Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
File: edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa (raw, json)
Hash identifier: Ok47CExNJ9fuMmobEYYtZXYlQIaIrnZbNxnqvZjO+2c=
Subject key identifier: BD:14:1B:12:DA:B9:30:52:A7:C4:9E:A2:BA:0A:2B:CE:B3:54:DE:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E8E593107E963F03E8B738CD9D8ADDECE6FD746
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
Signing time: Fri 01 Aug 2025 17:10:14 +0000
ROA not before: Fri 01 Aug 2025 17:10:14 +0000
ROA not after: Fri 05 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:8e:59:31:07:e9:63:f0:3e:8b:73:8c:d9:d8:ad:de:ce:6f:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 1 17:10:14 2025 GMT
Not After : Sep 5 23:59:59 2025 GMT
Subject: serialNumber=77a22f5c26d4732d6160ebf5f4f00ea00afba086d3daa39a165d8f785da40e40, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:9f:aa:8a:3f:d3:2e:55:1b:59:dc:9a:de:
03:58:6f:75:ca:3e:d5:bc:f7:3d:48:a4:b8:9e:ba:
c9:12:57:6f:66:b3:f2:20:10:e1:c5:9a:c0:94:4c:
09:ca:f1:7b:8d:60:72:79:22:af:30:3a:51:a4:ab:
c6:87:99:a0:ca:11:9b:48:01:4c:3e:87:7b:af:5d:
16:a4:8e:5c:f3:e1:c1:a5:46:d4:ee:44:8b:af:11:
77:3e:4f:2f:83:c8:9a:5c:ea:9c:ef:86:80:7e:57:
62:ad:70:e2:26:73:cb:f4:a8:5e:39:4c:89:ce:aa:
c6:f6:99:2d:1c:cc:21:39:33:6c:7c:36:ae:3a:fd:
79:e9:23:13:07:92:3c:b0:d7:30:b5:20:40:f2:9f:
d5:c5:07:13:5f:b9:f4:b6:b3:f2:90:7c:76:fc:e3:
e6:9b:42:bb:a3:4b:92:12:bf:c5:67:b6:68:d0:e0:
33:19:30:2b:86:a0:3b:a5:6b:fc:9e:ea:f5:e4:71:
2f:32:f9:a2:73:b8:1b:13:f4:c4:e9:2d:b6:d5:b4:
b4:31:85:f7:e3:f3:03:16:ce:19:0c:1b:5e:92:b8:
8e:a9:d6:31:b5:03:59:bc:d9:21:68:61:3b:43:48:
50:44:c6:c4:08:e9:69:77:90:02:86:b4:1c:63:ab:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:1B:12:DA:B9:30:52:A7:C4:9E:A2:BA:0A:2B:CE:B3:54:DE:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:880::/48
Signature Algorithm: sha256WithRSAEncryption
11:19:5b:52:35:9b:19:c1:6b:de:1f:be:b6:bf:05:8a:0b:c9:
11:9b:a7:33:3f:62:ff:66:e6:11:e0:d1:9f:9a:15:b7:d9:c9:
81:1e:a8:ad:52:5f:da:45:b6:6f:a4:04:6a:41:67:6c:d1:98:
c2:4b:16:5e:c9:c5:e8:92:2e:ea:26:23:40:f8:d9:8c:a4:dc:
a0:e6:8e:cf:b5:cc:a1:e9:ab:b2:2f:64:16:5b:e7:9e:a9:09:
0b:4f:bf:67:4a:4c:27:5b:0b:4d:49:12:9e:00:ef:1e:b7:4a:
d8:c1:d5:da:19:14:f6:ae:7e:53:34:4f:7a:e6:e0:c6:65:28:
72:40:58:8f:9e:2f:f5:1b:4d:2d:e0:11:8d:30:32:44:4d:cf:
41:5c:24:11:23:06:75:7e:5c:91:ec:38:71:29:43:2f:9f:83:
04:b9:ac:0b:d1:7e:81:25:02:84:0c:b3:e4:19:3d:13:46:33:
68:89:c6:18:d8:73:ea:a5:9d:94:62:a2:5c:58:39:dd:7c:6a:
b7:e9:c1:1b:4a:5b:a4:ef:03:57:59:f5:0a:ca:97:aa:73:cb:
ff:98:92:7a:f1:53:7f:1c:97:34:be:75:b8:30:1b:7a:b9:ce:
9f:de:80:9c:ed:7e:63:1f:bd:6b:fa:ac:62:aa:75:11:44:55:
51:06:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:54:54 2025 by rpki-client