Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
File: 232e4c5b-5853-4200-81cf-438555b951ff.roa (raw, json)
Hash identifier: 6aJr2F7IaGQ8KYi6MWCZAU4LxL1d/NFrT7pwUXA0MUo=
Subject key identifier: C2:88:1D:FF:C5:9C:26:4A:11:57:90:5C:E1:2C:D2:6E:E5:46:CC:AA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04CFA62C5191402CEF4B924288C4BBA13EFBF346
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
Signing time: Mon 01 Sep 2025 20:40:58 +0000
ROA not before: Mon 01 Sep 2025 20:40:58 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:cf:a6:2c:51:91:40:2c:ef:4b:92:42:88:c4:bb:a1:3e:fb:f3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:40:58 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=3a99c8f7bc8d4399671064c7fe3a9105c4f096269066a75fdcc24deefc90eedc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:6b:9b:d5:f3:0c:c5:59:0a:26:f6:08:2e:
6f:c8:16:26:27:a4:c7:d2:c6:cf:dc:01:c8:82:01:
fb:7c:62:2f:1e:d2:6e:da:ba:a6:46:3c:5c:47:1c:
1a:53:61:ce:65:1d:31:d1:12:a5:06:7b:3b:58:db:
07:01:01:ec:2a:a0:cf:eb:81:ed:6d:98:ae:37:19:
6b:13:d9:51:52:3f:84:e6:5c:90:33:6f:ac:05:da:
1c:64:c1:6e:01:c1:0f:d4:c0:8d:5d:08:2d:09:f4:
07:36:a7:6f:4a:06:8f:07:63:89:fa:7d:b3:bf:26:
f5:23:ff:47:a8:e5:8f:04:0a:32:9d:8e:b1:9f:49:
5b:5e:e8:7c:d7:25:72:7e:ca:b1:bb:94:17:b4:0b:
42:10:08:59:71:98:4a:52:ed:36:2c:1f:db:35:06:
67:c1:86:90:0c:f1:10:44:e9:bb:d1:e1:54:58:44:
b0:14:bd:1a:d7:b6:47:21:8f:a9:a8:da:8b:3a:44:
33:ac:69:6a:90:27:df:a8:16:50:16:99:77:f0:0c:
c4:d6:b1:c6:bc:0a:44:fd:89:83:bc:35:df:a3:b6:
1a:52:f1:24:f1:ee:58:2a:b3:7d:fc:7c:d2:f8:f2:
03:bd:52:00:7a:7b:e2:a6:de:33:99:60:e9:e6:3b:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:1D:FF:C5:9C:26:4A:11:57:90:5C:E1:2C:D2:6E:E5:46:CC:AA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/232e4c5b-5853-4200-81cf-438555b951ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:8000::/40
Signature Algorithm: sha256WithRSAEncryption
0e:36:5c:72:da:26:8e:42:3d:ea:4d:2e:8c:f6:2e:b9:b8:3a:
9b:22:cd:be:7b:41:3a:e8:55:60:8b:64:9f:67:e7:e5:ef:9a:
86:9f:67:47:d9:d1:56:dd:9b:7e:a3:b0:88:f4:30:9c:b8:2d:
8a:a3:b1:a8:e8:91:53:56:2f:50:c5:7f:37:3d:64:e0:bc:51:
53:bc:b1:2c:0b:9a:09:ce:74:1e:5a:54:ec:2f:8e:f3:96:04:
81:a2:77:c1:36:9b:9c:38:b4:fd:a2:29:d9:9a:09:48:54:5c:
c6:2f:ab:c4:9b:56:12:3d:23:33:79:4d:f4:aa:d7:58:0d:59:
df:86:49:3e:88:e6:3c:b9:68:aa:7f:8f:16:5e:bf:7c:4f:08:
81:7f:1f:bb:76:65:a2:23:86:77:51:99:6b:5b:f2:c1:3c:af:
cc:d8:c7:cb:4b:bc:b9:e2:d9:32:b3:6b:26:d7:0c:c1:bc:76:
49:e1:d1:2f:ac:1a:25:0e:d2:cf:24:99:06:12:5a:76:1e:fe:
8a:7d:3a:c7:ef:3d:f3:2b:45:26:c4:c2:02:c6:3b:96:32:1d:
47:44:3d:f6:d5:5b:25:ae:20:c6:9b:eb:dd:15:d8:9b:22:94:
e2:58:36:bb:94:82:4b:ee:32:28:db:d1:9d:77:00:52:69:3d:
91:b5:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:10:23 2025 by rpki-client