Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
File: c9cee224-c41f-451e-ba80-f0bceb6623bc.roa (raw, json)
Hash identifier: CqVunbfRxFjhkW3mlkZtwmVpUWAr2bcY0ObuOfiVC1A=
Subject key identifier: 86:85:F6:01:E0:73:87:A9:79:E1:36:7B:CE:66:1A:A3:8C:63:AF:A6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E6111937BBC542E5409620D21BDB3ED80F6EFC2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
Signing time: Mon 21 Jul 2025 16:40:36 +0000
ROA not before: Mon 21 Jul 2025 16:40:36 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:61:11:93:7b:bc:54:2e:54:09:62:0d:21:bd:b3:ed:80:f6:ef:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:40:36 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=50795619505ea5537600b658f505d286c5f14216dca5c198eb71fafb76211e06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:45:2b:b5:d7:1c:f2:2f:cf:e2:9f:ff:03:
5d:5e:45:16:4b:14:6c:ca:0a:f0:60:b3:75:c1:41:
7e:85:bc:e5:71:5f:d8:40:89:cc:db:e6:a8:5c:0d:
08:e6:f0:13:8e:e8:f1:54:8e:e2:ca:18:c2:2a:68:
40:2f:e0:12:cf:3d:4b:0e:19:9c:c5:c3:32:58:d4:
f2:79:84:46:a1:87:ce:1c:8d:77:34:3f:1a:55:30:
18:73:29:49:99:d2:96:93:68:47:bf:db:bb:56:01:
17:a8:d1:0a:a9:7c:03:96:e1:a1:26:f1:ed:4f:83:
37:79:4d:96:c1:b3:83:0d:a3:75:45:f1:00:b9:03:
26:a8:02:88:05:6a:e4:11:89:9e:f3:a2:ac:83:fe:
c7:74:8e:75:7f:a7:13:f4:73:84:98:05:d8:4e:dd:
2b:14:8d:17:2c:f6:5e:07:5b:b9:c2:54:d3:e2:13:
a0:3a:37:56:b8:43:e2:76:b7:6f:e2:3c:9f:c8:f5:
30:71:e0:1c:21:78:d1:af:81:17:d5:cb:4f:ef:f5:
4f:4c:d1:ee:0f:1e:7b:21:a1:59:b1:e6:6d:5e:c4:
78:7c:64:ac:da:9b:80:26:31:e2:7e:2e:f4:35:68:
7f:7e:b9:b1:5d:b5:e8:59:66:1f:80:a8:c6:37:1f:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:85:F6:01:E0:73:87:A9:79:E1:36:7B:CE:66:1A:A3:8C:63:AF:A6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9cee224-c41f-451e-ba80-f0bceb6623bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:4080::/46
Signature Algorithm: sha256WithRSAEncryption
76:30:08:c1:d6:30:d3:bf:b9:51:d5:34:3d:79:c2:1a:ad:b8:
25:0c:fa:df:40:55:e3:d8:72:a2:7d:18:23:0e:4f:e6:ba:6f:
cc:af:e7:4a:d6:34:3f:2d:bd:03:5f:0a:cd:15:d8:fd:62:68:
0b:00:98:95:30:27:8d:50:18:46:17:f9:6f:e4:16:43:6d:f4:
64:3c:e5:30:5e:98:3a:52:bd:7f:62:07:2f:37:9a:14:96:a6:
b3:a6:e4:ac:fc:4a:c3:89:97:0c:d2:92:c2:fb:53:9a:2a:a0:
82:e9:15:db:f7:ca:e2:27:7b:ec:16:6f:ca:35:83:64:15:34:
d5:4e:99:ff:58:aa:30:92:f8:12:94:9b:c0:0e:ad:54:16:c0:
9c:70:8e:2a:03:3a:d0:97:d0:7a:32:74:17:95:5b:5d:3d:52:
15:b4:63:17:72:7a:16:86:d8:b7:6a:ee:a1:61:49:e0:bd:43:
7d:14:6f:64:d1:a3:ef:36:9a:40:7a:da:55:b2:d6:e9:be:ff:
92:d7:5f:87:75:59:55:2e:30:aa:88:f6:fc:20:70:85:e6:f0:
2b:15:80:47:6d:c0:68:06:77:74:bd:f0:99:65:c3:04:a8:c7:
55:b9:8a:84:1c:3b:6b:63:b2:f7:c3:ef:3d:ce:bb:d0:2c:4c:
0d:76:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:32 2025 by rpki-client