Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
File: 6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa (raw, json)
Hash identifier: wNFHccsQgU7WgpSChhCrfUdHNkGozLaO5oMcXLQY0Jg=
Subject key identifier: 1F:8D:BF:0A:B1:97:78:85:8D:05:33:5F:D2:DF:5E:9B:3F:27:BD:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 671533E70F336D505F1DD9E9FCF1B2E9D7250F26
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
Signing time: Fri 11 Jul 2025 19:01:36 +0000
ROA not before: Fri 11 Jul 2025 19:01:36 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:15:33:e7:0f:33:6d:50:5f:1d:d9:e9:fc:f1:b2:e9:d7:25:0f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:01:36 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=9054e91230dc2e0a3892fb64264dd1805331bbdcbd20a5423e9d9720c2e7c4b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:11:1b:ea:4a:e0:ca:4c:45:e0:18:93:fe:
3d:34:71:aa:16:c3:1d:8e:ab:4c:27:49:d1:94:89:
f9:c9:bb:85:2b:fc:97:75:0d:3d:f5:1f:61:a5:88:
cb:df:2d:b6:52:fc:93:b9:8a:02:9e:f8:5d:66:bb:
18:4c:48:0a:cf:75:4e:13:9f:10:a9:2e:d4:e0:f4:
71:8b:71:33:d3:34:b4:61:aa:c7:f8:e4:24:76:a0:
3b:d2:96:16:18:81:77:c4:1a:c2:08:1d:07:3d:2e:
1b:d7:2f:63:fd:63:25:de:e4:46:05:ae:5f:e9:93:
a4:21:bf:78:97:e2:e7:f7:bd:7d:a9:a1:88:a7:9d:
75:2c:0a:f0:0a:36:d6:97:32:d2:cb:e8:18:71:06:
7c:b8:d0:29:87:06:87:f4:28:f4:80:fb:c4:aa:f3:
6d:f8:49:f4:4a:33:4e:49:6a:9e:6a:36:6d:41:56:
70:3c:60:b5:62:0b:f9:ed:ea:c2:d5:d6:6a:cd:83:
3a:7a:3c:1f:3e:ff:b2:21:63:17:cb:09:e2:c9:e0:
1a:4c:29:01:b2:bc:24:62:12:2e:30:af:ae:32:d7:
77:71:e7:82:ea:cf:ac:6e:22:ad:ed:c2:82:f0:c2:
c7:2a:5a:54:25:d9:fe:69:6b:69:75:a2:1c:f4:c4:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8D:BF:0A:B1:97:78:85:8D:05:33:5F:D2:DF:5E:9B:3F:27:BD:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6b4f5b06-ebd9-4673-8db1-8e72df99c996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:2080::/48
Signature Algorithm: sha256WithRSAEncryption
67:c3:94:01:f9:fd:6d:05:5c:a5:f1:d0:e8:a7:e2:a2:a2:73:
c1:e5:fd:0d:eb:ce:b1:2b:b8:8c:af:32:38:0b:74:f7:68:0c:
fc:3e:24:dc:6d:9e:26:8e:61:e2:f5:20:ea:5f:47:99:32:1b:
90:94:06:0f:7e:f0:31:de:e1:6c:4a:ac:f9:38:f9:2a:ca:09:
ec:e0:9f:9d:2f:bf:33:7c:71:97:e7:4f:b3:a6:c9:09:57:8c:
97:47:4a:00:48:8b:31:86:a4:11:7f:f4:66:a4:65:d9:3a:5c:
fc:13:fd:0c:d2:eb:a7:a0:78:64:af:9c:de:f5:37:8c:89:5f:
78:c2:44:73:be:d9:88:e5:63:45:d2:84:c0:f0:a7:3f:62:0e:
d9:da:3d:58:92:fa:60:de:29:17:e5:54:ca:a3:24:d2:a8:e2:
5a:ec:ba:74:f1:de:93:50:a6:a2:58:00:3a:db:43:af:6b:07:
70:33:3e:0a:d8:1d:8c:69:d2:dd:a6:24:4b:d4:e6:93:dd:c6:
6c:8e:42:d8:5a:37:13:ad:6c:59:6e:5e:36:89:83:e5:13:7a:
a9:44:cf:69:41:4b:12:07:42:8b:80:5b:21:42:f7:39:e5:1a:
c5:bb:f9:b8:1c:83:ec:df:41:01:49:74:88:a5:2c:bf:2b:c6:
56:e4:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:23:36 2025 by rpki-client