Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
File: 03a11d7d-6d37-488c-8fe1-258c484d1682.roa (raw, json)
Hash identifier: KRr5y0A0bwpacVJ5vjm0NZcHafyDVYl0c4q9W9XLvJU=
Subject key identifier: 3E:3F:50:8B:9C:80:C2:BE:65:A9:10:E2:E4:FC:92:3B:2D:59:1A:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15638F01064BCE94009024F1E353459DC8B85ADC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
Signing time: Tue 21 Oct 2025 13:40:06 +0000
ROA not before: Tue 21 Oct 2025 13:40:06 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:63:8f:01:06:4b:ce:94:00:90:24:f1:e3:53:45:9d:c8:b8:5a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:40:06 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=0f8f2a169d8d83bf9dfd0817530f2fdfc64221bb25122f1f4c578cc534d1ea8f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:1e:87:31:4b:40:43:8e:7b:20:ff:4c:68:
1a:f9:3e:ff:a1:6d:0b:e1:56:10:e6:0e:de:bf:bd:
09:d0:4d:b4:c8:a5:c0:84:28:4e:e8:67:da:33:2b:
d3:87:42:94:02:91:7a:41:72:68:8c:1d:e5:ec:dc:
55:a5:98:a6:83:c6:d4:68:ce:ac:8c:22:ac:1f:ac:
ae:8b:3d:7f:d5:c9:b1:c1:a2:4d:0d:4e:0a:3e:87:
cb:90:e6:1f:f0:8b:19:06:e4:2d:43:1c:5e:b2:35:
a2:60:c3:b0:19:2b:21:86:cf:2e:e5:41:4d:10:77:
ef:76:aa:97:2d:55:2f:34:a8:03:2f:9c:13:94:57:
f4:cd:ac:e3:b0:86:2e:6e:0d:94:01:e0:c6:77:83:
e6:27:eb:b6:5b:d2:08:b9:18:ef:b5:ba:e2:96:f1:
63:50:7b:4b:c5:62:5e:ab:42:fd:f7:bf:87:d5:fb:
d6:3e:df:86:68:74:71:f0:2c:a3:bc:83:96:fc:3c:
5a:fc:b9:94:f6:8a:1e:a8:d2:6c:a4:fe:ec:a7:49:
f0:af:a7:90:e5:07:2a:db:b1:ee:4f:b3:e4:8a:15:
36:23:f7:fa:82:ab:ca:1e:68:e3:ca:72:ef:40:40:
15:df:7e:77:c0:30:ea:90:61:69:aa:fc:ae:98:86:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3F:50:8B:9C:80:C2:BE:65:A9:10:E2:E4:FC:92:3B:2D:59:1A:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/03a11d7d-6d37-488c-8fe1-258c484d1682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:b000::/40
Signature Algorithm: sha256WithRSAEncryption
be:57:d6:ca:e9:88:9f:34:a6:c9:14:3e:cc:cc:dc:cc:3e:54:
2d:47:d0:c2:5c:f8:7e:79:6a:11:2a:1c:d6:79:c5:b4:60:d6:
3a:7d:8b:d0:ce:f9:ba:73:8f:88:81:88:1e:fe:e7:d2:9d:12:
c8:5a:d5:73:7a:b2:ab:38:05:f4:ee:dd:03:dc:84:0e:58:74:
a3:5e:2f:f6:f8:a0:8b:26:99:f1:29:60:f9:aa:1a:91:3a:09:
2d:55:08:81:33:ca:75:46:ae:b4:61:e4:de:16:d9:f8:f0:26:
0a:9a:bd:b0:00:71:c8:c3:6f:e8:24:6d:0b:f8:28:85:36:01:
31:e9:72:f8:28:5f:9d:7c:d0:fd:7d:77:e4:62:c5:a3:c4:6a:
a2:77:bb:99:d7:75:1b:89:37:f1:1c:23:09:c1:d0:bc:19:c6:
c6:04:1b:33:b0:f2:2c:76:2d:18:f0:ca:4d:97:e8:81:c5:03:
24:76:77:1a:8a:ae:73:c8:ad:65:ea:40:c2:1c:ba:a1:58:5e:
da:8d:fb:ea:74:1a:5e:a8:12:07:30:5d:3d:fb:24:8f:2c:37:
d4:f0:53:b4:af:9a:75:c9:65:fe:47:d7:5b:eb:58:ca:69:c1:
da:a7:06:2b:60:ae:41:df:88:dc:bf:46:7a:31:ff:0c:79:dc:
aa:51:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:12 2025 by rpki-client