Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
File: a7031a07-12ba-45f8-a53b-6bd5b713c999.roa (raw, json)
Hash identifier: 9tFsrOy92CmiXq9xqfNxY4JNUsR2pxLUVtwMtLwyM3o=
Subject key identifier: F4:49:87:B7:90:B5:D9:47:62:FE:E2:FB:37:D4:73:74:84:87:33:EC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74E9410B3568DBF2C8000E861A23FE7F3260BFCB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
Signing time: Fri 11 Jul 2025 20:31:09 +0000
ROA not before: Fri 11 Jul 2025 20:31:09 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e9:41:0b:35:68:db:f2:c8:00:0e:86:1a:23:fe:7f:32:60:bf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:31:09 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=da5a022b00b7d7323af867720649f93d34c03166ee7828758f96901c24fc835f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:84:81:aa:f9:6a:75:49:a1:63:d2:cd:d9:
5e:41:7c:3a:f5:c5:6f:27:ee:f4:03:e7:c2:b1:81:
86:ca:cd:1d:1a:ca:66:96:12:41:70:aa:53:e9:ab:
cb:6c:48:b6:4f:13:46:c7:d8:98:6e:5e:79:c0:09:
63:74:bf:8d:db:eb:af:1e:90:f6:0b:0e:61:d2:d4:
ab:5c:dc:f3:8a:5c:16:2c:3f:f9:86:2b:f7:27:e4:
45:06:b2:24:31:9d:86:ef:be:44:ae:c8:ad:f5:3c:
ce:c5:e3:ca:f6:cd:4c:84:0d:47:d9:60:57:27:7e:
25:08:c1:96:7c:59:32:b5:5d:05:0a:f2:3d:b8:18:
36:06:57:6b:de:6c:fd:66:96:58:90:d2:58:4b:ee:
42:f4:92:30:a7:8a:32:41:22:87:70:35:1a:c6:6f:
a5:e9:ca:c3:3c:52:f7:fd:49:71:da:d4:d1:33:fa:
82:68:6b:58:6f:95:f9:64:74:da:b0:c1:62:e4:4e:
b1:61:76:fa:05:40:2f:db:60:99:75:f5:33:4a:2c:
f2:1a:fe:8d:b5:4b:80:d7:48:ec:fd:3c:3f:7b:30:
17:58:69:dd:cd:7d:cb:f0:22:fa:35:07:39:39:15:
84:8f:de:7e:ce:07:26:32:77:55:19:0c:4b:da:23:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:49:87:B7:90:B5:D9:47:62:FE:E2:FB:37:D4:73:74:84:87:33:EC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:400::/38
Signature Algorithm: sha256WithRSAEncryption
65:7b:29:c9:30:5b:f1:03:bb:b8:77:00:fb:4f:cf:5e:29:72:
75:5b:5a:c0:e7:51:88:53:8c:33:84:fd:1d:50:e1:a6:2c:f2:
d9:95:6a:9f:59:89:7c:9a:51:3a:7c:0c:f3:cb:b9:84:64:2d:
76:6a:fa:f1:5a:5a:55:41:bf:f6:60:6b:d2:a7:e0:13:05:a2:
22:f2:c5:08:0f:15:93:c6:e9:ea:35:14:2c:75:8b:d0:3d:d1:
04:17:9c:a1:7d:c1:2e:3c:6d:cc:1e:0c:8c:cc:da:b8:61:2a:
dd:78:37:ce:b4:fd:03:b5:99:21:4d:e6:45:66:bb:69:af:33:
8a:f8:4e:4d:94:be:d0:ec:e5:e8:7b:ed:63:04:81:c2:9f:b6:
cf:e2:8e:f5:0a:fa:47:b0:97:c8:a1:f4:8f:d3:26:3e:4b:a0:
44:b9:be:e0:b4:1d:44:8c:c0:4f:0c:2c:a5:9f:49:95:90:c2:
e6:26:16:49:53:e8:79:a1:c3:f7:c9:2c:3f:f4:ef:35:f2:40:
af:67:96:15:7d:0e:bf:7a:f8:53:3e:1c:bb:86:c5:82:10:a6:
77:d4:1b:b4:0a:ee:2b:c4:8e:12:97:cf:7b:1e:e2:da:c3:8f:
25:8e:7c:7d:65:50:21:5d:8d:8d:96:03:a8:c3:8a:b7:70:b0:
bc:87:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:58 2025 by rpki-client