Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
File: 35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa (raw, json)
Hash identifier: h5fPc+dtdaXVZuAFZnUTd6daRlliym0ejNKKVZrPpyI=
Subject key identifier: 4E:52:25:5B:64:35:5F:D8:EC:97:F6:E1:3D:62:DF:A1:0B:90:E6:F7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 477371AD07E16D0C24B687A141055810BA25B42D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
Signing time: Mon 28 Jul 2025 16:10:13 +0000
ROA not before: Mon 28 Jul 2025 16:10:13 +0000
ROA not after: Mon 01 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:73:71:ad:07:e1:6d:0c:24:b6:87:a1:41:05:58:10:ba:25:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 28 16:10:13 2025 GMT
Not After : Sep 1 23:59:59 2025 GMT
Subject: serialNumber=36d41ea00e88e4674be81759feb76467c092d8ab3d3bc132e048e34f984795b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:26:f1:e1:3a:0d:e2:56:8e:55:8a:9e:ec:
e7:15:fa:1f:a4:d5:b1:59:3d:c9:94:84:57:d7:a6:
c2:45:f8:7c:25:22:97:9a:6c:9e:3f:80:bc:22:7c:
21:43:4d:cf:97:43:09:e0:72:3b:7e:7c:55:c0:b0:
51:4f:b3:66:36:12:84:a5:b1:b4:d2:a1:1c:c8:fa:
84:40:41:fe:62:8e:8c:7e:e8:0a:03:10:57:da:97:
ca:f1:2a:91:b0:89:f5:50:9d:35:9d:2a:65:c4:4f:
6d:2d:a7:88:99:c4:6d:1d:0f:35:bd:67:5b:a1:f4:
73:e6:7b:7e:b3:8a:fb:1e:1a:1a:dd:91:26:af:81:
cc:6c:1a:5d:75:54:52:79:2c:86:29:20:de:03:9d:
c1:2f:0b:a3:9b:d7:b7:d2:a1:42:47:3f:e0:3a:58:
8a:6c:fa:54:3a:48:01:3c:70:a5:f1:6c:e7:f9:5f:
18:84:b8:02:55:2a:ad:12:50:8e:83:0e:b2:fe:fd:
b0:74:6b:fe:9e:24:29:b0:bc:47:ea:18:e1:7e:7c:
58:74:88:1a:53:b7:17:9c:94:8b:00:6b:58:91:b0:
c8:54:88:09:81:e4:35:c0:f0:10:33:cf:97:98:85:
79:54:f3:3f:50:b6:5a:d1:a1:23:70:e9:4b:bb:48:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:25:5B:64:35:5F:D8:EC:97:F6:E1:3D:62:DF:A1:0B:90:E6:F7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:b000::/40
Signature Algorithm: sha256WithRSAEncryption
12:2a:81:86:54:02:ea:03:64:aa:1c:c5:62:77:d4:8c:3d:ef:
41:e3:3c:29:79:e1:90:5a:04:c7:81:85:a0:ce:93:19:61:cf:
ce:00:e4:15:72:5c:1a:5c:5d:b4:85:bc:84:ca:92:bd:02:55:
5b:72:04:fc:2e:5c:6d:79:32:e6:e9:36:d9:2e:3d:0c:0d:d1:
08:18:20:c3:d2:48:6c:d8:a5:c8:74:a8:62:6b:82:d0:0a:cb:
0c:1e:dd:c0:9e:06:b5:0d:95:d8:3d:60:85:2f:a6:a5:bd:ec:
c0:3b:92:33:8c:a5:ec:c2:4d:6a:48:c8:c5:9b:f4:d3:0c:39:
b8:c2:72:a3:b2:96:b2:60:65:2f:c3:67:eb:9b:ec:81:dc:1e:
9c:be:ef:ec:3b:f3:47:82:09:cd:20:22:f1:3b:7a:03:86:ea:
30:d0:a6:e7:fa:18:0d:94:22:d2:c5:1d:a5:b1:3a:fb:90:70:
7e:c1:47:75:da:72:fe:4d:aa:31:7f:41:38:32:49:14:e7:06:
56:08:94:3d:e5:17:28:c1:9e:09:2a:a0:08:04:ee:23:59:a0:
ac:57:24:0e:16:4f:f2:f1:5c:d0:a0:65:7c:c0:2c:62:0d:45:
4e:bb:af:2e:34:b2:af:79:ec:25:33:35:48:58:49:36:6a:af:
9a:d2:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:54:52 2025 by rpki-client