Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdad1cc-641a-4187-9b79-fc696cb535f5.roa
File: 9cdad1cc-641a-4187-9b79-fc696cb535f5.roa (raw, json)
Hash identifier: HCz/MFBvd1imlQ9MgjBOjjWuvLN7cD/NGTJUckYxr6k=
Subject key identifier: DE:03:39:DC:14:86:88:10:F1:D1:E0:8E:2E:6F:67:E6:C5:3D:8F:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DFB4263AF5347541E3288AB9188C251182C0ED2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdad1cc-641a-4187-9b79-fc696cb535f5.roa
Signing time: Mon 07 Jul 2025 18:21:13 +0000
ROA not before: Mon 07 Jul 2025 18:21:13 +0000
ROA not after: Mon 11 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:fb:42:63:af:53:47:54:1e:32:88:ab:91:88:c2:51:18:2c:0e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 7 18:21:13 2025 GMT
Not After : Aug 11 23:59:59 2025 GMT
Subject: serialNumber=3d575ea5b7cb8b058165fba185bf2f57c7941f2d676a889df24536d97a7c4606, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:f0:94:f6:6e:49:c6:24:c7:ef:26:71:69:
98:1b:f8:e5:bb:1a:e5:e1:9d:89:0b:96:6d:ba:4d:
85:fc:cd:a1:86:bb:29:9a:a4:b7:01:97:85:ac:2c:
c0:d2:b3:78:02:ef:c1:02:a9:0e:28:8a:bb:46:89:
e4:77:fd:a5:93:fc:c3:a9:fd:4a:cb:62:ba:f5:1d:
5d:4f:5b:21:04:13:a3:ae:1d:27:6f:2d:bc:da:7b:
4b:24:06:48:96:71:bc:75:c0:87:42:1a:db:4a:7b:
26:a8:70:21:b1:4b:20:2c:66:69:bd:01:bf:57:f6:
25:ba:c5:e2:a3:28:e6:b4:5a:d1:b0:29:6a:af:f8:
af:03:5d:86:f8:c7:2b:3d:12:9d:44:0c:bb:bf:67:
17:76:14:57:d7:2d:f6:92:72:1f:3a:67:6f:e2:bf:
e2:2c:b3:55:7d:96:9b:78:5c:05:82:b2:b8:e4:79:
2a:4a:bd:82:b0:b7:50:cc:9d:16:2e:b0:0f:63:7d:
ec:46:21:02:d8:c4:6c:b8:b9:45:90:4a:f9:04:4c:
a4:af:61:27:f0:b9:db:94:cb:33:b2:27:d3:fc:f7:
f8:ee:7f:0a:d1:d7:df:12:39:6c:ac:cf:c3:5a:9a:
8f:3f:27:f4:ab:09:67:cb:70:57:d9:33:2d:22:fd:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:03:39:DC:14:86:88:10:F1:D1:E0:8E:2E:6F:67:E6:C5:3D:8F:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdad1cc-641a-4187-9b79-fc696cb535f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:800::/40
Signature Algorithm: sha256WithRSAEncryption
a8:7f:33:1b:9f:ed:78:af:ed:b4:c6:2f:45:98:82:d8:b9:b1:
03:4f:f3:a7:e0:c2:c6:38:f8:4e:75:a7:7c:81:7f:f0:dd:bb:
ba:96:83:f7:0b:3b:64:04:cd:ca:1f:48:3a:57:97:19:97:38:
20:5c:de:e3:2c:34:f8:4f:f7:0b:3f:e7:1d:19:77:d4:7a:bd:
41:07:19:78:73:9b:36:df:e6:e1:b4:b4:d4:59:7e:29:06:ae:
d7:15:17:96:84:cd:62:93:78:a1:69:2d:3c:2e:b8:21:37:c4:
ac:d2:14:e6:db:3f:df:ab:a1:27:a4:5d:64:87:ee:ab:03:64:
3a:cc:46:ef:b8:34:65:ca:17:69:d4:b3:b1:78:98:a2:94:dc:
3e:f9:39:72:3d:93:9b:8c:e3:6a:f6:51:4b:5a:2d:e4:50:46:
3a:4a:2b:1a:af:13:16:2a:e1:a8:8e:47:cb:a2:ae:df:a2:34:
8a:4a:8c:f4:78:49:37:7c:4b:82:ac:f5:34:ad:45:7b:9c:44:
5a:9b:fd:20:86:fc:e0:fb:87:32:5d:60:ef:1d:f2:f3:ab:50:
2b:83:1d:8d:8e:d1:7b:0c:fc:88:1c:47:f4:22:63:f2:6f:fe:
90:8f:3e:0c:ec:53:b8:c3:af:cf:a8:69:0b:1c:c7:31:ce:63:
5d:62:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:46:45 2025 by rpki-client