Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa
File: 2d9f3120-fab9-43aa-973f-4142925b1416.roa (raw, json)
Hash identifier: WGCyCngSPGKLWF6673JC7u/JDtS6s/RBVooSNlogN5w=
Subject key identifier: 81:31:23:18:34:56:E6:FB:11:3E:54:5A:4B:72:3C:D0:F3:AE:73:D4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B25C8071D73158E8DEDB58E8BEBE107A8BBC52B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa
Signing time: Fri 11 Jul 2025 19:31:12 +0000
ROA not before: Fri 11 Jul 2025 19:31:12 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:25:c8:07:1d:73:15:8e:8d:ed:b5:8e:8b:eb:e1:07:a8:bb:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:31:12 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=0a44fa8d566d3edd3f7616503c5ab47ac8e19ba0653a844facc97e3557780687, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:d4:76:ca:d9:d2:80:f4:59:1c:a5:37:e6:
71:98:d2:25:1a:a0:0a:84:fc:c3:2d:5e:6b:65:e2:
e7:1f:82:b7:51:f8:5a:aa:a4:72:56:90:ec:1a:a3:
b7:1e:75:d2:9a:10:8d:d2:f4:58:1d:32:b9:55:e7:
e4:dc:57:a2:70:12:c0:c9:ee:27:a8:23:84:aa:de:
6b:22:37:1e:85:13:7f:9a:6e:30:36:d5:c2:20:ea:
24:61:80:e5:c6:bf:52:93:8f:2d:c8:0e:f8:fc:64:
a7:ac:41:67:f9:12:26:a9:25:3b:df:54:c8:df:f1:
46:a1:96:8a:32:60:3c:94:3b:eb:b7:33:5f:cc:bd:
85:e0:46:29:a4:08:f9:5f:ae:6c:42:32:1c:03:a8:
ac:dc:0d:24:4e:64:5c:88:bd:d1:ec:30:cd:7b:79:
e6:bb:ff:96:fe:1f:17:47:fc:f7:c7:bc:71:6b:59:
fc:9d:e2:30:e4:69:8b:65:b4:2f:43:92:ec:1c:8d:
ba:f5:a3:b5:14:1b:14:24:e6:59:f8:8a:92:95:9a:
0c:58:a9:34:91:36:fa:4b:c8:f4:a4:70:58:f4:d4:
13:0b:ed:af:43:26:a3:1d:1a:d2:0f:41:e1:f0:21:
cb:14:3c:9b:f6:fd:0c:85:a3:2c:72:1b:81:18:57:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:23:18:34:56:E6:FB:11:3E:54:5A:4B:72:3C:D0:F3:AE:73:D4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d9f3120-fab9-43aa-973f-4142925b1416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
46:f2:f9:04:07:d1:66:12:53:ab:2b:8f:c5:db:46:2c:e6:e5:
28:13:66:8c:41:2c:16:8f:e3:6a:50:c6:26:d1:0b:5b:b7:b3:
f1:23:45:d1:44:eb:2b:d0:d0:89:37:9e:84:70:94:af:cb:e5:
95:1e:87:57:b7:18:62:a6:30:26:b3:09:65:bf:63:ff:98:5b:
c5:78:be:f3:ee:72:6f:d0:55:1b:4a:b0:21:ca:f9:e8:43:8c:
e8:8e:d9:13:69:a5:8f:c4:21:5f:cf:06:28:d0:50:b4:17:00:
da:fc:fa:0d:9a:ec:84:ff:e5:ed:e4:33:1d:ef:0c:8b:be:94:
85:88:1d:01:ce:3f:ac:4b:7d:4b:8a:da:d1:06:88:84:e3:01:
e8:86:ef:46:d6:2d:76:53:95:62:ec:41:e4:4a:b9:0f:0d:b4:
d3:c1:6c:14:ed:df:a4:d9:38:a8:48:0c:e8:d9:ef:ea:3f:6a:
aa:16:33:da:c7:3d:e1:ab:73:77:e1:69:eb:8a:a6:6a:bf:90:
37:85:ba:ac:ae:eb:19:3b:01:84:ca:97:c8:ec:5c:5f:d0:94:
3d:8e:be:1e:cb:ea:d0:de:68:22:e3:cc:cc:ee:98:11:25:7b:
42:5d:d7:fc:70:96:5a:26:86:e8:e5:4b:21:24:1a:62:2c:f3:
e9:bd:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:43:57 2025 by rpki-client