Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa
File: 64f0a197-0057-458b-924a-0b7079fbd04c.roa (raw, json)
Hash identifier: lmBizg8CwgXwB0Rtv5zTrZ2hRbNL93zGI0sirIFESIY=
Subject key identifier: 4C:68:36:1E:5B:64:E2:A9:79:5C:F2:8A:42:D5:4B:89:55:D3:BF:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 325D12B4757ABA15A67085496CA1DD7957B9C3FF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa
Signing time: Fri 01 Aug 2025 17:10:30 +0000
ROA not before: Fri 01 Aug 2025 17:10:30 +0000
ROA not after: Fri 05 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5d:12:b4:75:7a:ba:15:a6:70:85:49:6c:a1:dd:79:57:b9:c3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 1 17:10:30 2025 GMT
Not After : Sep 5 23:59:59 2025 GMT
Subject: serialNumber=f2ab3a39489091a0224fe545e277524bf67564b9561fc01f2ad8ab39bce77712, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:8f:2a:2a:c1:24:3e:e9:78:70:a3:f8:a4:
3c:f2:73:00:a6:76:8a:de:39:4a:89:a8:ff:e0:7e:
9b:51:04:a7:be:bd:25:7f:43:9f:e0:ef:cf:cf:bc:
2b:a5:6b:22:93:d9:16:bd:dd:e1:b2:72:f1:5b:3d:
6d:14:69:3a:fe:d1:11:09:46:48:47:49:1a:15:d0:
c3:a6:2d:1f:17:7b:75:fe:f3:87:e3:b5:9a:f5:a2:
1c:e2:73:16:b5:e5:60:80:04:2a:12:1e:4d:58:61:
9f:f2:9d:7c:5f:88:c0:31:5b:36:3c:09:4d:4c:85:
97:61:03:4a:03:3e:c8:e2:fb:8a:b8:26:6e:49:11:
bc:8b:be:9d:d9:a4:fc:52:f1:a6:af:e1:72:0d:c8:
62:81:f7:6e:33:83:be:b5:71:3b:45:31:74:0a:0e:
c3:06:16:77:f9:40:6b:fa:27:5a:5d:ac:7a:26:3c:
4a:71:c0:c2:e0:53:2c:5a:f5:ef:81:f1:c1:fd:ed:
1d:f9:4e:b1:d0:05:11:0e:7b:cf:0a:09:d8:1a:61:
3e:d6:c6:61:16:bf:4e:2f:63:8e:43:d8:bd:98:75:
24:fb:aa:0e:3c:9d:6a:d9:4c:a6:cf:1c:e6:3a:ca:
c9:0d:bc:70:d0:4d:b2:66:3f:b8:fc:81:68:b1:6b:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:36:1E:5B:64:E2:A9:79:5C:F2:8A:42:D5:4B:89:55:D3:BF:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/64f0a197-0057-458b-924a-0b7079fbd04c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:840::/48
Signature Algorithm: sha256WithRSAEncryption
5e:70:8e:16:d2:d4:94:7f:dc:11:b9:8d:44:5c:b3:3d:ea:1b:
76:f5:71:7e:5e:8f:9b:e0:06:49:86:69:58:c0:6c:ad:09:df:
1a:f9:70:d8:10:79:c9:d9:09:dd:4a:b1:96:34:65:00:d9:87:
01:ae:b3:b5:52:69:23:d8:cf:b6:15:ce:92:50:77:10:13:53:
fd:07:f5:37:06:fd:3c:be:4a:06:22:79:b9:9d:37:4e:1a:4c:
19:80:39:33:d5:94:03:c6:cb:28:1c:1e:a0:0c:40:41:34:fb:
ac:21:f2:e5:77:ae:2d:35:62:55:69:82:f3:60:18:13:43:fb:
dd:e7:8f:85:6b:84:25:1d:3e:cb:ce:e1:8f:29:77:33:cd:b0:
ea:e9:71:8f:27:18:09:c8:cf:21:94:b3:a4:ea:bb:df:26:15:
0b:bc:a4:85:55:c5:fe:f4:54:47:4c:0c:6b:98:ab:87:ff:c4:
41:38:cf:01:06:8d:32:ae:64:72:6c:83:a6:e8:e5:79:56:0f:
71:2a:96:62:4c:78:68:18:e7:84:a7:40:b0:1c:8f:cb:ea:45:
04:44:4d:06:16:8a:d2:4e:de:97:95:6c:ee:69:e6:b7:30:1b:
20:16:be:7e:61:48:d1:ed:52:64:70:8e:92:4f:da:4d:86:6b:
14:b4:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:19 2025 by rpki-client