Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
File: ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa (raw, json)
Hash identifier: leQr4YDwTUZokcTuRlDdEmEU9Yg5YVk3UMZsvFzFNlI=
Subject key identifier: E4:EC:5C:65:A8:A7:3E:EF:04:98:C8:DB:C1:07:80:43:D6:AA:15:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B785EDFED1FDDB62DB5C7328EFF2FCAF12F02DF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
Signing time: Fri 11 Jul 2025 19:40:20 +0000
ROA not before: Fri 11 Jul 2025 19:40:20 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:78:5e:df:ed:1f:dd:b6:2d:b5:c7:32:8e:ff:2f:ca:f1:2f:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:40:20 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=4c081edff804084e19cbcf3a2af1a4368cba43b0e0b850af15d4ade2c18813e2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:a8:04:56:6f:bd:d6:a7:0d:59:55:63:7a:
f0:9f:f1:a1:dd:18:b2:ec:e5:9d:5a:a6:82:be:47:
bd:00:90:02:90:1c:42:02:81:2c:81:db:26:bc:3c:
17:3a:2d:9e:60:f6:4f:62:67:f4:af:95:a8:d6:e1:
c7:01:87:d3:a4:ca:ef:9c:16:00:88:6a:24:52:34:
1b:d9:84:4e:26:31:6d:4f:65:e3:8f:a8:89:29:c4:
75:f9:ba:f4:3d:3d:51:c2:5f:bf:f3:8d:de:c0:71:
f5:6b:91:34:d4:f0:89:62:c1:75:36:4e:ac:c9:fb:
84:a1:11:34:15:49:86:e7:7a:30:e3:62:c6:cb:e9:
58:10:64:e7:4e:55:42:fa:b3:9b:4a:2a:bb:a7:7c:
c8:0c:06:7d:12:37:64:19:a6:11:89:1f:9b:d7:9a:
b5:0f:e3:e8:9f:c9:fa:0f:68:41:8e:be:d7:64:90:
3c:1f:d0:5d:0f:e5:e0:5a:7d:2f:0b:b1:69:4c:96:
3f:4a:9a:9e:1d:71:24:a2:1c:37:5c:f7:23:a5:83:
fb:93:68:c5:f0:e8:e4:94:46:ba:b4:82:8b:a9:7f:
21:ad:9a:57:1b:97:48:3f:87:0b:23:12:4a:a3:2d:
c9:9e:93:98:ec:ce:05:db:cf:21:7f:ca:f8:55:d1:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:5C:65:A8:A7:3E:EF:04:98:C8:DB:C1:07:80:43:D6:AA:15:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4080::/46
Signature Algorithm: sha256WithRSAEncryption
2e:07:01:87:8b:f2:b6:b1:f4:80:46:a4:70:60:bc:b1:e0:09:
d0:4a:cf:a5:6c:7b:ad:da:be:b7:44:5c:80:e9:1b:04:15:22:
6e:75:ac:c1:11:22:1f:5f:c0:95:ba:8c:c2:cb:3a:d2:22:60:
a6:c2:f3:71:25:77:b2:e8:94:c4:88:99:85:48:45:26:bd:1c:
3b:98:a4:2b:30:96:4d:28:95:1a:8d:49:18:e7:3e:27:d7:3d:
d5:05:c1:0a:11:ad:dd:ce:ef:a4:39:a0:dc:7e:50:e8:cb:99:
be:af:ea:41:20:30:21:b0:c4:41:ec:57:38:03:55:15:10:08:
20:d0:3e:1d:67:ea:73:c8:b7:e5:a2:37:96:cf:9a:e9:ab:ab:
c2:74:01:5a:16:0f:0d:24:c6:81:56:7a:e4:35:72:25:cc:d1:
54:5d:53:e1:e9:07:4e:33:63:e2:8a:88:1a:8c:08:5e:19:bb:
0e:10:5b:a2:dc:27:07:b1:5d:c0:15:0f:90:c8:3d:d1:3c:fc:
57:7d:09:8b:c8:8e:e4:a3:d0:44:ec:87:eb:37:63:17:de:23:
53:25:12:98:60:ed:86:70:d4:4b:88:ab:30:5e:31:37:2d:a0:
91:ac:ca:c0:6f:74:74:a9:20:e9:ea:db:af:7b:ea:02:01:c8:
0b:f3:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:36:47 2025 by rpki-client