Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1aeed91-7b62-4371-b8f3-245485e1bf21.roa
File: a1aeed91-7b62-4371-b8f3-245485e1bf21.roa (raw, json)
Hash identifier: Z30iMOya4IvOrMJ+1yTLFg3fIdN3nwIFHPz9/yTLlR4=
Subject key identifier: 9A:2F:F7:57:77:EE:A4:F8:0D:2E:DF:D7:A1:7E:CD:C1:97:4E:17:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3FBE2FDF50BE2642C71A7CA389BC7AE0A7369CEB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1aeed91-7b62-4371-b8f3-245485e1bf21.roa
Signing time: Fri 11 Jul 2025 19:50:41 +0000
ROA not before: Fri 11 Jul 2025 19:50:41 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:e0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:be:2f:df:50:be:26:42:c7:1a:7c:a3:89:bc:7a:e0:a7:36:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:50:41 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=84075f91cebd6a9992abb05e9578948db70d435b4acd296a2b70de04f75907c2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:9e:bf:78:32:82:d9:1b:a9:cc:21:65:53:
44:ce:55:b4:f6:5a:16:60:38:23:93:68:3f:56:9f:
ec:60:85:e8:3d:9a:f8:40:fd:86:97:85:ce:54:ea:
4c:ae:56:6d:d3:d0:02:6b:f2:9f:3c:60:0e:cf:f0:
a6:ad:71:9f:9a:80:93:d1:02:dc:a8:11:e4:fd:0f:
15:78:9f:05:96:6c:46:59:bc:e5:44:a8:a1:4d:bc:
2a:41:57:9a:38:ca:81:a6:e7:25:46:d3:3a:5d:f5:
dc:49:8b:a6:06:cb:91:38:36:e1:1e:6e:c2:66:79:
de:8c:61:53:0a:68:67:85:b6:2d:b4:40:a3:0e:2d:
27:90:65:2a:e6:2a:23:7d:99:1f:a2:84:1d:42:2f:
e9:e7:16:01:39:ec:e6:af:2f:16:10:02:09:db:99:
e0:91:77:ee:df:a6:38:bf:f5:35:ab:26:e2:6c:60:
a4:ef:20:cd:50:44:a8:6e:71:25:26:d7:f3:b1:d9:
74:45:32:03:5d:4b:1b:81:4c:91:99:31:d5:c6:01:
80:01:4c:6c:ba:e6:7f:c0:cb:29:95:33:2d:7b:9b:
c1:db:7e:49:a2:2e:81:38:10:6f:4d:4d:3b:08:6c:
f6:7b:f1:71:79:7e:7c:09:d4:44:63:d8:3e:b6:bc:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2F:F7:57:77:EE:A4:F8:0D:2E:DF:D7:A1:7E:CD:C1:97:4E:17:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a1aeed91-7b62-4371-b8f3-245485e1bf21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:e0c0::/46
Signature Algorithm: sha256WithRSAEncryption
0a:1e:e7:e1:34:51:bb:53:ca:a0:b4:64:87:dd:8d:a5:56:82:
36:23:fa:cb:54:e4:1e:10:c3:6d:89:f7:86:0c:db:c6:a1:09:
a7:64:93:5e:83:29:a6:ea:46:01:8b:d8:a3:44:2b:27:60:be:
60:5c:de:25:fd:24:83:e7:f7:e2:dd:d4:1c:fb:66:de:60:e5:
36:03:1e:87:57:96:17:4c:72:aa:94:de:a8:76:1c:a4:1f:4e:
3f:5f:04:3f:fd:14:d6:af:30:61:d1:30:13:70:96:fe:90:c3:
61:a2:ea:a1:83:ae:d3:93:53:10:70:63:cc:49:da:d1:b2:93:
e5:21:19:06:f3:de:29:f9:a3:13:8c:45:7f:3f:a6:fa:2b:27:
f2:84:c0:de:e1:82:bc:16:81:bb:a5:9b:b7:f6:ab:66:24:94:
eb:69:d9:49:81:e1:bc:a1:93:1e:4d:30:7d:8a:1a:11:bb:32:
9f:dd:34:c0:f6:22:b5:f8:06:75:f1:6b:67:62:e1:db:d0:74:
5b:8f:a3:c0:ee:2b:4b:dd:22:4c:c9:2d:69:1c:17:0c:7d:4a:
a8:be:23:1e:80:3d:8b:82:ac:e8:ad:e0:15:a0:c2:0c:89:be:
89:bb:97:8f:d0:f9:af:fa:5c:4e:c5:b7:2b:5d:9e:1e:7e:81:
d5:3b:e6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 22:23:35 2025 by rpki-client