Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
File: cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa (raw, json)
Hash identifier: tlVzOTNkrbEsyNebh0lo1Y8gnPc/Go6K39G4jjelM3I=
Subject key identifier: C8:7D:7E:7C:59:77:E7:41:17:5C:B2:C4:96:CB:AC:F8:08:79:E4:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 49A3D0DC9B6A7BE1CCE6C434238AA790F27FDCF2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
Signing time: Fri 01 Aug 2025 17:10:54 +0000
ROA not before: Fri 01 Aug 2025 17:10:54 +0000
ROA not after: Fri 05 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a3:d0:dc:9b:6a:7b:e1:cc:e6:c4:34:23:8a:a7:90:f2:7f:dc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 1 17:10:54 2025 GMT
Not After : Sep 5 23:59:59 2025 GMT
Subject: serialNumber=e5452bf952b3c651c47ca4f0b3d150d15cbcc08e5e2c58a6267f0b19b3990b62, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:24:e9:7f:85:57:9f:23:45:77:64:29:8c:
15:13:e2:c9:b3:ea:44:64:d0:04:97:d8:27:60:9b:
98:95:90:13:be:30:e3:49:bf:53:16:ad:40:13:4f:
a0:8a:f7:9b:55:80:24:20:2d:a1:70:2f:24:4e:aa:
59:46:1f:5d:76:44:e4:ad:9d:77:b7:d4:eb:86:6d:
76:29:c0:79:cf:1f:a0:78:c9:47:50:ac:78:e5:3f:
9d:e5:67:9a:8b:fd:5b:06:21:a0:8c:53:1b:bf:32:
81:0a:82:7d:20:ff:3d:78:6e:7e:04:97:ff:10:49:
43:e6:45:81:bf:dd:5c:3f:0a:bc:3f:70:ce:f0:e5:
0e:65:d0:4d:ed:71:14:56:9a:06:78:e5:88:ca:ab:
81:b7:cf:9f:31:58:51:c7:e0:ef:ce:a4:55:bb:91:
59:b1:ab:cf:58:49:6a:33:cd:96:7b:2a:67:e8:87:
8f:7d:7a:09:07:ad:59:1e:3e:5c:4c:15:c1:24:1e:
10:e4:c1:f4:09:67:42:ba:88:51:cc:8a:c2:3c:ae:
29:a7:cc:0a:f6:70:62:b7:53:ab:22:60:df:69:93:
c3:02:3d:31:4b:be:78:d1:43:2d:15:9e:06:1f:34:
39:09:c4:b3:de:94:2d:6f:36:a2:a4:46:bf:c8:31:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7D:7E:7C:59:77:E7:41:17:5C:B2:C4:96:CB:AC:F8:08:79:E4:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:800::/40
Signature Algorithm: sha256WithRSAEncryption
85:93:69:22:56:b9:0c:51:39:a2:75:28:e2:7f:e0:66:0e:e8:
58:5e:33:db:d2:5d:c8:d9:a8:be:53:ff:aa:4f:15:f3:a1:d5:
53:f3:77:3c:99:d8:c8:32:b5:58:ce:76:88:e4:15:95:b5:83:
25:a3:6b:73:1e:4f:c1:25:33:5d:63:46:75:f3:95:09:d4:de:
0e:32:e4:1a:b9:af:7d:30:00:79:de:4c:44:3d:6a:4e:4a:1e:
48:04:ce:c4:14:d2:82:b4:89:24:e1:5b:7e:54:f3:3d:33:60:
55:f0:84:0e:eb:d6:71:46:6a:b5:c0:26:9a:d5:72:c9:96:27:
bd:a2:1f:3e:5e:1c:71:47:bd:01:b2:3d:96:fb:5f:f2:60:85:
0a:4e:22:a1:84:96:8d:d6:e6:f2:07:7a:ec:0d:8f:41:38:fe:
04:c5:be:2c:17:a9:22:39:88:03:d1:84:bf:30:41:0b:b0:41:
3b:a8:bd:d5:d1:99:da:3a:8b:42:a5:1b:e1:cc:b8:cc:51:5a:
f3:8f:36:cc:27:3d:f5:c5:e7:03:9b:a4:d8:67:37:37:f9:66:
41:b5:82:c9:3a:46:32:52:a5:b4:d0:77:49:91:ad:d5:c8:50:
fb:bc:8f:7f:bb:0d:fc:18:b6:1a:52:e4:32:57:1a:7c:ff:17:
fa:b4:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:29 2025 by rpki-client