7:82:2d:02:24:19:d7:
50:3e:95:1e:c2:f9:f9:e4:27:5e:aa:11:e9:5e:b1:c1:06:c0:
d2:69:6b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:54:43 2025 by rpki-client