Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
File: 5b65b415-a397-41d3-99dc-207c8689d0ee.roa (raw, json)
Hash identifier: P6HnoyFZHmkH0AQfI5GTqdxcLmmCiODGdCYrFpakst8=
Subject key identifier: D5:B6:4B:3B:A4:A2:CD:10:D5:D5:1B:E7:0E:AD:C4:56:F5:E5:AD:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F8144E007D2923E9451CC175BBFADA27DD0301C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
Signing time: Tue 01 Jul 2025 15:10:48 +0000
ROA not before: Tue 01 Jul 2025 15:10:48 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:81:44:e0:07:d2:92:3e:94:51:cc:17:5b:bf:ad:a2:7d:d0:30:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:10:48 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=1a9fbbf968f2fc9f2571da4499e2a31e3c7f7bbe9b5755984fac2874a99281bb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:b4:f9:7b:0e:a7:63:95:42:11:d3:f5:e3:
bf:0a:85:49:85:3a:a6:53:c1:86:c8:9b:03:6e:64:
b1:61:5f:7d:95:7d:29:48:73:66:5d:1f:f6:d6:d3:
7e:af:bc:f0:ef:14:c5:8e:f7:05:16:4d:a4:17:d4:
18:c7:23:15:4d:df:7b:4c:96:d8:e1:5e:65:70:d8:
a1:91:f7:69:d3:cd:da:87:d0:eb:37:12:f8:51:a1:
3b:29:82:b3:13:39:ac:22:3f:ca:43:4c:65:08:7b:
dd:12:98:36:c5:d7:24:d2:53:f5:b7:f9:d7:6a:9f:
54:03:df:e6:a5:1c:65:94:71:22:bf:8c:aa:48:4c:
4b:3e:fc:9e:f5:a0:2a:f3:50:3e:56:3c:e1:36:d7:
c4:d1:c5:2b:df:fa:eb:0e:50:e8:e8:50:83:9b:f9:
4f:24:d8:13:78:30:21:de:53:d5:08:0a:74:6e:28:
29:6c:7e:22:b5:f4:bc:22:05:f4:0d:e6:fb:a0:50:
aa:66:eb:67:70:5d:ab:a3:57:b3:20:7b:d4:f3:86:
54:3b:eb:d7:fc:84:be:c4:73:77:12:97:d4:6c:af:
6f:cf:c4:4a:28:fa:10:98:c1:fd:e6:26:82:6e:ca:
2b:72:87:49:27:f1:0a:25:0d:e7:39:d2:91:6e:01:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:4B:3B:A4:A2:CD:10:D5:D5:1B:E7:0E:AD:C4:56:F5:E5:AD:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5b65b415-a397-41d3-99dc-207c8689d0ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:6000::/40
Signature Algorithm: sha256WithRSAEncryption
23:e1:2b:d9:97:32:a3:b4:0c:6b:7d:a3:ad:11:08:a9:6e:2e:
a0:19:e7:aa:25:1f:45:14:c6:49:40:d1:f1:fa:6f:ee:af:ed:
ff:70:4b:10:6c:e1:10:41:0b:00:30:0f:74:b9:9b:b4:b8:05:
de:26:db:c4:6f:51:16:66:9f:5d:71:99:e7:4f:12:34:75:be:
9b:ea:fd:cf:be:58:d2:01:e2:e1:bf:ef:2a:6d:eb:89:42:dd:
6d:41:60:ae:3b:8f:69:9f:3e:03:84:c2:37:92:89:b5:ec:4a:
43:cb:41:18:14:bc:38:42:30:77:e3:e4:86:ae:0d:9e:42:a3:
90:1b:1b:ff:c2:01:c6:1d:9f:65:72:e6:6a:de:9d:48:c4:e8:
43:37:6e:35:0a:2c:8a:9d:e3:2b:d7:69:a3:92:a5:7c:63:81:
82:5b:58:96:f9:85:14:b0:c5:b5:d1:5f:fe:c1:13:61:2d:2b:
af:a5:03:70:56:c0:cf:8d:ab:57:fa:e5:0a:a2:66:7d:c6:63:
5c:0a:8b:68:d4:4a:45:cf:e6:ab:1f:ab:86:12:7b:dc:92:da:
1f:89:6d:b5:48:ba:d5:a2:8e:13:c1:f9:2e:91:50:3c:b9:38:
69:75:43:fa:92:0f:5e:2f:33:de:57:ba:f9:3b:bb:fb:d7:ce:
fa:63:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:28 2025 by rpki-client