Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a06e909-5227-47d9-a58c-be623a2a4cad.roa
File: 8a06e909-5227-47d9-a58c-be623a2a4cad.roa (raw, json)
Hash identifier: kS+6CkflFaP2fpHW8dvkxD7TTdRuUwq/6YhKioXlGuM=
Subject key identifier: 87:8F:27:DF:A3:3A:41:13:AB:48:53:DD:71:C5:79:96:E5:50:07:6D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 210F62F040AF546B88AFBEADF5ED7D56A3546EBA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a06e909-5227-47d9-a58c-be623a2a4cad.roa
Signing time: Fri 11 Jul 2025 20:20:58 +0000
ROA not before: Fri 11 Jul 2025 20:20:58 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0f:62:f0:40:af:54:6b:88:af:be:ad:f5:ed:7d:56:a3:54:6e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:20:58 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=159da85dc7c6f65276bfb1d2e282a854688e4abb7a1d648925a6ffa757b6ca69, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:44:b3:97:77:5f:77:39:cc:e1:c9:6c:cb:bb:
c1:d3:77:dd:44:2a:e3:2b:d6:6c:98:04:35:6c:1c:
a6:ab:9a:fd:61:c7:6f:03:15:1e:73:43:dd:4e:d4:
21:9e:92:c7:71:24:13:f2:17:12:38:d1:19:5b:1b:
4d:14:04:3c:6e:86:f0:0b:3c:fc:b6:00:ae:41:59:
e8:c0:e5:e2:b6:fa:55:54:0e:fa:99:b2:ea:92:fd:
05:d9:d8:01:aa:dd:fb:60:49:a3:7e:3a:82:f6:58:
70:65:1c:fc:d1:07:46:21:ec:ed:0e:5b:8c:9a:52:
2a:3b:0c:70:31:f2:db:e6:e0:af:96:e8:c7:c6:95:
a8:2b:59:03:76:40:89:b5:8b:f4:77:1b:0e:52:ba:
69:d9:75:f0:53:c1:96:cf:d6:77:30:d7:3e:55:41:
f8:86:fc:be:0a:87:32:1c:8d:c0:83:bb:96:d0:81:
8e:ab:4e:10:40:df:68:2c:03:97:ca:3d:bf:95:2a:
71:be:c6:53:79:0f:46:c4:71:f2:91:df:1f:72:87:
83:03:3c:2d:1b:d5:fd:de:ea:14:b9:65:18:a6:f3:
86:65:29:26:3f:71:98:87:21:1b:b0:4d:9e:82:e4:
b7:88:8e:26:80:dc:c2:ab:93:8c:0a:da:2e:2c:4d:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:27:DF:A3:3A:41:13:AB:48:53:DD:71:C5:79:96:E5:50:07:6D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8a06e909-5227-47d9-a58c-be623a2a4cad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:4000::/40
Signature Algorithm: sha256WithRSAEncryption
85:33:d6:14:fa:c6:30:38:0b:bf:44:4b:d0:e5:d5:b2:5b:c2:
9c:4f:2a:ab:a5:54:31:76:8a:88:60:14:af:ce:db:0b:70:f1:
d1:c4:63:31:fb:e4:33:0d:9f:d7:9b:cd:c9:ee:5a:cb:77:6d:
36:23:a3:9a:5b:a3:12:76:66:7c:62:4b:9e:d2:87:74:ef:77:
e7:27:11:67:a2:0e:3c:27:52:08:ec:e8:c5:81:5c:7e:95:c5:
f1:67:55:bd:b4:ec:00:c1:55:c6:24:20:92:b4:c5:5f:81:e6:
30:ee:fd:94:e8:e8:c3:df:74:a2:e9:3a:e4:a1:40:60:2c:ae:
49:c9:86:1a:8d:5d:d9:5e:04:91:92:53:f8:52:bc:46:4a:d6:
9e:98:08:7e:34:5a:3b:53:b1:de:5b:d2:4d:22:99:bc:47:d1:
b0:5c:bd:ed:f1:c4:49:e7:20:d1:3a:f5:de:95:77:66:a2:21:
c4:51:43:d0:ba:08:83:79:5c:dd:14:a1:a2:e8:96:25:c5:45:
31:df:25:2e:01:11:91:9f:e8:69:01:7e:e0:4f:32:be:02:73:
6f:f0:c3:1a:41:f1:25:86:f6:f7:ea:d8:4f:a9:31:23:c6:e6:
7e:d4:21:c3:4c:94:ad:e1:12:33:17:ba:e0:bf:07:59:0a:9a:
f7:e2:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:35:12 2025 by rpki-client