Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa
File: 2678e5d7-5995-4791-9318-f087e83654a9.roa (raw, json)
Hash identifier: 9DU3yr3r6REfvM4mtqf62yxJ8H9NXTbdOv5YPh8+oiE=
Subject key identifier: 94:24:90:C0:4D:F7:F7:88:15:79:44:1A:A7:B0:C5:DE:25:2B:7F:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D8EFDBD26C216B5798761987B63C84D83FC90CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa
Signing time: Fri 04 Jul 2025 18:30:20 +0000
ROA not before: Fri 04 Jul 2025 18:30:20 +0000
ROA not after: Fri 08 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8e:fd:bd:26:c2:16:b5:79:87:61:98:7b:63:c8:4d:83:fc:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 4 18:30:20 2025 GMT
Not After : Aug 8 23:59:59 2025 GMT
Subject: serialNumber=35cdf260948c1cbfb0376f037088f48ac555e865a190f630530e36bdbffd8b13, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:26:a5:18:f8:ba:b6:4b:6c:e5:4e:2d:a6:
2b:56:2c:e1:5d:6e:51:2c:a2:a3:ba:8a:a2:71:f1:
dc:42:fd:e5:2e:30:48:e0:a6:0c:96:58:f9:3d:21:
34:8d:0f:7d:5e:1e:7f:1a:34:7a:32:4b:3e:8f:07:
4c:65:7f:9c:c1:b3:68:50:4c:c6:f1:f3:5f:37:0a:
28:bd:ee:50:78:eb:b1:86:5b:1d:0f:25:8c:0d:c6:
34:4d:1c:15:c5:f1:73:cd:08:6e:31:0c:01:d4:3e:
dc:23:d9:6e:aa:12:50:64:7c:e3:41:55:21:53:3c:
c4:d7:85:85:84:21:a3:8c:30:8f:8d:ce:59:18:1b:
a6:d7:57:cb:cc:41:29:f2:25:7a:88:58:da:81:39:
73:16:e3:30:e6:74:a4:d0:5b:1f:a0:63:f8:66:2c:
d2:cf:9b:ac:0a:3c:e4:98:db:b7:da:f9:9a:0f:22:
7e:0e:c1:72:25:58:5a:5c:16:3c:86:f9:40:1e:93:
58:55:15:bd:ee:25:38:95:df:c0:d1:5a:9a:33:9b:
9e:de:64:72:3e:c2:cf:e5:e7:f9:cc:e5:5b:85:76:
ee:6f:8d:65:82:1e:59:da:41:40:ef:cc:8e:0a:28:
21:c9:73:29:f0:50:b9:9c:1d:96:cd:b8:2e:d8:aa:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:90:C0:4D:F7:F7:88:15:79:44:1A:A7:B0:C5:DE:25:2B:7F:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2678e5d7-5995-4791-9318-f087e83654a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:e000::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ab:2b:d3:28:a9:4d:ca:a2:ab:9a:e6:fd:dd:8f:fd:c6:c0:
98:14:04:9b:e3:f3:ae:8a:5a:dc:64:a9:49:a0:da:52:05:2f:
05:46:40:be:9a:0d:16:74:11:e0:8f:cd:31:c7:42:f3:6d:24:
74:77:3b:60:37:96:d4:74:93:57:9e:d8:b3:c4:e4:83:a0:9a:
d5:e3:bb:15:4d:ad:f3:95:8d:08:0f:6e:f7:17:f9:6e:07:6a:
1b:53:81:73:2d:2b:b9:f0:b2:ed:4b:5c:47:b6:0b:72:f1:36:
ef:6d:08:93:23:0d:8a:93:d5:5f:8f:5a:fc:98:2f:b5:d8:31:
64:1e:78:8a:f2:ae:72:ea:01:4b:c8:e8:f7:cc:f5:df:5a:9d:
f9:62:d3:e1:e8:03:47:4f:3e:65:a3:d6:42:ac:de:f2:65:ff:
ba:62:ee:8c:76:f8:16:40:f8:18:ef:36:4a:c9:16:bc:27:dd:
42:05:5c:18:af:22:f7:09:6b:de:c7:60:62:06:70:12:a9:03:
bb:78:43:89:68:c3:bd:ef:0b:cf:57:53:86:f6:11:a3:7d:ab:
1b:0a:da:a3:ad:f3:88:fe:e9:2a:bf:4c:1c:ea:71:da:b9:3e:
59:30:94:c6:8f:8b:f4:df:16:cf:99:ff:2a:44:68:cb:e9:e4:
01:43:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:24:08 2025 by rpki-client