Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
File: 1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa (raw, json)
Hash identifier: ysJW1nObkIS0L4HBzqV+n3vdelpIOP4Ssh7GEjBMHsc=
Subject key identifier: 6D:83:52:0B:98:75:9B:20:29:82:00:C8:1E:7C:17:B6:C5:15:19:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72172C8C719AF8C15671B8749A76BB9BA57AF5F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
Signing time: Tue 01 Jul 2025 15:10:52 +0000
ROA not before: Tue 01 Jul 2025 15:10:52 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:17:2c:8c:71:9a:f8:c1:56:71:b8:74:9a:76:bb:9b:a5:7a:f5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:10:52 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=b0b272414de7bc4c228c21ed97f2fe23dd47100f8c01256c66ef310327c15e13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:41:90:65:03:13:51:9a:08:9b:94:af:80:
88:10:41:5f:fe:24:d9:59:53:8b:4f:7e:89:59:48:
2b:d8:4e:0d:fe:b4:84:f1:59:ef:8c:20:b5:b7:33:
29:f2:83:e4:15:f1:9c:ad:c7:c2:37:62:18:c9:36:
b5:33:57:d8:f7:9b:6e:8c:9e:ec:19:04:87:ea:6d:
39:3e:f4:89:58:19:fe:a0:d5:27:42:e9:c6:d0:3e:
8d:f8:30:06:60:78:5f:ec:ea:32:cb:77:64:75:ee:
17:3f:2b:b9:d2:b5:38:34:42:e7:23:32:49:13:d2:
88:4a:30:7c:f9:2d:da:f8:e4:62:81:1c:67:20:fc:
97:2d:b4:fb:05:ef:7a:71:b1:b8:da:53:18:ad:d7:
5f:39:1c:f5:27:94:29:3d:7d:55:f5:09:e4:31:dd:
f2:8a:1d:0f:bb:ae:13:dd:8c:7b:e9:cb:f7:67:b3:
94:b7:77:28:a6:98:58:dc:26:6a:58:23:65:f7:1a:
9f:e0:34:a9:b8:a1:83:e2:be:d7:c5:6f:65:13:74:
76:40:d6:a0:a1:c2:1a:fc:1b:e9:b2:82:7d:5f:e1:
ec:c2:0e:1e:d7:42:cd:96:89:c7:9e:7c:cc:e6:be:
34:be:91:2e:b2:4d:72:6f:2d:cf:3c:db:b6:57:b8:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:52:0B:98:75:9B:20:29:82:00:C8:1E:7C:17:B6:C5:15:19:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
bf:92:db:6c:89:29:f8:6c:64:e3:21:fa:71:2a:6e:83:d4:be:
9d:36:85:dc:3c:12:53:74:e7:20:c5:49:89:ed:a0:96:07:f1:
77:f8:44:c6:dd:96:37:48:f2:23:fa:e6:63:a0:cd:eb:46:26:
53:67:ff:58:fb:22:e6:cd:7f:81:bd:8e:e1:89:8e:5c:ef:ad:
08:17:a7:b3:de:38:88:ee:8d:b2:53:f3:5f:3b:73:0d:38:49:
07:2d:15:70:e1:62:a0:ff:c1:49:17:b8:cb:b3:12:47:23:13:
e2:78:34:05:cd:56:92:c1:7e:46:00:3e:60:79:46:17:0a:68:
6e:0e:65:0f:a4:dd:32:be:40:38:d3:14:b2:09:ba:cb:b2:d4:
ab:01:c0:22:95:4b:21:04:53:1f:72:0e:23:b7:e1:8f:19:f2:
0a:95:58:f5:9a:e8:a2:14:a3:8a:5d:66:f2:98:0a:01:d9:54:
11:87:76:de:5e:3d:91:bd:23:29:24:ec:88:37:9e:1a:4b:b4:
63:5d:ce:71:2f:ed:b1:97:46:c6:29:cc:21:d7:16:60:1e:52:
c1:71:79:30:18:b7:37:29:2d:3d:c7:48:ee:c0:57:05:1e:d3:
a9:a1:da:5f:76:fd:a2:f7:fe:7e:b2:e5:b9:4a:fc:8b:2b:b0:
34:d0:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:07 2025 by rpki-client