Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
File: 002c315b-3412-464e-b865-645f657f136d.roa (raw, json)
Hash identifier: 49FoxcMdXFCvUmE9yxLnkyTu84HMXhg7iu3lfi4+Gjc=
Subject key identifier: 73:87:1A:D5:14:DE:29:1D:6B:D5:0C:F8:A8:A8:CF:9E:4A:90:83:A8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4FC672346100C9A8C7ECCED562F16B6D12444E3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
Signing time: Tue 01 Jul 2025 15:10:24 +0000
ROA not before: Tue 01 Jul 2025 15:10:24 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d079::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c6:72:34:61:00:c9:a8:c7:ec:ce:d5:62:f1:6b:6d:12:44:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:10:24 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=dc6c7d8213b7ed67860c93cff066587d6d42d5f77ca6034ee2d69d99161cdcd4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:f8:66:ca:c4:b6:75:01:16:89:60:8b:4d:
bf:58:5a:5a:e8:f8:03:e8:c1:60:5e:20:30:95:1a:
9a:f1:8d:dd:30:51:ea:7c:95:42:42:c9:94:bd:2a:
47:f7:3f:7d:ad:e5:5b:c6:03:97:98:8e:b6:30:a7:
d6:d2:6f:c7:6b:63:6f:3a:08:5f:4d:6b:61:f1:01:
a9:33:06:78:76:53:44:55:5a:9a:8d:d4:5a:ba:5c:
44:ae:8f:d5:aa:3f:8b:7d:53:06:78:6e:37:18:37:
ec:dc:af:0c:13:3c:b5:90:9a:03:36:58:32:71:a5:
8d:ae:9e:02:02:75:71:c8:14:c3:52:9b:16:7e:b9:
56:35:f9:a5:b9:34:2e:20:3c:60:24:67:3c:d1:49:
b7:c8:2b:ab:87:43:3a:05:ef:65:91:46:f3:a8:c1:
55:1e:af:90:d7:17:c6:ec:22:fd:d1:bc:ed:c8:71:
c1:fe:8a:d3:b3:f7:3f:b4:86:87:44:eb:4b:08:bf:
95:1c:16:96:3d:4f:b7:92:dc:5e:ab:06:6c:df:36:
89:74:e9:fa:cc:8d:ae:a1:70:81:ec:59:da:0e:d6:
bf:82:7a:8a:9d:f8:13:0c:b4:3b:42:b4:82:db:e4:
d4:35:6e:d9:fd:23:b7:b4:da:ff:02:d8:b9:b2:90:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:1A:D5:14:DE:29:1D:6B:D5:0C:F8:A8:A8:CF:9E:4A:90:83:A8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/002c315b-3412-464e-b865-645f657f136d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d079::/32
Signature Algorithm: sha256WithRSAEncryption
9a:69:c5:9b:04:77:64:00:02:2a:df:6b:59:7c:72:f8:b0:33:
aa:59:89:73:c5:aa:4e:4d:d6:9e:2c:e7:f8:91:08:29:53:6d:
12:05:3c:0a:69:89:be:3a:2c:c3:be:82:02:ed:9d:7e:d4:79:
d1:47:8d:10:a2:75:9b:b7:4a:75:82:1e:72:bf:8c:83:d0:f9:
00:50:84:f8:d6:61:ac:2f:2c:ec:9e:a6:7c:06:71:9a:76:c5:
7b:39:0d:5a:e2:8c:ac:8f:f3:5d:2d:14:1b:55:ff:cf:6d:1a:
bd:64:f7:98:91:92:24:66:36:43:58:b4:1d:21:57:f6:f3:85:
3c:fa:ba:9e:bd:24:e5:69:bb:db:f0:6f:74:88:0a:11:1f:b2:
f2:0c:a9:83:31:a3:3b:60:cc:62:1c:d8:5e:20:9a:b9:6c:24:
4a:7f:25:0a:a1:a8:8b:81:d6:00:a9:43:bb:0a:09:0c:f8:9d:
12:0c:b8:65:d3:d9:f1:af:7d:67:96:35:fd:bc:7e:f5:21:db:
0d:e8:5b:f0:a7:93:6a:ab:78:3b:ee:0d:7a:79:2c:dd:bf:ff:
1c:0e:48:3d:f8:30:5a:5f:eb:9f:38:dc:82:99:d2:03:03:de:
12:1d:27:6a:51:c8:5b:95:8f:ee:3e:87:97:8b:d0:1f:40:5c:
c3:9e:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:23:36 2025 by rpki-client