Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
File: 9430d5db-5a09-4461-b80a-b9d755d346a9.roa (raw, json)
Hash identifier: sg4UNmpnh6umYVjEt6Ld09oBdqDO9C7JlzPEhyu3MKQ=
Subject key identifier: BE:8F:9D:4B:F4:1F:68:60:35:74:BC:A6:9F:38:81:1B:F4:8D:2C:5C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0208FE11F7A6F4D2DD83A24CBF201A6F5A946558
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
Signing time: Fri 11 Jul 2025 20:40:09 +0000
ROA not before: Fri 11 Jul 2025 20:40:09 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:08:fe:11:f7:a6:f4:d2:dd:83:a2:4c:bf:20:1a:6f:5a:94:65:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:40:09 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=c74688b02ea25c45fee7ea0e7a6a26605b6195b30d7395a35d43f3ef3e7793ca, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:0a:8f:91:e2:41:2c:6a:c4:e7:0d:7b:c9:
21:1a:64:7a:91:07:7a:f6:ee:c8:89:47:5e:66:40:
80:d6:81:a1:eb:48:23:f6:6e:a2:73:d5:e1:54:11:
92:e5:f2:98:8e:15:f7:fa:76:42:c8:58:30:3b:d9:
ab:93:56:9d:75:dd:4a:bd:64:f5:cb:dc:8f:bc:e9:
bf:5e:d8:d7:11:d3:19:7c:f6:35:2f:a6:ea:12:78:
c2:6b:34:da:36:2e:4c:f6:4a:c8:e9:8e:70:2f:59:
fb:bf:d3:ac:3b:68:77:42:56:b1:22:1e:10:2d:0b:
23:94:2b:4f:4f:2b:fd:88:ab:25:f5:9b:a9:ef:98:
4c:50:ed:3b:63:6e:0d:c5:60:ab:a6:ba:51:4b:46:
aa:72:c2:75:fb:50:df:13:29:69:4d:3c:90:c0:4c:
49:4f:79:1f:63:30:37:fc:e1:00:5f:c9:3c:aa:3d:
8d:2e:c4:9b:62:38:03:72:2a:3a:5f:69:55:21:a5:
db:4a:68:1c:1d:a6:db:d7:e2:87:fe:4c:fb:9c:36:
6c:a6:fe:d9:80:85:09:25:f1:4b:65:82:18:48:bf:
54:1a:9b:cf:bb:af:bd:34:eb:c0:97:0a:35:6a:cb:
1d:20:8d:0e:27:e4:73:b5:c0:17:d7:88:e7:5a:9d:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:9D:4B:F4:1F:68:60:35:74:BC:A6:9F:38:81:1B:F4:8D:2C:5C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a::/38
Signature Algorithm: sha256WithRSAEncryption
5a:67:c8:1e:17:1a:53:c2:d2:17:b0:fe:19:3b:28:7c:00:ea:
3c:b0:0d:67:37:7f:8e:56:31:e8:81:ea:df:ae:8e:1d:2f:d2:
23:83:1e:13:13:69:49:bd:00:24:9c:c8:85:c2:40:7a:9a:70:
9e:fc:0e:cc:9d:ce:e7:1b:30:a1:aa:41:17:79:5c:fe:8e:e3:
d1:fb:50:4a:fa:7a:bf:f3:83:22:8f:c1:59:e5:d6:89:42:44:
3e:86:03:a0:3e:63:fc:19:b1:af:2b:4a:3a:a8:c9:ea:81:bb:
a7:34:58:a4:8e:48:11:7a:63:81:3b:10:12:c2:fd:f9:b2:78:
7e:d1:7b:98:81:38:ee:87:d8:7c:03:35:64:aa:39:25:d9:34:
00:0e:75:7a:ca:17:65:d0:78:43:81:8d:f2:1a:6b:da:54:1f:
fd:f2:2a:f6:2e:e3:15:1a:a1:35:df:2c:b6:58:34:69:cb:51:
40:bc:e0:d6:3d:8b:cb:b1:22:c3:c3:df:37:3b:12:50:2c:ed:
30:ff:da:c2:7a:7d:b3:a4:5a:76:82:93:26:3e:e3:7c:4e:ac:
eb:51:37:6f:1c:ee:9b:49:af:9a:a8:bc:43:4a:2a:4e:d6:70:
57:9e:eb:86:e4:bd:a8:54:35:1e:70:b0:f8:72:c8:09:f3:81:
07:96:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:11 2025 by rpki-client