Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9762274-c916-4e75-a8ee-f0e4966bd488.roa
File: c9762274-c916-4e75-a8ee-f0e4966bd488.roa (raw, json)
Hash identifier: cEf1TdD+wJhFF+89jOpExyAb6nCWV6frzm7cg2Xnolg=
Subject key identifier: 79:4A:A1:51:97:BC:09:39:25:E3:11:1D:95:37:92:89:1D:EB:FA:FF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CD95BDE8CB5C02E7868796622B4697DB282AE1D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9762274-c916-4e75-a8ee-f0e4966bd488.roa
Signing time: Wed 30 Jul 2025 20:08:50 +0000
ROA not before: Wed 30 Jul 2025 20:08:50 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d9:5b:de:8c:b5:c0:2e:78:68:79:66:22:b4:69:7d:b2:82:ae:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 30 20:08:50 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=b409f556a42739b69833b4bf935900839debcdc3dd6393c4d9382922d6f7ce0c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:8a:f4:01:65:3b:4b:04:3a:82:31:dd:56:
b8:54:c7:9b:db:82:24:c6:28:81:68:e9:cf:00:5b:
84:df:db:4f:f8:ad:88:ed:82:b3:81:6f:7b:e0:83:
b1:76:2b:0a:6b:8c:5a:9f:27:5f:d5:04:71:67:37:
6d:69:81:32:23:fb:dc:25:09:34:12:2f:14:84:03:
02:06:6b:b9:f9:25:f6:3e:4a:af:de:f0:21:e7:0a:
3c:f4:ca:58:33:8a:c1:51:98:39:4f:90:9b:a0:56:
75:57:dc:be:ba:fb:fd:d5:d7:cc:f7:fd:ed:d2:c8:
03:52:1d:20:95:8b:9b:97:f5:43:24:d0:fa:62:4d:
c1:01:ae:99:e8:4c:9f:fe:98:f4:eb:9a:93:e5:11:
9b:4c:09:d6:df:ba:48:48:f8:2c:03:35:08:6e:53:
65:4f:4a:9b:ca:28:ec:2e:61:11:67:f1:2d:00:64:
c4:f7:32:89:b1:db:d2:77:00:1c:24:d3:fd:96:f7:
cf:6a:39:13:e9:05:e0:be:6d:32:4a:32:1a:ca:17:
f2:26:ef:3e:b9:a2:f0:ff:f9:d2:4e:fe:94:a8:0d:
0a:2a:57:d7:93:ce:42:64:a6:87:de:7f:88:dc:3b:
c0:35:bb:27:4a:5e:b0:8d:78:db:f8:9d:78:6a:80:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:A1:51:97:BC:09:39:25:E3:11:1D:95:37:92:89:1D:EB:FA:FF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9762274-c916-4e75-a8ee-f0e4966bd488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:9000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:7b:aa:b3:33:b0:98:5a:31:36:14:82:40:b3:64:96:fb:e7:
39:44:1f:df:0a:ca:f4:fd:8b:0b:fe:cd:7b:ad:31:4b:4e:65:
0f:cb:df:2b:17:82:84:29:54:9d:cb:3f:06:0c:26:9f:1f:5c:
4d:42:cd:09:13:c8:63:b8:72:08:99:3b:ab:11:d0:02:35:29:
47:74:1e:a9:00:7a:31:0a:4a:eb:01:7c:0a:b5:0b:76:d8:79:
b7:00:01:c5:93:18:b4:f2:a0:aa:b1:a7:c0:22:49:af:a6:45:
7e:ea:60:d3:14:ef:f3:1f:cb:4e:08:9d:da:fb:94:ea:32:24:
a4:62:48:5d:59:13:e7:82:2f:97:17:14:46:b0:9e:55:98:3f:
0e:92:d7:b1:29:d8:d6:b7:86:97:ff:62:5b:d9:9f:0f:11:1f:
5c:dd:40:d9:4f:d1:d5:6e:3b:3b:d4:31:c8:b1:ea:30:88:90:
e6:22:30:4b:54:2b:1d:a3:91:52:a6:73:b0:e4:0a:53:99:11:
65:aa:22:27:67:b9:7f:40:07:ad:61:31:8e:eb:e1:cd:8e:f4:
23:6d:67:df:99:f3:88:80:c4:ba:c6:99:43:c9:d9:de:cb:6a:
d5:c1:b3:ad:06:c6:fc:d6:e2:9c:9a:61:56:34:af:1f:b0:94:
2f:5f:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:46 2025 by rpki-client