Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
File: 366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa (raw, json)
Hash identifier: 5lVFra1eJy6s5W9DDTrIF4No0e8z7GPxeum8Pn41RbU=
Subject key identifier: F1:C0:1E:60:D5:33:A8:DD:93:85:23:36:E2:DA:73:80:F8:2E:2B:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E1F6DF79E3CF436140BA48D72C16E5A03944707
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
Signing time: Tue 21 Oct 2025 13:30:14 +0000
ROA not before: Tue 21 Oct 2025 13:30:14 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1f:6d:f7:9e:3c:f4:36:14:0b:a4:8d:72:c1:6e:5a:03:94:47:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:30:14 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=577aa94121cdf1e6a7820f54aa6a7c97ca1a58c67939da8d42d1b2aa46c80c42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:30:db:ac:0b:1a:73:64:37:32:58:1c:21:
76:bf:97:b1:af:a9:cb:37:27:5e:eb:ce:15:52:ad:
06:17:b4:0b:18:bb:84:7f:20:08:63:52:4c:bd:fb:
fc:6d:38:dc:0d:69:b0:d8:98:39:a6:63:00:1c:29:
ca:66:19:b8:50:05:f6:74:6c:5e:5b:dd:d0:3d:eb:
2f:ff:9f:0c:f8:d1:1c:4c:66:80:66:db:11:94:3a:
29:8c:e3:09:11:d8:d1:67:5a:87:66:33:76:e8:17:
b4:85:09:5c:be:b9:d6:43:1f:2b:81:4f:80:4d:d6:
9c:68:82:01:6a:f0:89:04:38:1b:19:29:a2:02:aa:
27:25:bf:39:16:4d:a4:92:41:b1:e5:eb:da:b2:c1:
1b:e9:59:91:9a:2b:a7:e4:3a:9e:87:f2:fb:e1:5a:
65:07:19:0b:6d:80:2e:84:44:13:0a:7d:36:9f:28:
f3:b9:00:fb:94:b2:3a:c4:41:a4:2a:21:05:a8:32:
e4:4e:a6:06:5c:bb:96:31:f1:14:1a:bc:b9:b5:d6:
80:b0:ff:54:54:3e:b2:8c:28:00:8e:5c:33:d8:e3:
0d:14:e8:35:9b:8c:74:84:b7:a4:cd:13:44:f1:d1:
8a:39:84:b9:ed:ba:c1:d6:f7:21:10:a0:26:67:6a:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C0:1E:60:D5:33:A8:DD:93:85:23:36:E2:DA:73:80:F8:2E:2B:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/366c380f-7f3c-491f-a7cb-bffc62aed1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4040::/48
Signature Algorithm: sha256WithRSAEncryption
a1:5f:71:3d:dd:65:7f:df:c4:d2:8c:76:7f:08:56:f7:99:ea:
26:52:b6:e9:8d:dd:e4:f0:bc:ab:d6:89:76:32:64:ac:d5:3a:
9a:60:8e:ed:00:96:95:23:fc:72:31:2e:cc:fb:d6:9e:27:1d:
73:b9:ae:25:9b:3e:98:09:0f:48:d8:ca:3e:5c:45:82:7c:32:
7e:05:3d:45:37:f2:bf:33:cf:b1:99:48:ee:12:ae:34:f3:3c:
c1:49:28:eb:a1:d9:c8:6b:05:ca:26:e4:e6:85:c4:32:fe:79:
43:3e:3c:3c:76:98:dc:29:25:d4:dd:71:eb:4a:d6:59:a5:46:
f1:8f:88:44:96:7c:81:1a:d9:5f:26:d4:e3:b8:be:82:b6:50:
1f:9c:a4:ca:b1:ff:bb:9e:c5:4d:05:58:19:eb:7f:7f:68:b0:
9d:1f:b7:a4:0f:ac:7d:ed:41:f9:65:c0:f9:7f:d3:4e:c1:ee:
aa:c4:40:aa:f3:7a:f8:9f:c4:81:70:f2:ef:d0:d3:44:7b:9d:
88:dd:02:63:6e:7c:a2:3d:92:70:68:b9:fe:d4:41:c9:0f:f9:
b8:ca:22:17:65:9f:7a:44:bf:bd:5a:94:6c:d2:19:64:91:3a:
7d:1f:4b:3d:56:0e:4a:bc:2b:d0:30:76:a9:64:eb:0c:fe:9b:
af:cc:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:11:20 2025 by rpki-client