Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
File: c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa (raw, json)
Hash identifier: u/kGYcaMguzVOTWP8ILvd5dWrC4mrexaQiOoVMDy4Bo=
Subject key identifier: 00:7B:24:B2:47:9C:92:E8:5A:6C:02:C2:B5:B4:3E:03:11:08:33:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B086FCB6E07B9C6F7B84E9C249F45F4F859BEE1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
Signing time: Fri 11 Jul 2025 20:20:08 +0000
ROA not before: Fri 11 Jul 2025 20:20:08 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:08:6f:cb:6e:07:b9:c6:f7:b8:4e:9c:24:9f:45:f4:f8:59:be:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:20:08 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=78ef90f4ecdab64b7a2c4b5713167c6214bd3bf8514b2ffe37e340eec26d6123, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:36:0b:8f:88:7c:12:76:b8:00:a6:3c:58:
a9:62:17:6f:b2:15:78:ca:3a:08:96:d5:9b:f2:30:
04:87:d4:cf:d7:67:fa:55:4d:ce:9d:45:0d:80:2e:
33:50:50:24:e9:ac:83:e6:ba:c8:62:87:56:6c:f4:
d8:9c:d4:b5:91:c0:54:05:88:56:b6:7b:56:f9:ff:
4b:e6:8b:94:ba:9d:04:63:ec:94:27:01:8d:d0:2f:
bc:98:11:be:97:be:8f:af:a9:77:6c:be:7b:84:6d:
ed:63:65:b9:d4:ff:82:59:6a:ba:72:42:16:2b:10:
b3:77:0f:b1:c9:03:0d:a1:7a:75:89:5b:34:98:e7:
02:2a:84:9e:71:ba:3b:16:2b:50:d8:5a:ad:80:4a:
8f:fc:94:af:d9:ee:4b:11:ec:58:dc:c0:25:51:fb:
b5:44:13:65:05:78:81:c9:62:10:de:c3:53:de:aa:
c4:c9:32:2e:fd:c2:0d:08:c6:8d:73:30:dc:1b:3e:
54:70:cc:0d:3c:35:a7:78:83:67:bf:f9:64:4d:3c:
7a:52:00:a9:da:cb:98:6f:62:c2:3b:4e:72:68:5f:
ad:51:2b:7e:35:ec:5f:50:ce:d3:ed:41:d6:ca:ce:
72:5e:dd:04:03:9e:7b:c9:7b:72:9c:4d:22:b3:fb:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7B:24:B2:47:9C:92:E8:5A:6C:02:C2:B5:B4:3E:03:11:08:33:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:a000::/40
Signature Algorithm: sha256WithRSAEncryption
37:5b:d0:4b:c8:7c:f7:3c:84:3e:46:06:31:95:5a:be:f7:dd:
79:f3:ec:06:f9:4f:15:a4:b8:46:d2:a3:8f:7e:59:08:94:37:
5f:d7:b2:b9:c1:2b:ee:4c:fe:79:ad:25:48:de:5c:cc:8d:67:
d3:62:e6:31:ff:87:06:15:ab:a7:f8:cb:e6:3f:25:f8:7d:d9:
a0:c6:7e:65:c3:0c:09:98:24:28:f8:60:29:cf:3a:58:a8:97:
f6:f7:fd:3c:5c:44:0c:11:23:82:ed:c8:5f:b5:f0:79:c9:a0:
08:ea:10:cc:cd:df:b0:72:0b:37:76:c2:0f:97:29:06:e1:e7:
93:87:51:51:88:78:07:91:41:76:49:6d:a8:fc:e7:b4:5b:78:
1c:3e:fd:12:be:46:63:69:37:9e:1e:01:dc:13:01:16:9a:f9:
fa:34:e0:bd:3a:80:62:3e:29:ba:d4:51:f5:f8:2c:b7:75:15:
fb:eb:55:8b:2b:43:dd:1a:d2:9d:e0:27:05:42:05:23:f0:f6:
bf:74:d2:ff:b0:f6:e8:fd:9c:2b:62:09:39:82:6a:fa:63:15:
fe:4c:4e:78:f1:20:64:89:3f:29:56:7d:68:f3:23:8f:61:fe:
3c:7c:b7:94:02:31:e7:2c:b2:58:68:9a:03:25:8b:02:16:d8:
27:94:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:13 2025 by rpki-client