Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9f26696-5522-477d-b8bf-72de7350b09a.roa
File: b9f26696-5522-477d-b8bf-72de7350b09a.roa (raw, json)
Hash identifier: YyG11FD0drF66KT4QjetU0Yz4KhLHl6aEvJ1HjQiKKw=
Subject key identifier: C9:43:F8:F6:EF:3E:3E:DF:85:ED:90:52:A0:8A:B0:AA:12:7D:04:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41D80798418441148913B433961CC09D1FFD8634
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9f26696-5522-477d-b8bf-72de7350b09a.roa
Signing time: Fri 11 Jul 2025 19:10:51 +0000
ROA not before: Fri 11 Jul 2025 19:10:51 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d8:07:98:41:84:41:14:89:13:b4:33:96:1c:c0:9d:1f:fd:86:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:10:51 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=d0dfa0190a8ae1eaad764a0ed325c8efaea41fc121fabadf8fcbb4566342abd5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:fe:bd:03:b7:63:c1:54:89:18:5d:d3:d5:
74:65:6d:d7:78:02:f8:80:cb:20:e3:52:ac:30:5e:
1f:47:e5:69:53:97:5c:bd:83:7a:05:cf:6a:99:8d:
b6:c1:f9:de:e3:bb:25:19:ad:17:26:bd:64:b2:d8:
47:50:c0:34:18:d0:69:27:2a:5d:a9:0b:ec:d2:5f:
3e:f1:ad:af:57:2d:70:32:d9:8a:d4:4f:c0:34:fa:
eb:ff:14:07:f3:36:7b:6d:3a:ef:4a:98:d6:9e:55:
af:5f:46:6d:3e:70:9e:65:6d:11:f0:1e:4e:81:ef:
98:45:31:27:26:1a:5d:e3:12:5f:3a:d1:d4:9e:5a:
67:95:37:45:ee:ab:a0:47:f8:62:11:e9:f7:ec:2d:
38:c8:64:2f:2f:45:e0:51:bc:03:dc:54:f9:4a:04:
0f:9d:85:28:39:19:57:38:0e:67:ad:51:23:30:55:
17:dd:bb:5a:e9:2f:8e:9e:c2:48:aa:ab:9d:64:df:
7b:31:96:ee:4f:38:d4:b1:d3:c2:14:f4:fd:f4:5c:
8f:cc:05:a8:ad:80:14:7b:91:0b:b7:28:e9:e7:1e:
22:08:62:59:32:13:98:66:3c:a1:94:e0:44:1b:a9:
8a:0f:9e:56:26:7c:8d:8e:e2:76:a2:e3:1e:a1:ec:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:43:F8:F6:EF:3E:3E:DF:85:ED:90:52:A0:8A:B0:AA:12:7D:04:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9f26696-5522-477d-b8bf-72de7350b09a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:5000::/40
Signature Algorithm: sha256WithRSAEncryption
53:41:36:9c:38:fa:90:16:7f:90:14:ee:3b:31:a8:2b:de:9b:
1e:6b:a5:d8:03:8c:f2:00:f1:c8:3e:7c:a8:98:24:82:0d:dc:
01:f0:27:bc:47:aa:4a:43:ea:e0:ae:fc:25:76:7d:06:69:65:
30:dd:80:55:0a:08:98:2a:ec:4c:0b:2b:e1:a9:ab:f3:80:59:
a0:a2:f0:7b:32:e6:dc:56:b2:a4:2a:9c:8a:69:9a:4c:72:80:
09:15:2c:1c:01:9f:2d:a8:ca:a3:b4:0a:3e:7d:06:8c:ff:19:
7e:16:55:47:60:74:dc:9c:86:0d:18:f6:13:61:a0:ae:bd:fe:
0f:20:d7:a3:31:f0:61:bd:b6:a9:60:4e:aa:ed:17:30:13:82:
dd:22:1c:b5:49:ed:3b:f5:22:b6:2d:86:7f:80:7b:c1:06:8a:
3d:eb:85:c2:b4:98:07:fb:e1:4a:d1:6e:c3:8a:9e:67:78:e5:
6b:34:b5:2e:32:43:8f:02:de:89:e8:a6:bf:5d:5e:11:4a:4b:
f8:a1:5b:d2:dd:f8:94:da:f9:43:aa:c2:e4:40:08:c9:30:9a:
cf:78:fd:25:b7:f7:cc:89:91:91:0a:40:03:af:cd:df:da:82:
76:92:32:b6:90:2a:4e:ac:b6:94:d7:dd:af:9f:ba:0f:e7:d6:
96:e5:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:46:41 2025 by rpki-client