Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1db7d6f9-20a2-495c-9303-96004ae64814.roa
File: 1db7d6f9-20a2-495c-9303-96004ae64814.roa (raw, json)
Hash identifier: t+GTNsI0ilk3KKsW3zUwBD5k+S38vgBh67m8HFJduPY=
Subject key identifier: 57:7F:D3:72:D6:10:3B:D5:C7:B2:0B:7B:B6:EB:CC:D2:0D:61:8A:5C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 32F8B20F7B70ED2D179F2676ECCA2BC37F456FFC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1db7d6f9-20a2-495c-9303-96004ae64814.roa
Signing time: Tue 26 Aug 2025 17:10:51 +0000
ROA not before: Tue 26 Aug 2025 17:10:51 +0000
ROA not after: Tue 30 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f8:b2:0f:7b:70:ed:2d:17:9f:26:76:ec:ca:2b:c3:7f:45:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 26 17:10:51 2025 GMT
Not After : Sep 30 23:59:59 2025 GMT
Subject: serialNumber=4da5f0df63fae1f68a99651705aafe291a83f8d4701a084cc83e0cbf096508e9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:e1:85:6b:8a:01:bb:15:d6:f6:04:d2:b0:
05:15:b4:c6:09:f5:18:61:5b:16:e2:c3:1f:e2:4d:
ea:13:9c:2f:69:22:a3:b4:2e:16:ee:fe:16:5a:dc:
70:f6:5a:97:15:bf:e2:f4:0a:6f:27:11:45:db:ee:
87:aa:13:5d:4e:da:c0:40:71:13:9e:eb:be:86:fe:
de:9d:ea:ec:f3:67:0c:d6:4a:e0:9e:9b:8d:8e:83:
07:9e:27:86:02:9b:17:a9:e4:e7:1f:f4:40:93:4b:
9f:f0:6c:9e:ff:cd:9d:0f:97:e1:05:8d:b9:04:0e:
dd:5e:54:4c:04:0d:f3:25:f2:f7:e1:1d:21:b4:58:
50:67:6c:1c:fc:5a:22:18:60:70:11:db:0f:49:2d:
1e:42:79:9a:49:ad:05:ad:e2:65:be:d8:7d:6a:b1:
2d:b7:15:e8:04:81:19:44:82:7b:66:9f:f2:50:72:
0f:d6:d7:54:9e:b7:73:5e:9f:9b:27:2a:8b:2f:e1:
9c:ea:f3:7e:c0:d9:61:c9:0f:39:f2:30:f7:0a:6f:
15:6e:d5:b3:5f:c8:d1:e4:6a:e9:89:69:95:6f:f0:
09:d5:75:f5:98:bd:db:e1:64:eb:99:c4:27:7b:b9:
93:ee:d4:c5:d7:33:a8:72:20:3b:20:82:cb:a6:c4:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:D3:72:D6:10:3B:D5:C7:B2:0B:7B:B6:EB:CC:D2:0D:61:8A:5C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1db7d6f9-20a2-495c-9303-96004ae64814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
52:b1:13:4b:ce:e8:e6:f2:bb:b5:32:bf:12:14:71:b1:73:da:
67:ff:5b:4c:87:a0:68:57:63:d9:75:d8:d9:2c:2b:87:10:f0:
3e:e6:e0:b6:e6:c2:6b:13:84:8d:94:00:b3:c9:10:f9:4b:52:
75:87:93:c1:c3:0d:4c:92:0e:1a:66:ae:d0:56:60:3f:1d:0b:
96:e9:07:fb:7c:a4:b1:73:54:38:6a:2b:e7:a1:ce:ec:ea:ac:
df:55:a1:5f:a6:47:38:09:a8:d0:b6:65:90:c4:6f:f0:39:9e:
15:13:57:9e:a7:9c:bb:48:8d:43:ec:70:8f:74:66:e6:ae:c4:
69:4a:84:a1:e6:1d:8f:f5:22:2a:73:0b:4b:8f:39:cf:d9:c3:
b7:e9:4c:ad:42:eb:76:6d:6c:17:b0:52:97:3c:15:7e:d1:33:
e7:f1:93:49:7f:4c:8d:9e:f0:af:a3:82:c6:08:b4:63:ee:38:
c8:0c:08:d0:48:01:8a:ab:ef:60:2e:8b:a0:85:4b:23:df:08:
43:bf:6e:70:93:5c:cf:80:75:c5:62:72:06:b0:39:f9:81:4b:
ef:83:91:26:b2:d3:1e:e5:52:de:97:49:92:dc:b6:b3:37:62:
bd:db:36:a1:b1:dc:e9:d5:c1:3d:91:e6:6b:43:ae:bd:c1:1e:
5b:25:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:34 2025 by rpki-client