Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
File: 4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa (raw, json)
Hash identifier: 19fWDSIMc8gaDCmB2cQDvhPK/QqueE+OL2q4/EbdQYI=
Subject key identifier: C8:CE:95:07:0E:01:89:32:EA:53:DD:06:32:69:81:4A:34:41:6B:A7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 330347A634F9FCE1D04DF2F3081E732194CE03E1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
Signing time: Mon 01 Sep 2025 21:00:55 +0000
ROA not before: Mon 01 Sep 2025 21:00:55 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:03:47:a6:34:f9:fc:e1:d0:4d:f2:f3:08:1e:73:21:94:ce:03:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:00:55 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=2acc308fe5558b8d996c03c2729aa3d4213102b4ef4b9346d539fde90a05a11e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:db:91:7d:74:81:4c:05:c1:eb:d7:c7:ac:
69:8e:6c:0d:8b:d4:58:98:59:61:68:04:2d:3f:c9:
e2:e0:e9:f1:44:85:36:2a:36:da:c2:d8:e8:b1:dd:
bf:28:92:6d:52:4c:3d:48:fa:21:45:30:66:88:2f:
82:ac:49:b6:d7:be:b0:4a:f8:af:3c:be:85:de:3e:
28:9d:46:3c:51:95:2f:0e:14:2b:c0:d6:8c:57:5b:
c8:0c:f4:c1:c7:de:74:df:90:6a:51:bc:be:fb:64:
40:10:16:0d:78:03:29:43:27:d3:70:12:cc:45:6e:
7d:04:f4:13:3d:aa:88:59:3f:33:9a:5d:77:fd:94:
07:23:fe:9a:7a:b1:3c:9b:90:35:93:29:b5:6e:4b:
16:82:9a:3e:40:2a:8d:4e:8c:55:e7:e4:f2:9d:9e:
44:a8:84:40:22:92:ce:d0:16:62:23:9d:90:07:0d:
4a:f1:f1:18:d7:cc:d7:6b:49:91:73:ec:78:4f:74:
ea:5f:69:5f:0b:49:10:a8:99:db:fc:08:37:04:27:
be:7e:02:fe:94:0e:82:14:0c:e9:d0:64:06:99:23:
06:28:fd:39:95:75:1a:44:b2:e2:e8:de:f4:f4:0d:
d1:63:fd:4e:84:8a:fe:8a:8c:1d:c9:50:3b:43:77:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CE:95:07:0E:01:89:32:EA:53:DD:06:32:69:81:4A:34:41:6B:A7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:9000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:7f:24:b7:ac:fc:2a:48:2c:48:b1:1d:14:86:10:d3:5b:d5:
c8:1b:12:e8:d8:bb:7e:86:95:5a:05:3d:df:d6:50:52:5d:19:
ee:d1:bd:b5:c8:bf:84:b2:44:17:c4:98:cc:16:ee:4f:ea:78:
94:2a:c1:10:98:36:8f:8c:94:0b:2a:6d:b0:4f:27:80:3d:a0:
0b:48:38:a5:c6:ac:57:e4:b6:9f:d3:7c:93:68:4a:89:09:f8:
2e:dc:8a:4e:8d:a3:a8:b1:81:e7:c9:0c:1f:1a:76:78:03:7c:
e0:9a:3e:c6:93:68:c6:fb:5a:ea:86:c0:68:02:68:66:0f:9d:
4f:8b:d4:47:1b:01:ee:5d:3a:2a:79:45:c2:0f:4e:0d:5b:f2:
cd:03:58:a2:3f:2f:e9:3c:90:fe:e0:ba:34:b6:80:2a:f0:59:
f7:5c:99:37:63:5e:f4:d0:d1:fb:4c:2d:15:c2:a8:26:bb:62:
0a:35:ad:23:ce:bb:b8:12:fe:09:45:d6:8a:27:ef:44:1c:77:
e7:28:b4:cd:9e:ed:b7:46:5a:6b:8d:e5:1d:4e:ab:64:17:d3:
aa:51:a7:2d:59:5c:1b:7f:9e:85:ec:6a:35:de:ff:7e:66:a9:
a8:8f:b2:ae:90:dd:76:55:ee:3a:c5:15:64:5f:76:15:bd:ed:
be:6a:e7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:13:33 2025 by rpki-client