Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
File: dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa (raw, json)
Hash identifier: dG/ENDc7xT3inTd75THvu32ULApAYI4exf1ea4iFZ/U=
Subject key identifier: 9F:8D:D9:3F:06:9E:93:65:AF:1D:91:65:00:A1:97:E5:A4:0D:CF:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AA89397F813DD6EA0EA6BE7CA5BF330236B21C6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
Signing time: Tue 29 Jul 2025 18:30:15 +0000
ROA not before: Tue 29 Jul 2025 18:30:15 +0000
ROA not after: Tue 02 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a8:93:97:f8:13:dd:6e:a0:ea:6b:e7:ca:5b:f3:30:23:6b:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 29 18:30:15 2025 GMT
Not After : Sep 2 23:59:59 2025 GMT
Subject: serialNumber=56e8c818de5e5a3643a01cbb54fe2319c9f0cd38cfcdd8de388fed3612bca012, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:71:6b:c6:03:3a:7d:4c:b0:ab:d8:0a:8f:
83:e2:e6:3d:b9:bc:8e:aa:ae:6d:02:1c:e6:61:2d:
2f:f2:81:42:6e:86:e0:42:0e:fb:ce:fd:60:24:dc:
51:4a:3c:bb:cf:96:25:fc:aa:96:a5:40:06:f9:dc:
27:0f:cf:ff:0f:9b:ab:4f:62:a0:46:60:e1:bf:2a:
46:51:c7:d4:76:15:cc:97:6c:71:c7:d1:a2:ed:fc:
e3:76:a2:23:d3:a1:de:04:bb:a2:d5:d0:9f:77:0f:
be:01:3b:1f:0c:a9:28:77:b2:f1:f6:88:85:66:4c:
f1:71:de:43:59:55:47:f9:d5:2a:2e:f1:e0:76:7f:
99:41:ad:cb:48:14:20:63:93:10:e4:25:a9:b8:73:
bc:87:a9:82:37:e6:a4:15:13:7c:2e:18:fd:40:30:
a9:c8:ad:e7:a7:a7:fc:ed:51:0f:a2:5f:70:7f:58:
77:7e:9a:ed:ab:21:86:c5:7a:00:d5:53:73:e8:08:
bf:e0:3c:73:71:1d:76:dd:87:77:2f:a0:f2:db:d1:
d7:df:7b:70:08:3d:4b:3a:46:1d:9c:3b:41:59:5d:
84:ee:0e:59:47:68:9c:0f:cc:bb:80:31:28:b4:7d:
a5:cf:47:66:67:06:35:99:bc:d2:00:8f:97:f2:dc:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:D9:3F:06:9E:93:65:AF:1D:91:65:00:A1:97:E5:A4:0D:CF:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4000::/40
Signature Algorithm: sha256WithRSAEncryption
65:4b:74:f4:b8:c9:9d:70:c2:58:44:7f:72:6e:97:04:96:8b:
62:58:6a:25:f0:1f:fb:f5:08:b2:a7:4a:26:8b:08:05:05:97:
50:5f:4c:6a:f9:ce:29:6d:ee:a2:97:1f:6f:cc:35:b2:ec:6f:
48:ab:5a:a7:32:3a:73:f8:fd:9b:17:ea:13:68:2a:c4:3f:48:
af:90:9e:87:40:61:af:22:96:e8:1c:a8:6f:ec:3c:52:e1:8a:
96:c6:ed:94:ae:61:c4:9b:b6:c0:91:f5:9b:73:9b:7d:23:71:
82:b2:91:86:5a:5c:69:4b:6e:50:01:04:f2:a1:3d:57:de:34:
ae:ce:7f:0f:ed:d1:8f:a4:06:7d:bc:aa:10:15:98:76:a5:fc:
5b:23:4c:51:d9:81:12:dd:c9:e8:a6:52:03:b4:b9:87:9f:58:
37:77:f4:60:ba:6d:fa:9a:e9:fe:09:e3:2e:b2:1e:96:c3:85:
c1:1a:1d:57:d3:99:63:52:24:f6:44:15:a3:33:54:a0:be:e3:
16:88:5c:97:2a:b5:fd:df:10:75:6f:f6:b8:b9:68:e7:36:3d:
b8:9f:c7:db:fe:6e:f5:2a:36:25:18:17:e4:13:bb:50:64:13:
34:51:13:75:d0:ba:30:34:4b:29:01:97:a6:31:8c:4c:14:df:
81:92:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:10 2025 by rpki-client