Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
File: 113e55fd-9531-4700-bcdc-5abe9a806b41.roa (raw, json)
Hash identifier: yuVm43Q4iDaVY7OoKDK4LxetA9YR5e3qDvX/04N3S4g=
Subject key identifier: 6D:48:03:D8:F2:9E:00:4E:83:9F:FE:F8:89:8C:48:FA:10:79:5E:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36395EC9EABFBE2A9C433A20BA919D013119F37D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
Signing time: Tue 26 Aug 2025 17:11:15 +0000
ROA not before: Tue 26 Aug 2025 17:11:15 +0000
ROA not after: Tue 30 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:39:5e:c9:ea:bf:be:2a:9c:43:3a:20:ba:91:9d:01:31:19:f3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 26 17:11:15 2025 GMT
Not After : Sep 30 23:59:59 2025 GMT
Subject: serialNumber=bee1bd0ca81f32b3eb654614a6f376bc8be4777cdf5eaddbb5977253c5d3419a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:46:82:3d:f0:99:7a:5a:c4:9f:05:7d:c1:eb:
08:a0:56:02:e7:83:fa:32:3e:1e:1c:60:e0:0e:9b:
ec:88:cf:62:b7:41:28:49:8d:09:e9:6b:9e:81:7a:
88:3a:bd:57:a5:dd:86:87:9f:b5:a0:53:e0:6c:cf:
1f:0e:15:52:fa:ad:05:0a:43:73:75:9c:62:aa:90:
75:3d:74:26:21:0a:09:34:10:ce:ab:44:13:25:49:
64:97:04:1f:f9:37:64:50:8c:f5:42:87:95:d7:d5:
32:06:7f:7a:38:96:c2:05:6e:ac:23:90:94:56:24:
63:5a:08:a5:e3:b9:9b:0f:7c:7d:94:a1:5d:7f:0e:
d5:a7:4c:8c:2e:72:3d:3c:c3:82:8b:43:91:c4:1b:
21:f6:b7:93:f8:bc:a3:d9:9e:99:65:32:51:62:41:
3f:3b:10:cb:38:2c:c4:93:c8:17:b4:eb:23:0c:e7:
7f:83:30:2f:e7:6c:d0:40:b4:b6:c4:84:19:bb:9c:
48:e2:5f:ac:cb:2c:96:03:6d:ac:0b:93:4d:4a:b2:
ec:db:ba:34:8d:5d:d7:fd:28:9f:56:1f:0c:57:ae:
51:c1:d2:ab:7a:89:51:09:8e:23:de:42:68:c9:52:
8b:95:4a:04:65:1d:af:41:33:2f:45:97:78:23:ed:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:03:D8:F2:9E:00:4E:83:9F:FE:F8:89:8C:48:FA:10:79:5E:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/113e55fd-9531-4700-bcdc-5abe9a806b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:800::/40
Signature Algorithm: sha256WithRSAEncryption
72:e8:22:c7:0e:a7:38:d5:75:83:77:58:a4:ef:71:e1:2c:26:
48:b6:c5:dc:c6:9a:3c:19:c5:50:41:11:fa:b9:41:a5:45:11:
f2:37:5a:08:b3:48:95:16:35:ef:ad:20:de:73:de:d2:05:3a:
b7:c5:b4:af:15:96:f8:7d:9b:56:bb:9f:7c:4b:d9:4b:13:9b:
cb:b6:d6:51:4d:ff:9b:43:ee:2d:27:76:66:8c:ce:49:77:4f:
05:0f:62:47:34:12:ad:4e:b5:83:79:00:82:13:6f:56:0b:4d:
b1:40:68:5b:08:09:21:d4:89:38:31:e0:ad:0d:f3:98:c9:f0:
34:62:4d:17:07:fc:a6:d4:d8:95:d7:f7:ed:0c:70:3c:1c:07:
c9:6b:37:30:9c:08:03:4d:6c:da:30:14:50:b2:e6:32:6b:5c:
c1:ea:2c:7c:53:48:23:fa:2b:a9:c5:68:05:78:e3:bb:44:a6:
79:a3:2a:f5:4f:79:bf:5a:7d:5b:50:74:01:4d:9f:03:6b:84:
0a:fc:f8:a5:15:41:bc:fc:ae:61:e8:df:04:5b:e8:16:cc:28:
a6:4b:ee:a6:cd:dc:c1:41:b3:11:06:d3:7e:24:91:af:0b:49:
8c:c5:1d:75:57:06:f0:b3:08:8f:c1:e8:4f:59:a3:4b:e5:6e:
b1:d2:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:14:49 2025 by rpki-client