Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
File: 3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa (raw, json)
Hash identifier: 10aHK4o195I6VuINiBLliSQlbMQXLudeMfb5WQyo+Fo=
Subject key identifier: 82:7E:77:43:BB:C0:A9:83:CD:CF:F8:7C:29:08:41:49:CC:03:C9:5A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 696B38317A23876A327B1F06AA3142BAFD8BE0DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
Signing time: Fri 11 Jul 2025 19:30:19 +0000
ROA not before: Fri 11 Jul 2025 19:30:19 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:b080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6b:38:31:7a:23:87:6a:32:7b:1f:06:aa:31:42:ba:fd:8b:e0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:30:19 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=cd807464e0f3b261e5770c61de882dd020846fd5fdb05544f7d7e811ae9eceaf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:59:94:f0:f7:c9:4d:b7:c6:3c:2e:db:2c:
34:fe:de:a3:43:96:c1:b4:6b:e5:e1:04:6e:57:53:
77:70:16:b6:51:19:61:da:19:f7:5a:4d:5e:d8:f6:
51:dc:97:05:e9:ee:eb:19:01:c3:13:38:51:56:8e:
8d:bc:84:09:5f:6a:f2:ea:f3:a1:7b:5c:e7:60:d5:
e9:62:32:7b:27:95:2e:dd:01:2d:de:f0:c5:32:73:
c4:cc:ac:1e:6e:c8:e2:18:40:47:d7:fc:11:b1:7a:
fa:ac:4f:da:90:b4:d4:a5:8c:68:c6:c0:22:db:7c:
55:16:99:b8:be:31:15:e4:a7:83:57:fd:0f:c1:21:
26:1d:70:e5:49:0c:b0:f5:41:de:73:6b:c6:b9:78:
f1:ad:b4:21:b7:54:28:1a:af:b8:a2:47:21:ed:37:
7d:8d:24:33:82:a5:63:c9:25:42:ad:06:f1:39:3c:
7a:3d:5e:fc:50:ba:c9:43:20:1c:de:1b:b4:a4:ff:
d4:ad:9a:71:da:fb:27:d9:23:6f:78:54:da:07:aa:
70:98:18:27:96:de:1c:74:08:2f:86:b4:2e:4a:01:
55:9d:ee:2a:93:a6:c9:21:9d:c8:2c:b6:d8:d7:b8:
be:4d:e4:90:0b:67:a7:f6:1d:bc:54:7b:70:f3:23:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7E:77:43:BB:C0:A9:83:CD:CF:F8:7C:29:08:41:49:CC:03:C9:5A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:b080::/46
Signature Algorithm: sha256WithRSAEncryption
33:2e:16:7e:80:f3:5f:5b:28:c8:01:9b:af:05:f0:3e:58:0a:
ec:f3:72:14:39:f0:79:92:67:9a:9d:1a:78:2a:e4:da:6a:b2:
a1:84:eb:ea:55:48:15:c5:25:50:e0:e0:95:03:68:66:98:81:
ed:a7:5b:3b:1c:22:02:21:a0:b7:11:b7:9d:82:6b:ca:6d:fa:
fd:bc:4e:73:9e:70:d5:a8:01:ee:ff:30:9f:dd:67:d5:51:31:
6e:20:d0:5e:fe:ff:c9:8e:38:d3:4c:db:c8:7a:31:37:b8:a4:
93:65:65:75:a3:cd:2d:27:c4:84:58:86:4d:93:fc:ac:87:c6:
b5:67:12:50:31:0a:c7:32:8d:bb:e7:be:9b:23:da:9d:10:9b:
f7:60:4d:9b:b5:d9:57:30:43:63:42:5b:12:af:e0:45:58:06:
9d:e9:ee:f2:24:67:84:35:0f:32:83:e9:c1:16:2c:ff:5e:b7:
6c:49:f3:66:e0:e7:a3:7f:60:4e:8a:2f:9f:d3:23:3b:cf:ea:
d3:19:8d:1e:8d:55:61:c3:ea:d3:ed:32:e8:25:d4:35:8b:06:
ee:44:43:39:f9:87:63:cc:a8:d1:65:86:a5:83:c5:df:d5:af:
48:61:f2:3a:e1:d4:d6:33:6d:0c:a0:99:ea:0b:b3:b8:b9:d8:
14:ec:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:08:39 2025 by rpki-client