Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
File: 7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa (raw, json)
Hash identifier: gbjkkI8sCLLLw+YnUHZF20LuEQwO33CfKI2GN0olWSY=
Subject key identifier: B0:D6:34:3C:38:82:B9:E3:C4:36:AA:5B:80:DB:0A:65:BA:A5:CB:F2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D8C4E59D5071AC68534E86F2E4607AB977D095D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
Signing time: Mon 01 Sep 2025 19:40:44 +0000
ROA not before: Mon 01 Sep 2025 19:40:44 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8c:4e:59:d5:07:1a:c6:85:34:e8:6f:2e:46:07:ab:97:7d:09:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:40:44 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=5352a05a8edce6f75a3a5346b67f3169e1acb87771b9dd3d5c5bd01a10fe9812, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:d6:ef:32:2b:c9:25:05:e9:2b:66:c2:77:
a4:90:3d:71:2e:a9:1e:54:15:4d:e5:7f:77:71:8b:
42:c6:0f:79:f7:68:a1:df:9d:e2:81:3b:58:54:cd:
fe:72:b0:e4:0b:d5:80:6f:74:3d:e1:b5:3a:8a:b8:
22:e6:41:0b:6d:83:0d:13:25:47:19:c4:7e:cb:fc:
1e:bf:b2:8f:97:c6:8b:2a:6b:92:0a:6b:69:24:24:
e5:ba:23:8e:02:58:f5:b9:c5:da:78:04:42:1e:c3:
f7:09:bd:3f:2c:86:4d:b4:80:fd:7c:e5:3b:eb:3f:
35:73:31:2b:3f:44:c1:08:53:d1:3f:56:e4:85:60:
91:2c:d7:65:9c:34:a7:e4:72:30:b7:f9:70:2b:1d:
21:d7:eb:9e:fb:11:b0:18:3e:02:da:41:63:ef:7f:
f4:27:c2:86:f2:f1:b5:5a:fd:94:94:9f:5b:3d:95:
a7:35:da:24:5d:f0:eb:d6:99:e2:d7:5c:4f:24:4d:
93:4c:72:f5:62:41:27:15:2b:61:4d:8c:ce:95:be:
4e:45:17:62:5e:6a:4c:e6:d2:07:d2:5e:51:dd:f4:
1b:91:24:a4:09:2e:58:88:6d:fb:b1:b1:ce:86:8c:
6e:85:03:fa:9c:35:1c:d6:46:b7:36:ef:c0:89:89:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D6:34:3C:38:82:B9:E3:C4:36:AA:5B:80:DB:0A:65:BA:A5:CB:F2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a6d5c4d-40dd-4577-9520-a2ac286c8194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
b6:e0:56:67:02:7a:bb:6d:82:15:f6:7a:ab:ad:a3:a6:eb:7f:
23:85:f2:55:57:e8:ba:67:55:1d:4d:c5:01:c0:9b:89:55:7c:
bc:29:83:a7:51:44:2a:71:35:a2:7d:98:57:4a:fe:86:3e:a5:
8a:3b:59:89:9c:e8:78:37:74:84:bd:9e:b7:dc:a1:eb:da:45:
75:48:78:4e:f9:e3:1f:82:07:21:fb:66:01:64:92:50:ff:f0:
42:62:bd:8b:25:db:7a:d7:a5:27:a8:55:6e:89:2c:c0:0e:35:
fa:a8:ca:34:04:a2:ff:d1:90:e7:c4:21:19:f6:1e:b9:69:e4:
67:b7:d5:55:24:e8:ce:93:bc:db:15:8a:14:0a:3b:8e:10:09:
47:9e:95:92:2e:f1:43:6a:d0:de:d2:e1:b9:df:7e:63:0f:ce:
4b:aa:e4:bf:e4:a6:71:4c:34:08:c0:a1:6c:2a:49:f8:ce:c0:
6a:48:a9:7c:e0:c5:2d:93:eb:f0:cf:f5:35:89:e1:87:d9:c1:
cd:e1:b3:3f:f7:f1:29:13:e7:bb:e8:de:d7:4e:cf:64:5f:7d:
3f:32:c7:68:b2:f5:94:72:83:34:ed:da:ec:35:ed:6e:4f:94:
67:45:de:14:a4:1f:c9:ba:54:10:d1:56:34:31:99:80:71:67:
e2:d8:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:33 2025 by rpki-client