Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
File: 03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa (raw, json)
Hash identifier: YvqPqokITaDLZ9TIS9WvlmaxGx+pUWqHNbs+YLAHr0U=
Subject key identifier: 30:51:DF:3C:DA:D8:8E:7E:C8:FC:A3:05:D1:68:86:2F:12:82:2F:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46B16440E5F9EFEFFC0DBB2ACAC416C1C034E952
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
Signing time: Mon 01 Sep 2025 20:10:08 +0000
ROA not before: Mon 01 Sep 2025 20:10:08 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b1:64:40:e5:f9:ef:ef:fc:0d:bb:2a:ca:c4:16:c1:c0:34:e9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:10:08 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=b1c2da7d09f5fa52122420f1c453c2039be59427a7f8a7dac6b73e98d182ba18, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:a3:59:03:88:90:b1:ec:42:21:be:08:28:
1a:7a:e1:0a:8b:cb:fd:20:09:f0:9e:44:40:bb:9e:
c3:5f:14:83:80:b2:a1:35:31:21:1a:07:be:71:13:
13:09:37:f8:9a:60:11:82:8a:b1:d4:b8:bd:41:6a:
fe:74:12:b2:ab:84:d0:07:ff:93:be:01:d3:53:64:
c1:21:4b:c4:95:c4:b6:ae:55:61:fc:d4:b2:1f:3f:
b3:5e:38:bf:b8:06:64:9a:42:55:9c:0d:3b:62:4e:
ad:f2:7d:0c:2f:1b:4c:ea:48:7f:c0:f1:17:13:b6:
42:5b:8e:26:56:71:d2:9e:3e:a1:1e:83:ac:e8:ff:
d8:9f:de:cd:9c:9b:5c:83:46:f5:05:6d:5c:41:29:
dd:8e:6e:14:ee:9b:29:00:a1:3c:cb:67:e1:5e:92:
d2:b4:d9:03:91:2b:0d:a6:7b:e9:02:50:d7:89:c0:
44:70:3f:e8:da:6e:24:01:fe:d3:fa:5b:0a:c0:b8:
c2:6d:e8:2a:fd:a9:f4:86:ed:0e:15:dc:2a:07:b3:
d3:ec:f4:1c:68:53:0d:05:75:c2:a9:78:93:97:d3:
0c:9a:63:93:26:fd:76:1f:ff:77:93:04:9b:df:ac:
ee:a4:8b:94:72:a3:c3:02:6a:d0:22:a0:85:a5:48:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:51:DF:3C:DA:D8:8E:7E:C8:FC:A3:05:D1:68:86:2F:12:82:2F:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03416ce5-042a-4b8b-81dd-819c5e1cdf09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8040::/48
Signature Algorithm: sha256WithRSAEncryption
a5:45:28:fa:c1:82:79:af:3e:6d:1e:6c:20:9f:60:f2:bc:d3:
5d:3c:4d:3d:ad:e5:76:b1:3f:fa:d6:fd:87:2e:a2:5d:ab:40:
64:6d:0a:11:82:ae:90:54:35:cd:89:a8:40:12:96:87:38:5f:
09:7f:56:b8:df:03:ee:a5:29:d0:c7:e5:e6:eb:b9:bf:d5:b9:
eb:92:7b:b1:04:58:11:15:2b:fe:dc:1e:a9:7f:e2:c9:ef:d9:
bb:44:8a:d6:58:56:08:58:d5:f2:37:a6:b9:93:74:e2:e8:bd:
8d:62:df:c3:a0:ce:eb:20:21:91:21:d6:e1:ef:80:31:c4:c2:
ac:f7:46:45:06:b2:ad:57:c7:d9:e8:b8:3c:92:68:25:a2:78:
8b:ee:c8:15:64:e2:da:62:12:f5:b9:40:ec:65:ea:74:7c:64:
74:f4:38:86:d0:48:34:16:f4:1f:04:79:7c:29:4e:f1:07:d9:
a2:d7:41:20:71:cc:01:09:70:99:f0:e1:42:75:25:16:ed:d1:
30:1d:73:3c:68:12:e2:df:c7:8d:56:56:b7:89:63:31:4d:7a:
60:c7:ab:ad:00:5d:cd:d1:64:c6:3f:8c:9b:90:43:76:a8:3e:
02:5a:27:06:8b:77:c1:04:e9:a2:7e:98:98:72:76:47:3b:d6:
0a:fc:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:02 2025 by rpki-client