Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79337548-762c-432b-bf7a-72bf34db9509.roa
File: 79337548-762c-432b-bf7a-72bf34db9509.roa (raw, json)
Hash identifier: 0Un3IUIFk6dIqjBehOYDa1lR6glQn6TOU7XqTfPVu3s=
Subject key identifier: 26:74:23:FF:9E:4C:10:46:24:A7:34:92:71:AB:F0:43:42:6C:AC:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36890EFE18965233ECA34D3ECB4F9E4F14BB3CBE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79337548-762c-432b-bf7a-72bf34db9509.roa
Signing time: Mon 21 Jul 2025 16:51:30 +0000
ROA not before: Mon 21 Jul 2025 16:51:30 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:89:0e:fe:18:96:52:33:ec:a3:4d:3e:cb:4f:9e:4f:14:bb:3c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:51:30 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=f6961025dba577b5b89f4a7f8dae0f31a9c3909597a45c9414673104b6f87429, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:88:0e:eb:60:ef:94:75:5c:66:18:15:c3:
e6:e8:c0:32:c3:a5:c4:3d:ad:25:4f:c6:2c:49:76:
79:b9:0f:d2:52:fd:7e:25:5c:92:99:8a:e0:0d:60:
58:e7:85:83:94:59:be:76:62:0f:b9:34:fb:a7:a7:
e6:a0:de:6f:8b:23:07:e6:bc:77:ab:09:a2:c8:3c:
9a:f8:b8:f5:cd:f8:a3:3a:3e:19:82:75:55:4e:7e:
2c:6c:f2:f1:59:8f:91:d7:57:39:28:b6:c0:fd:b7:
48:dc:05:1d:6f:69:98:46:8b:26:17:80:97:c4:1e:
2c:ed:15:98:e4:ed:bc:af:a6:72:50:44:60:e3:47:
26:20:18:92:18:f1:19:d0:59:80:98:25:10:9a:91:
4a:59:d5:c5:af:27:32:e3:ab:52:d9:13:ca:7d:3b:
8b:b2:03:4e:d3:95:bf:ce:9d:a2:19:ef:a2:70:34:
a3:36:0c:ec:e0:64:86:d6:a2:25:58:0c:fa:6e:17:
9e:f0:48:29:81:59:ee:48:8b:25:33:a4:69:e2:54:
f0:6c:3f:d5:78:14:c7:27:c2:bf:0d:7b:7f:8f:6c:
1a:89:cc:bb:83:2e:1e:00:aa:36:7d:7d:77:28:17:
90:ce:35:a3:a3:e8:c1:6c:90:ce:ad:40:d9:66:bc:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:74:23:FF:9E:4C:10:46:24:A7:34:92:71:AB:F0:43:42:6C:AC:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79337548-762c-432b-bf7a-72bf34db9509.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c080::/46
Signature Algorithm: sha256WithRSAEncryption
61:e9:92:e6:4f:d2:c8:13:7e:c2:38:2a:19:56:4a:31:6e:7f:
47:aa:a2:75:26:ce:20:73:b8:42:ed:d3:aa:de:d9:3b:cb:b1:
00:30:8e:8d:dc:8d:58:bc:67:7f:12:60:48:d0:5e:26:85:54:
05:cf:79:12:4f:e8:59:53:85:1c:95:6c:3b:a4:d8:bf:e6:18:
c0:98:f1:83:a3:51:ca:1b:81:61:08:99:d7:f2:31:45:f6:84:
80:c5:04:f5:2f:a4:ac:2b:da:77:c1:14:99:b8:60:b4:aa:24:
44:6d:da:b7:33:80:a2:47:c9:ab:5f:62:95:63:9a:44:13:6f:
82:16:e9:0e:7d:9b:79:1d:51:2b:54:86:5e:f6:40:fd:65:28:
9c:11:79:8d:41:99:63:00:4c:71:6e:ff:28:41:32:02:b8:8d:
b0:3a:47:6f:d8:bb:bf:06:81:4e:8a:9a:af:78:dd:1f:8a:41:
75:cf:1d:0a:8f:ef:3d:41:fa:c0:67:ca:46:dc:d6:7f:72:65:
dd:d9:73:6f:2b:2a:a1:58:ed:bf:ce:d8:e0:99:cc:be:f8:5e:
48:ae:0a:8d:2e:f8:78:06:bf:f0:92:d3:d4:73:43:7f:b4:3f:
c0:6b:8b:44:a1:52:71:96:12:c4:9e:fd:c6:c9:a3:47:6e:9e:
7e:ea:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:39 2025 by rpki-client