Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
File: 6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa (raw, json)
Hash identifier: t9cu5RmaiQ+1QsBMOgN72tlegVdKq5Nn3xHXHk+WGF8=
Subject key identifier: B5:44:D6:83:2E:EC:E5:23:D0:21:2A:B2:04:4B:22:47:DE:63:2A:F3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DDF1A02C3D5555C6E48F2760B004B71B12F7C43
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
Signing time: Mon 01 Sep 2025 20:31:19 +0000
ROA not before: Mon 01 Sep 2025 20:31:19 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:df:1a:02:c3:d5:55:5c:6e:48:f2:76:0b:00:4b:71:b1:2f:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:31:19 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=8e99bcedc46570c1affb8181196ab637f8ea22ca8d9149ea84e187c912e3b64d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:bf:bd:54:4a:f7:06:c8:a5:67:85:a6:b2:
0a:2a:10:7e:8e:56:8b:9e:86:52:b5:93:47:8c:22:
03:cd:43:7e:f1:09:a4:f6:e5:32:58:f4:c3:7c:f1:
24:2d:dd:e8:e7:4b:07:d1:14:e5:77:fd:7f:1b:90:
0a:6e:76:f1:5f:e7:2d:ed:d4:f6:87:61:89:b8:6f:
e5:49:ae:50:8f:63:65:3f:7d:4b:a2:e3:bf:f2:5f:
03:2c:b2:32:11:bf:9b:ac:17:c1:57:e3:96:ad:96:
96:f2:37:8f:87:24:cb:30:cf:ff:b5:27:07:c5:c2:
c4:71:e0:3b:f0:8e:40:d0:84:95:29:c6:13:79:e0:
52:db:24:0f:bb:15:53:23:96:30:bb:46:4c:b5:38:
65:50:60:45:f1:90:92:6f:5a:26:97:d1:7e:fc:10:
e0:23:26:60:dc:cb:8c:35:e2:05:31:cf:72:df:04:
e1:f6:e0:72:bf:89:62:b5:2f:e6:56:b0:f8:7d:a1:
30:23:66:b5:06:c1:67:d0:96:17:00:63:7f:1b:a0:
97:22:80:13:73:20:a7:06:97:6e:50:ff:10:8f:c3:
a8:eb:a8:ec:a2:2d:c3:09:4a:67:a6:e1:6f:ae:c5:
55:3a:1a:1e:7c:c8:5f:23:a0:fe:c8:87:2e:eb:82:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:D6:83:2E:EC:E5:23:D0:21:2A:B2:04:4B:22:47:DE:63:2A:F3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:c000::/40
Signature Algorithm: sha256WithRSAEncryption
3c:82:a9:1a:21:ba:d3:07:34:ba:8f:96:11:7e:0d:c3:7a:17:
d9:10:91:fc:11:1d:8e:5f:df:b5:92:6c:13:41:69:f3:b0:a3:
45:4d:ab:ab:a4:31:16:b4:dc:ad:48:e2:e6:c2:b6:3f:fa:57:
f9:93:c9:cb:71:07:cc:fa:42:0c:d1:7f:07:c3:24:a1:b0:9d:
c2:5e:03:3c:35:af:3b:bd:60:c0:ea:18:1e:1d:57:bc:10:af:
7a:ab:0c:56:bb:38:6c:9b:2c:05:00:8a:ae:11:0e:0b:55:1e:
ed:75:ba:ca:df:15:cc:6f:58:58:37:4b:c7:26:45:7f:5a:a8:
6c:4e:fe:99:a7:8b:22:da:cb:63:ca:80:c3:a9:bb:45:0a:07:
b7:8c:75:36:45:7e:d2:f5:8e:b6:1a:73:f2:ba:51:d1:33:79:
e5:4a:77:31:ed:1d:fe:f2:f2:a5:df:59:d9:9e:04:cb:6b:12:
aa:8b:e8:17:fa:b9:22:2b:ec:39:59:bb:2d:a6:36:07:3c:a5:
ba:eb:8d:2c:41:99:a1:01:5f:85:3a:d4:34:36:cc:91:1f:dc:
7e:6e:79:59:15:38:56:33:77:c9:ab:55:77:7e:c5:1e:b7:24:
56:b6:0e:53:de:57:54:a0:21:f6:be:f2:94:76:d9:2c:cc:3d:
d1:a2:da:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:11 2025 by rpki-client