Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
File: 82baa148-3f1e-4e5f-a19f-3be140c60d34.roa (raw, json)
Hash identifier: TEnhEqmMxKP7+suZ4iZTq0FBnKbVsSu47fMeBNbx2TU=
Subject key identifier: 07:C9:04:76:D9:71:C6:F9:73:97:F7:54:A8:4C:7E:55:38:8D:75:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2132DD258B057D211CB3782FA7FDE460EAB021DA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
Signing time: Tue 01 Jul 2025 15:11:02 +0000
ROA not before: Tue 01 Jul 2025 15:11:02 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:32:dd:25:8b:05:7d:21:1c:b3:78:2f:a7:fd:e4:60:ea:b0:21:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:11:02 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=1dac5bb3eadf7a5b11689e0729405b7e92665170d75620542d346ebf44bebfd6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:56:f9:e2:bd:49:27:86:87:61:1f:9c:70:
ed:c9:fc:e6:27:34:ec:cf:f3:92:c0:4b:aa:41:93:
43:f2:ca:9d:fa:c1:91:3d:41:f0:fc:12:d3:c2:67:
61:7f:a0:fd:bb:6a:14:39:95:8b:4e:b7:89:83:c7:
26:98:14:7b:0e:a5:1c:cf:12:9e:1d:b0:4c:ef:a3:
ce:11:af:ae:a4:2e:ec:a5:6c:e6:2a:05:0b:d7:2d:
e1:6b:38:21:81:67:fc:1b:ce:a4:22:99:96:f1:48:
5a:97:5e:36:f7:62:cb:38:8d:fa:5f:44:95:06:66:
c8:f2:54:54:17:6e:34:18:91:6b:3f:23:8f:b4:a0:
c1:7b:69:54:76:53:bf:31:69:89:0d:df:63:39:96:
cd:78:cf:f3:de:05:b3:8d:9c:38:eb:35:f4:43:6f:
db:51:b6:1f:a4:6d:ba:e0:15:05:7c:bd:7a:ee:29:
33:22:70:56:f6:be:13:3f:16:e2:44:18:01:75:bc:
cc:c8:06:ad:99:3b:40:dc:0f:97:f6:1e:40:1e:37:
bc:0c:9c:9a:5e:3d:6c:fb:82:af:84:8c:27:c2:7e:
54:f6:76:a3:22:b2:f2:0b:a9:f8:7e:c0:60:2c:6e:
cb:47:a0:c6:e0:e5:d4:fb:b5:69:c2:c7:54:84:2b:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C9:04:76:D9:71:C6:F9:73:97:F7:54:A8:4C:7E:55:38:8D:75:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:4000::/40
Signature Algorithm: sha256WithRSAEncryption
0a:12:75:c9:38:c9:a8:e7:7c:2b:3a:bb:b1:c4:ea:00:5f:e1:
67:11:6a:50:df:48:a2:c3:48:3a:01:3d:0c:b6:cc:80:d2:a7:
92:77:f9:1a:d8:49:54:53:83:88:b0:af:f4:6a:35:7a:a5:3d:
37:f7:8f:a1:0b:f6:52:ab:ca:0d:b2:03:85:45:a6:5f:1d:56:
14:84:0b:98:b5:be:d4:5b:5f:f0:91:4b:a2:f0:df:3b:0b:b2:
fc:f2:83:1b:fa:dd:4c:4c:03:4a:27:ed:b4:13:56:29:c3:8c:
ca:02:8a:f4:6e:e5:8e:88:19:2e:7a:11:8c:e3:f6:77:f1:75:
7f:08:5a:5a:c3:0a:e0:97:26:76:80:ac:bc:8a:4a:6d:6f:8b:
68:16:5d:4c:ca:dd:3b:20:b4:63:b2:3c:d8:76:04:af:17:98:
f4:d2:11:d5:d8:ec:79:a1:8b:04:c1:c5:8c:c3:cb:d0:c8:4a:
c4:ce:ff:94:f1:d0:18:aa:91:7e:e9:3c:17:98:32:c6:48:eb:
60:a4:d0:ba:f2:d9:08:33:69:e0:6a:34:34:b3:c1:6d:ff:76:
9d:6a:84:88:52:69:cc:26:76:33:39:d1:63:92:0b:2b:22:15:
5a:61:b7:04:67:f6:b3:ed:99:d3:f2:cd:7a:ae:1b:bc:87:92:
e5:0c:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:32:11 2025 by rpki-client