Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
File: f0af2b24-5037-414d-9581-f0315174658c.roa (raw, json)
Hash identifier: LsYEik1Ep/3XO9IFo2OICFW3d1ks2ge9zw0JEZrsOuY=
Subject key identifier: 2C:A1:F2:6E:7B:BD:0C:A7:C9:74:7B:A2:0D:DF:C0:78:DF:CF:FC:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E3F2B67746EC8C2E251CD237C932C57EE350AF7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
Signing time: Wed 30 Jul 2025 20:08:54 +0000
ROA not before: Wed 30 Jul 2025 20:08:54 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:3f:2b:67:74:6e:c8:c2:e2:51:cd:23:7c:93:2c:57:ee:35:0a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 20:08:54 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=669d769a3a50a9369e6473288c438c071bc532a4145789d2ef5d127f24c1c222, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:e3:bb:82:03:62:44:23:0e:ba:73:c2:95:
f6:a9:1f:9e:42:04:1e:62:22:75:b5:e3:36:29:f0:
b6:fb:ec:22:58:db:23:61:7d:68:5b:cd:ac:7f:ec:
07:a9:64:bd:84:e9:2f:a9:03:f1:27:3a:85:16:a4:
82:99:0b:4f:30:46:e1:fe:b1:e8:ae:e4:a1:5e:36:
2b:04:f2:8a:70:c0:ee:b9:c6:e2:b6:08:29:73:cb:
c9:c9:ef:6e:51:e5:4e:5b:59:0d:27:c3:65:ac:ee:
07:31:24:e7:f6:ba:c9:24:6b:07:80:7a:04:c9:b4:
af:ae:ba:5f:07:55:73:16:cb:09:5f:a1:ce:8b:58:
f0:72:1e:4c:28:3f:30:ef:c9:36:b3:50:72:15:c1:
6b:61:d3:0d:49:ea:fc:e1:09:e3:8f:a6:28:62:f2:
ad:3f:c8:22:68:97:da:b8:b1:3c:60:30:38:ab:e4:
89:8e:d4:f8:ab:3e:2f:53:aa:7b:00:b6:16:79:a1:
a1:cc:0c:e2:2a:42:1d:b3:25:b5:9d:ad:e3:9a:0d:
82:b3:c7:78:a7:5e:a3:03:dc:85:85:bb:4e:98:6d:
92:34:02:fe:65:da:46:83:6d:e1:aa:b8:0f:92:fd:
e0:e1:51:e7:51:92:a6:1c:23:5c:e4:59:ca:41:21:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:F2:6E:7B:BD:0C:A7:C9:74:7B:A2:0D:DF:C0:78:DF:CF:FC:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0af2b24-5037-414d-9581-f0315174658c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
c4:47:b8:0a:34:a1:c9:4b:43:a3:1d:32:12:2f:cc:6d:d1:d4:
95:f5:e7:01:65:97:66:1a:34:79:a8:0d:45:cd:e9:dd:d9:d6:
32:96:70:f9:06:ef:07:11:16:1a:c4:b2:66:73:a5:41:9b:4a:
63:80:a8:25:ef:b7:ea:f4:1b:ce:0a:64:d5:34:ae:4d:9f:ce:
b8:de:97:1e:09:fd:fb:8b:07:4f:ce:f7:ba:19:c1:14:5f:23:
73:96:2b:49:d9:2e:f4:ef:0a:94:8d:b2:a2:a3:eb:1f:cc:4f:
a5:14:37:2e:ef:2b:a9:ae:4a:fe:b0:d0:98:43:0e:c8:7b:a9:
ab:a4:3f:68:a6:9f:a4:85:29:12:43:31:13:58:fe:f0:81:57:
f3:cd:c2:9a:65:d3:ae:8d:8c:c0:ac:32:24:fd:17:d9:c2:42:
19:da:36:98:8a:aa:ba:fa:de:04:af:81:aa:1a:00:51:5a:31:
91:9a:2b:48:9a:23:c5:16:7a:82:c2:5c:3f:06:39:7c:e5:78:
57:ce:17:64:84:53:da:f7:98:6c:af:7a:86:29:90:52:d2:ca:
d1:db:b1:ac:78:53:70:db:c6:99:75:58:50:dd:71:38:21:8c:
4f:cf:56:7a:c1:cb:e4:b4:e8:63:57:19:57:f7:73:bb:10:75:
8a:94:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:23 2025 by rpki-client