Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a25c5c84-0f08-47bb-96ab-7ab46c85a8e8.roa
File: a25c5c84-0f08-47bb-96ab-7ab46c85a8e8.roa (raw, json)
Hash identifier: 6Yz9Ev5FziZfsYfJJ77vGUTcoAYS8e4MlcpQnD2toEU=
Subject key identifier: B2:C8:BF:2F:24:0E:7C:E3:6E:4D:3E:3C:A7:61:7E:28:96:8C:9E:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7112DB796F448D35A26CA51B6DAA1F9EF214880D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a25c5c84-0f08-47bb-96ab-7ab46c85a8e8.roa
Signing time: Fri 11 Jul 2025 20:01:26 +0000
ROA not before: Fri 11 Jul 2025 20:01:26 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:12:db:79:6f:44:8d:35:a2:6c:a5:1b:6d:aa:1f:9e:f2:14:88:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:01:26 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=d9376853331819afa792c3eb02db641fb85edb75ee9c5b721144f567c96c7c7e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:b2:9d:cb:19:62:0c:6e:4a:11:87:78:05:
f7:5b:0d:94:9a:2a:78:3e:a8:12:4a:56:66:a3:04:
d3:ef:75:d3:f1:4e:bd:e6:59:b0:57:cf:d7:99:e5:
cc:bf:cf:e0:3d:7c:ce:ad:c0:35:a8:91:4f:38:e1:
ed:e1:76:65:4c:78:79:d3:16:14:9d:0e:be:33:df:
e7:a4:47:ab:05:6d:7b:38:52:2a:15:69:bc:35:45:
9d:c7:81:af:da:34:0a:98:ba:44:fc:68:92:ce:9a:
e8:46:3d:9c:c8:7c:ed:fb:34:21:6f:0f:5c:eb:63:
b9:53:d3:11:18:d1:c2:88:c3:82:66:4a:96:23:84:
7b:6d:41:57:39:c6:71:a7:88:22:c3:df:2b:3e:5c:
82:92:10:58:7d:aa:46:e7:5c:3d:b6:ce:92:a7:2c:
bf:4b:43:25:1d:b5:8b:85:56:03:e1:b3:02:c9:f1:
2e:4b:59:90:2b:2a:69:a0:73:a2:22:df:9a:7d:9a:
fd:3d:0f:ab:b2:4b:49:be:7e:47:0f:80:ec:32:e8:
2f:a7:47:e5:3d:79:34:3a:54:00:f4:4f:b0:fb:1b:
a5:59:68:80:c8:f3:9a:a9:6e:7c:0e:97:71:14:a1:
36:57:58:1d:9a:a9:7b:3f:cf:29:22:1c:fc:9e:a1:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:BF:2F:24:0E:7C:E3:6E:4D:3E:3C:A7:61:7E:28:96:8C:9E:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a25c5c84-0f08-47bb-96ab-7ab46c85a8e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:fe:80:71:8e:cd:88:6c:08:c6:0f:5b:8a:b0:34:1c:c6:0b:
26:40:08:bb:7e:54:37:8a:29:e0:11:2b:c9:d7:b4:7c:76:34:
17:bf:85:57:4b:db:72:73:16:2b:24:84:3d:9f:2c:ef:28:66:
0a:bc:a4:0a:4f:9d:94:40:68:6e:04:cf:01:90:b2:a8:56:65:
dd:c6:48:fe:d1:32:d8:e2:9a:be:52:99:32:1a:5a:0c:67:bf:
13:3f:2c:8a:1c:e7:51:3d:f3:d8:79:84:03:12:17:b7:76:a4:
5a:0c:2c:bc:e9:18:35:70:54:ca:eb:4e:5f:aa:0a:53:52:0c:
9c:b4:b3:12:50:99:f2:26:98:59:6e:1a:e6:e0:71:a9:05:fb:
4b:8c:24:60:eb:c6:9c:f6:8d:34:e1:d9:eb:78:d2:1c:8d:66:
67:f9:0b:c3:db:36:fd:75:19:44:d5:e5:1f:ff:2d:fe:95:24:
f2:1f:b1:55:32:87:0e:b8:6c:69:68:41:c6:78:46:b6:28:2a:
17:eb:e3:7e:6a:a2:3d:5d:d5:bc:86:56:2f:8c:8f:d9:75:cc:
fc:6f:4d:23:ba:e4:af:9f:ee:10:20:f3:45:06:78:8a:61:c0:
d7:ba:75:68:06:5e:2a:5f:71:9e:06:f4:59:de:2f:bb:ec:5b:
92:6a:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:47 2025 by rpki-client