Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa
File: 9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa (raw, json)
Hash identifier: OBizA3V4UYVvGQg+uTvR7thSdGFV0h8a+tcFuEeF6bw=
Subject key identifier: 94:00:31:72:2B:0B:60:0E:CD:95:ED:1E:20:7A:E6:14:7D:B8:53:F1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D6961F5201C3A767299D2EA86F9759EF9B6DCCE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa
Signing time: Mon 01 Sep 2025 20:20:14 +0000
ROA not before: Mon 01 Sep 2025 20:20:14 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:69:61:f5:20:1c:3a:76:72:99:d2:ea:86:f9:75:9e:f9:b6:dc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:20:14 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=dc5c66e60ea6920c49771640804db66948bb1a7727f3eec426f28178f2eea2b8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d1:47:49:96:2f:de:0e:e3:76:9e:28:b6:5d:
de:5d:ce:07:d2:a8:03:6c:95:dd:4c:37:a0:30:3d:
da:08:37:79:2a:46:96:50:15:a3:f7:67:e8:d3:91:
ff:c2:52:48:38:77:f1:36:e4:b9:d3:83:28:e8:3b:
4a:0d:a6:dd:3e:8d:4b:89:7b:16:17:36:01:f5:16:
3d:c1:d2:bd:1a:e8:37:1a:27:ef:9b:60:ae:ad:32:
b6:fa:e6:c2:14:a8:02:06:4a:fe:71:34:4c:40:28:
e3:ba:54:f8:de:65:30:68:f2:24:3d:50:af:10:41:
47:13:ba:f3:b0:b4:72:97:a3:f3:e6:85:ce:79:ef:
ae:b8:1f:80:7f:e4:ed:c5:5d:0a:65:75:6f:f2:b0:
53:05:48:af:a7:1b:c7:7c:41:1d:18:b4:d2:b3:54:
aa:c7:f6:7b:51:80:0f:b6:b1:8f:da:3a:fe:f9:1c:
0f:16:09:aa:15:0d:98:bf:87:25:7e:cf:10:c7:6c:
86:31:f5:51:6f:68:62:ff:3a:da:76:60:03:0c:bd:
41:4d:4d:5a:4f:73:08:0f:76:84:39:c9:74:50:8e:
f2:7e:62:ed:4d:ce:97:9a:e5:e6:a7:7d:03:31:60:
f2:4b:3f:1b:15:05:e2:0b:04:05:21:66:a9:c5:dc:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:31:72:2B:0B:60:0E:CD:95:ED:1E:20:7A:E6:14:7D:B8:53:F1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:9040::/48
Signature Algorithm: sha256WithRSAEncryption
7f:2a:af:8d:ed:9d:58:fe:61:0d:7d:9b:8a:57:d2:cc:73:5e:
f5:09:48:e9:54:1f:0f:3e:4e:32:db:08:70:29:57:c4:95:07:
bf:91:5d:1b:de:37:d0:a2:a4:e2:20:4c:c5:2d:8f:cb:ff:3d:
8d:bf:71:f9:68:52:9c:df:20:10:ef:14:f0:c0:ea:32:0e:67:
0e:45:03:b8:26:01:21:5c:0d:8e:2d:69:38:59:9f:b2:fc:e7:
72:04:94:72:86:1f:25:ce:1a:28:16:87:3d:ee:41:55:a8:0b:
4e:49:b3:db:89:b5:89:2d:b6:10:6e:ba:22:00:1a:74:24:2e:
56:d2:f5:0a:a2:fa:b8:fc:26:1f:c8:98:84:62:55:68:28:cd:
78:f4:9c:db:f8:bc:04:06:7c:6c:06:b1:6c:05:fb:c1:34:ea:
d0:72:aa:66:dd:7f:e2:28:30:88:d0:00:78:33:56:85:f2:aa:
ed:6a:23:a3:fd:ed:bd:05:03:e1:48:15:4d:97:ac:29:42:b1:
b0:ce:73:47:72:95:a2:ca:74:80:29:36:92:8c:6d:c6:b3:8a:
2a:8b:52:0b:ea:ea:91:6f:3c:4b:b5:b2:48:36:be:52:fb:70:
e7:c1:75:8d:d0:c4:4d:39:e0:bf:4a:12:41:b2:2a:df:43:70:
fa:80:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:16:55 2025 by rpki-client