Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d030354-5f4d-47d4-9f96-310c9a509d02.roa
File: 9d030354-5f4d-47d4-9f96-310c9a509d02.roa (raw, json)
Hash identifier: JGrpUyu6f3BzMr8/r8KnmtiatVMm8lLwGW5FQ4+VLjw=
Subject key identifier: 67:F5:36:03:D6:2D:52:05:59:17:91:68:B1:49:BE:4D:55:3D:51:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4E572A20CCE2BEAAED6133F1C998980FCF2412DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d030354-5f4d-47d4-9f96-310c9a509d02.roa
Signing time: Fri 01 Aug 2025 17:11:12 +0000
ROA not before: Fri 01 Aug 2025 17:11:12 +0000
ROA not after: Fri 05 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:57:2a:20:cc:e2:be:aa:ed:61:33:f1:c9:98:98:0f:cf:24:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 1 17:11:12 2025 GMT
Not After : Sep 5 23:59:59 2025 GMT
Subject: serialNumber=940c28b2e7448acdce0363c5c7184d790376c7fd117cd5fa2caa805fec311a7d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:84:78:5d:5e:b8:07:89:07:b8:d7:46:66:
af:c4:66:57:1b:6e:ce:11:cd:cb:42:25:86:54:81:
71:6d:45:48:4d:8b:6c:13:7b:e0:b2:5c:9b:6a:e4:
ae:2a:9e:88:ed:b8:36:1d:e3:94:d6:aa:75:ae:d9:
1b:8f:b9:6d:07:1e:2c:21:46:42:de:84:d1:68:bc:
3a:4f:e6:82:e7:87:c0:d0:93:49:1d:87:c8:7b:6f:
b3:76:64:ec:a1:0f:ae:47:db:d9:d8:b1:95:ab:d7:
bf:b4:92:1f:fe:90:38:dd:22:ae:78:4b:af:7d:c6:
7b:9a:1b:cd:eb:90:e9:ca:dc:8b:83:47:8c:e9:4b:
8a:ca:0d:1e:ee:c2:c7:3c:c0:ef:a6:d9:a8:22:35:
dd:e9:4d:ba:bc:91:80:7e:c9:27:42:ef:11:3a:6f:
eb:8e:e5:a4:ab:58:60:7f:c6:dc:09:ad:2a:95:85:
fa:1f:9d:22:01:ee:21:e4:a3:7e:45:2d:64:cd:1d:
83:1e:b4:2d:80:4b:5e:d9:50:d7:11:bb:bb:21:f4:
2a:8b:c6:b9:4e:e5:a9:06:d7:f1:ef:1b:41:11:5c:
34:71:2e:a6:48:3d:c6:d1:6b:b5:8e:77:77:84:db:
b0:41:5f:69:ad:16:da:a0:7a:06:b3:dd:a8:59:31:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:36:03:D6:2D:52:05:59:17:91:68:B1:49:BE:4D:55:3D:51:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d030354-5f4d-47d4-9f96-310c9a509d02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:800::/40
Signature Algorithm: sha256WithRSAEncryption
00:e0:41:c8:0c:6b:9c:ef:2b:34:3d:67:1f:27:f2:67:06:7c:
bf:d1:66:94:63:44:9e:25:32:89:5a:2e:d1:2e:89:42:f9:20:
5b:cc:0c:c5:da:d1:7d:99:14:88:29:72:53:41:95:c8:a2:cc:
83:d4:f3:17:59:43:15:3d:cc:65:00:68:a2:17:3e:9a:a8:74:
2c:68:b3:6e:86:ec:ba:df:81:40:b3:0a:01:1f:ea:d5:ea:68:
cf:04:11:48:24:04:b3:5f:27:dd:22:e5:fe:1b:82:09:4e:f9:
2e:46:3b:57:ae:3f:67:58:17:0a:04:cd:11:bb:73:50:5f:3a:
96:db:ee:0a:e4:51:c1:c0:ac:15:f7:d2:de:cd:d3:31:86:de:
e2:34:85:e3:1d:db:a5:b0:f1:cc:97:53:a1:c2:8d:77:a3:ff:
e1:04:bc:5d:5f:dd:05:64:42:65:ae:4c:ee:2b:a0:8f:b2:ba:
81:08:83:9f:86:cc:80:c5:52:33:64:6b:57:68:e5:27:72:18:
c6:3b:44:56:a4:03:11:f8:60:a4:bf:78:bf:93:2e:23:38:e3:
80:6a:3d:9e:95:78:0b:a8:c2:66:84:59:0c:9c:ab:5c:5c:c5:
e7:14:a3:af:e0:32:b8:73:46:c4:d3:6d:a9:0d:6f:2e:f5:db:
e7:cc:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:02:56 2025 by rpki-client