Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
File: c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa (raw, json)
Hash identifier: 5yGoIbBc0GQ6j2j+1QqZ/pMIVHX0EO1kXlrU9Aw6qG8=
Subject key identifier: 4E:01:37:6E:46:89:5F:E1:C1:6E:5E:70:5F:C9:AA:5C:FC:90:7B:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 638C8F3A688DCFC9FFCFFD96D161D1042E85AFC6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
Signing time: Fri 11 Jul 2025 20:20:11 +0000
ROA not before: Fri 11 Jul 2025 20:20:11 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8c:8f:3a:68:8d:cf:c9:ff:cf:fd:96:d1:61:d1:04:2e:85:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:20:11 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=d8503ea1bee7191f5ae6be49c4a3b08fc240613f23e55b82fd96dde2e2f355b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:53:bb:a8:ce:14:69:6d:54:c5:6b:b0:62:
a2:d8:97:7b:ed:41:9c:2f:f4:10:84:35:d2:8f:6c:
10:ec:e1:e7:e6:42:dc:86:b2:ee:31:be:80:b0:1b:
84:d6:d2:d8:30:21:de:6c:2f:e4:1f:95:55:8f:ec:
eb:af:d2:81:4e:40:76:98:79:d1:28:2a:65:50:0a:
1d:9b:dd:6f:3f:71:1b:48:e3:aa:b3:f0:39:1a:0e:
94:66:9f:5d:80:85:da:a8:28:ec:dd:93:97:02:99:
38:c6:7a:fc:df:b6:45:a1:34:07:ab:c8:26:78:71:
ae:59:67:92:44:62:03:08:d9:b4:91:61:22:a6:d6:
76:9d:35:d2:ef:b4:cb:57:98:8f:a9:ce:e6:8c:3c:
54:c7:3a:e1:3b:72:bd:27:b3:70:7f:62:f9:82:cf:
c7:ae:63:42:17:65:4e:6d:70:ef:46:82:0e:02:96:
27:ef:30:bd:6e:23:a5:6e:0f:c7:02:73:ff:b9:e3:
25:31:b1:18:77:eb:40:1f:c3:84:d5:89:0a:69:b3:
d0:a3:33:42:0e:03:be:69:0f:d6:80:bc:ad:ff:77:
58:4f:b7:b3:3a:0e:19:51:24:b3:25:58:7f:b8:40:
fa:06:62:07:59:26:79:77:10:87:0e:e6:02:47:a5:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:37:6E:46:89:5F:E1:C1:6E:5E:70:5F:C9:AA:5C:FC:90:7B:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b4:72:b5:7f:48:11:79:4c:39:89:fe:c2:54:ab:cd:94:22:90:
c2:88:42:28:8c:74:92:7e:0c:07:62:b2:d1:3d:aa:23:15:23:
3f:83:64:e2:9f:29:4b:7f:0d:e3:00:15:56:3a:af:83:f0:b7:
20:6d:9d:24:8d:b2:e8:d7:f5:69:81:bc:c4:ea:20:b2:56:9f:
36:63:3c:22:57:ed:31:81:91:f9:a7:b5:e3:25:c1:5f:31:a4:
b4:f5:a4:be:b5:b2:4a:71:66:75:58:0f:50:be:0d:24:33:9e:
28:7e:65:58:0a:a8:d8:f2:df:e8:71:ab:21:9f:7e:7b:c9:a0:
f6:27:2c:61:80:8c:b7:e7:05:ac:1a:1a:7f:1c:78:54:a2:12:
51:39:7d:22:90:c5:b5:d3:02:ad:c9:40:c4:2f:9e:25:1a:45:
c0:dd:d2:a2:47:d6:71:be:21:c4:33:cb:15:8f:ba:f8:8a:53:
eb:4e:58:bd:4c:c4:cb:19:5a:ed:80:7b:56:8e:96:e5:5b:ba:
72:62:58:9c:05:a8:60:5a:92:c6:b4:1f:31:da:34:42:6b:f5:
e2:43:c4:c8:5a:55:b9:f4:0a:e9:f3:df:62:6a:fb:b2:b3:7b:
50:7a:b1:9d:52:a4:1f:88:1e:3f:3c:43:ce:b3:66:35:fe:56:
70:fc:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:47:44 2025 by rpki-client