Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
File: 325fa89c-1511-4efc-84ed-51af85c9ed14.roa (raw, json)
Hash identifier: /QXiMvMNs7QOOC1j07YJWC4TPSMmdmDmGzs0aaX7iWY=
Subject key identifier: 2D:60:3E:35:C0:2E:C6:C1:1C:6A:49:05:90:01:7E:A0:C2:1A:6D:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10F330E37F0C55070201056583794BA93B31440B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
Signing time: Fri 25 Jul 2025 16:50:41 +0000
ROA not before: Fri 25 Jul 2025 16:50:41 +0000
ROA not after: Fri 29 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f3:30:e3:7f:0c:55:07:02:01:05:65:83:79:4b:a9:3b:31:44:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 25 16:50:41 2025 GMT
Not After : Aug 29 23:59:59 2025 GMT
Subject: serialNumber=7dc124d75f4c2fec813c906523ea74d91c5dc748ce375930c611ea394736af8f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:81:b9:58:71:9d:99:69:d5:13:1c:70:fd:
77:e8:47:5c:6b:f4:50:9f:b9:56:48:2d:c9:30:21:
53:b8:ed:02:b5:0d:a2:75:ff:62:91:54:17:df:b3:
0a:17:e0:54:d5:46:44:9e:d3:54:c6:f1:98:1d:a6:
06:ce:17:6d:b7:65:40:47:40:4c:b5:1d:ed:29:37:
73:60:46:b6:a7:8e:eb:de:b1:33:a6:86:11:54:c6:
48:ca:34:4a:33:03:a8:e7:d3:00:f7:11:10:ad:cb:
2f:8c:5b:e1:48:53:42:d1:74:7c:61:fc:e6:45:86:
3c:85:f9:f9:1b:47:52:9c:91:93:73:78:b4:75:8b:
01:6c:1b:b6:18:bb:3c:e9:b0:4a:80:00:4e:3f:74:
85:7d:5f:61:25:19:d5:06:68:52:46:5e:41:74:49:
24:7f:58:1b:3b:3d:96:9e:f6:89:ce:41:6f:2e:f6:
7e:37:1c:27:7f:64:93:1d:7d:cb:2c:f0:84:e9:fc:
f4:28:fe:5e:f1:0a:79:2d:f6:ec:01:73:73:e4:33:
d3:94:aa:1c:d8:ed:a9:13:31:fa:8e:d6:db:88:82:
19:7b:f1:db:7a:ce:22:f4:6a:57:3b:16:bd:bc:b5:
81:97:9b:02:61:f0:00:ce:94:11:41:a0:74:8a:f5:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:60:3E:35:C0:2E:C6:C1:1C:6A:49:05:90:01:7E:A0:C2:1A:6D:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/325fa89c-1511-4efc-84ed-51af85c9ed14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:1000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:81:e4:77:75:72:f6:7b:ee:e4:04:36:28:8d:15:30:fa:74:
52:b9:df:4f:ec:d2:ee:20:8b:e1:3b:02:46:69:16:44:56:71:
0e:cb:92:6f:a9:bc:38:84:cb:6b:64:b6:42:8d:ac:3c:63:c7:
01:5a:b2:9c:07:56:56:3d:54:05:af:3c:96:ac:cd:27:ae:04:
d3:7d:88:70:07:09:48:39:1b:02:d7:70:ee:c0:32:24:7d:79:
7a:31:a8:95:4c:d5:2b:a3:62:06:4e:42:46:ab:70:4b:5b:16:
6f:a4:e8:c5:26:66:da:aa:fb:8c:d5:e8:eb:16:52:e6:c7:42:
b4:10:79:2c:03:21:19:ba:fd:75:2d:0e:8f:68:a8:b7:7d:d0:
99:e4:a3:5e:56:21:7d:23:73:b1:21:6e:97:80:fe:67:1e:ac:
76:69:4f:b1:8a:5e:a0:78:a6:a7:b9:85:98:99:37:75:73:9f:
c7:29:91:57:35:91:d2:9d:13:ca:5a:37:db:73:64:19:3e:45:
61:c9:cb:31:f0:a2:3d:07:f6:c1:12:88:0e:96:38:d8:a2:70:
fc:1e:ad:45:15:83:eb:23:e5:15:bc:28:ca:21:c9:b9:92:79:
61:76:09:51:8d:4f:98:de:0f:dd:24:1a:3b:e9:dc:e5:05:e4:
a2:e8:0a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:12 2025 by rpki-client