Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
File: 9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa (raw, json)
Hash identifier: ddvDBs3mXTkKIYCzGDr8CusqqGczgEBx7MQqheVjCTI=
Subject key identifier: 31:43:6D:67:92:5D:38:2C:2E:F3:D5:FE:41:EE:25:B6:56:FF:80:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5265305D9824E7669AB4B6D7AFB1416315F331F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
Signing time: Fri 11 Jul 2025 20:40:50 +0000
ROA not before: Fri 11 Jul 2025 20:40:50 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d011::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:65:30:5d:98:24:e7:66:9a:b4:b6:d7:af:b1:41:63:15:f3:31:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:40:50 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=6cfcce4ac0ff5cbdc24e59dd00b4b6744e9c7e5db4eab965a7bc31450da563b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:3a:45:b0:f0:3a:3d:bd:f2:29:59:2c:a3:
57:c0:25:d8:44:8d:e4:ca:e7:45:96:90:88:d4:6a:
35:1d:a6:da:4d:e2:9d:f4:00:1c:a2:eb:f6:ea:c5:
95:b2:95:68:b0:a8:b8:08:5f:da:58:54:71:98:54:
14:cc:13:51:10:2c:3d:ed:cc:47:c3:d0:8a:ca:c0:
91:22:68:44:e8:6e:98:f2:9a:f0:49:55:69:88:46:
eb:86:b4:42:a4:8a:7b:1c:a4:41:2e:a6:2a:6c:e2:
42:5c:e7:9a:40:21:2d:fa:14:98:a9:c4:53:79:00:
84:a3:bb:74:c9:9b:44:4c:61:f9:70:56:4b:8e:ab:
15:26:12:55:47:b6:97:2f:ec:9e:75:92:ef:88:e6:
98:09:d8:a9:cc:ca:48:af:0b:9f:bf:c9:70:8f:bf:
d4:09:60:e7:ee:4e:7b:dd:6c:34:07:9f:e1:d8:d8:
37:a5:52:bd:d2:39:97:69:eb:4c:fa:c3:0b:25:3b:
74:71:09:d2:28:f9:20:74:74:3c:9b:f9:f8:c8:b7:
16:c1:6d:0a:82:ac:00:40:f5:e6:0f:aa:2f:84:72:
b3:cc:bc:88:ff:d7:1e:2c:ee:5e:29:41:53:8a:ca:
4c:b2:60:3b:da:50:9a:02:3e:43:f0:31:8c:c7:34:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:43:6D:67:92:5D:38:2C:2E:F3:D5:FE:41:EE:25:B6:56:FF:80:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5fdc3a-1bfd-4677-9e52-a12c872852f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d011::/36
Signature Algorithm: sha256WithRSAEncryption
70:38:31:af:36:42:46:1d:93:51:b4:ed:35:cd:b1:2b:c8:0c:
0a:05:e3:80:7c:e5:d9:9d:2b:1d:98:5a:92:99:2f:3e:f7:c4:
e6:8b:7a:64:0e:d5:b4:7c:2e:f6:5a:9e:dd:f3:b1:85:d3:51:
41:8b:71:be:ea:74:b7:3f:32:22:09:e3:47:ba:eb:4f:f5:e4:
ee:6a:86:50:10:f6:91:78:98:d9:b3:95:fc:8f:91:62:d5:f4:
fb:b1:ff:5b:34:0f:7b:e9:14:13:af:77:62:a5:be:59:87:2d:
55:08:d0:d4:d3:40:07:13:01:72:d3:7b:0b:05:e1:93:08:90:
05:ea:64:3e:12:81:7b:69:c9:6c:2d:86:c6:bc:70:b8:5d:4f:
94:3c:b7:68:28:d8:f7:63:2a:da:45:6a:11:ed:9b:fa:85:dc:
47:3d:70:87:87:91:ba:41:4d:85:68:5e:46:45:38:28:7f:15:
83:71:4d:3a:21:46:9b:4a:c7:56:f2:d5:e6:62:89:e3:35:d1:
4a:67:d4:da:14:be:35:8f:cf:13:93:c4:d3:75:47:ff:88:01:
81:ca:8c:62:93:7c:16:12:7c:ca:cc:36:1e:45:a9:20:d3:0c:
68:e9:ae:f6:a3:9e:a3:b4:1c:06:5c:ed:01:71:8c:1c:2d:99:
0a:4b:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 03:49:34 2025 by rpki-client