Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
File: da4dde97-2ca6-497d-9086-e0957352d3a4.roa (raw, json)
Hash identifier: hECClWeCd2+rpubQXMiV9Q5zX2mdqzvRl/KSkY+F0jE=
Subject key identifier: 27:44:32:D1:CB:90:8F:14:C9:1C:B3:07:3C:CA:2E:F6:BF:E4:20:DD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 551E11B121341AD5781D7C912CB580B563E52462
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
Signing time: Sat 12 Jul 2025 00:50:15 +0000
ROA not before: Sat 12 Jul 2025 00:50:15 +0000
ROA not after: Sat 16 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1e:11:b1:21:34:1a:d5:78:1d:7c:91:2c:b5:80:b5:63:e5:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 12 00:50:15 2025 GMT
Not After : Aug 16 23:59:59 2025 GMT
Subject: serialNumber=1b0c2a68a915312a28bad5333f2123f3c1bf02e417e92c839d86b6db203e8215, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:73:b2:df:b6:8e:5c:90:08:22:56:37:01:
c6:4c:98:c7:a6:8c:90:e9:8e:e9:a2:c9:e3:44:2e:
b0:7c:7b:60:03:b9:cb:63:07:43:98:97:bb:43:a9:
89:4d:0c:ba:8c:9f:8c:f0:6a:54:3d:9f:b3:9f:a4:
6f:2b:29:d6:01:92:73:88:ab:48:3f:23:17:1c:7e:
be:a6:4a:79:51:5d:dd:f5:e1:c4:97:b6:d9:fe:1d:
83:04:5c:3e:ca:8e:bf:a6:3e:cc:a0:01:87:7c:27:
e1:37:1f:1e:57:86:1b:5c:8c:e1:cd:33:db:ae:f9:
49:8c:b5:dc:11:b3:ae:34:59:ab:c3:d0:73:47:14:
4b:82:b3:f6:cd:f5:da:98:bf:1d:c2:25:77:0b:46:
70:a9:24:d3:96:95:70:4a:82:af:12:c8:d5:7a:44:
bb:db:4b:7d:ce:d5:af:6f:08:42:fd:c4:8a:48:77:
ca:3a:74:5a:9e:85:96:80:20:7c:77:9d:66:2a:6d:
b1:37:92:67:67:8b:50:a9:18:55:88:b4:2e:b4:d7:
62:4f:d3:18:d1:4e:cd:07:65:d2:fb:4a:81:15:6d:
b7:96:41:72:e7:80:f5:52:9d:d4:c7:0a:b9:ab:b5:
4b:f9:d5:33:96:36:3a:46:26:0f:82:00:d7:94:27:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:44:32:D1:CB:90:8F:14:C9:1C:B3:07:3C:CA:2E:F6:BF:E4:20:DD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8000::/40
Signature Algorithm: sha256WithRSAEncryption
4c:82:3f:18:21:50:c7:fc:e8:e7:45:38:9f:ef:1f:53:f4:dd:
f6:57:8f:f8:97:70:c6:3a:e8:08:1f:1d:12:fc:b4:48:10:2e:
3d:56:73:a5:3c:65:e3:af:c6:d9:98:aa:67:e0:d6:2b:a4:50:
41:68:e6:53:98:af:60:72:a2:2b:34:16:06:20:d6:00:43:0f:
d0:cf:84:f2:df:10:58:d3:64:b0:e9:11:49:40:52:29:f2:58:
92:b2:27:90:97:de:33:c6:d1:a4:72:a2:4e:e6:2e:0e:a8:b6:
ea:32:c6:54:74:e3:88:44:7c:d5:d5:cb:26:60:70:10:df:de:
10:f4:0b:d2:15:03:84:ef:4f:2f:e0:72:d7:37:bd:d7:72:7c:
10:25:45:5c:64:16:cb:a7:df:05:68:c7:a3:d5:b2:44:b1:fc:
fa:6f:d1:c2:bd:e5:93:9c:02:71:4c:57:dc:3f:2d:7b:a7:84:
6e:b1:21:14:36:01:c9:d1:17:41:e8:c8:d5:34:d1:36:40:80:
62:50:3f:08:18:b9:07:ad:1e:8a:f5:8d:2b:c0:95:77:78:11:
3c:d0:31:f9:72:86:f4:f2:7e:d2:bd:14:22:1b:d7:26:ae:67:
00:eb:90:70:69:ac:61:59:1f:da:b3:1a:a8:6c:12:cb:1a:92:
8c:a6:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:46:47 2025 by rpki-client