Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa
File: b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa (raw, json)
Hash identifier: 5CRhrc/7xyKzLuSj6zjBWADHKXyymLLAzEL0Z8ZN/1w=
Subject key identifier: 90:55:1F:D3:37:1E:3E:DE:11:CB:F5:36:00:1C:E1:A5:4A:71:2A:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3177D2F06225FFF9EE083366DDE096CF263423C2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa
Signing time: Mon 01 Sep 2025 21:10:17 +0000
ROA not before: Mon 01 Sep 2025 21:10:17 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:77:d2:f0:62:25:ff:f9:ee:08:33:66:dd:e0:96:cf:26:34:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:10:17 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=596a20e0ee56f2d515a820793a51d187580c6fa489245d68e80361889b3f7ec9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:3a:51:d4:86:87:13:4f:c7:5e:0e:4c:d8:
31:0b:f9:c4:ce:c2:3a:9e:01:fa:b1:52:e8:75:6a:
ec:38:5e:e2:78:cc:28:63:c5:ab:1c:c2:ea:ff:fc:
5f:67:77:b1:df:c1:cf:ed:b1:35:2f:a8:68:6c:3a:
f7:09:75:a7:1c:8f:76:bb:c9:33:84:82:3f:b7:ea:
f4:78:38:37:e2:35:69:13:ff:19:69:16:b3:08:dd:
72:d9:07:3b:7b:48:77:c6:fa:86:96:68:a1:da:46:
9f:1c:76:94:db:f3:29:c7:a8:09:59:16:05:3e:8e:
3f:8a:13:ee:5e:be:49:5f:cc:bc:68:c1:55:bf:17:
53:2f:fa:13:0a:e5:99:29:69:95:30:c2:93:90:d0:
70:e7:4d:7c:19:d5:b8:34:7f:19:a7:1c:05:37:a4:
5b:7f:67:33:2e:2e:2d:6e:cc:76:dd:00:60:dc:8a:
b7:07:0e:1c:f4:04:e7:59:dc:1f:f7:f8:bd:aa:a6:
e1:c2:a9:c3:88:4f:24:2b:3f:60:89:f8:27:8f:16:
5b:70:c3:aa:31:5f:90:27:6a:2f:e3:d5:2f:38:4e:
0f:5c:3d:c3:06:c6:e0:ec:61:de:28:09:cd:41:fb:
c5:06:fd:c6:10:1d:76:80:10:09:65:b8:ca:3d:77:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:55:1F:D3:37:1E:3E:DE:11:CB:F5:36:00:1C:E1:A5:4A:71:2A:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b72a9540-51ef-4dcc-a5e2-2417249a1af3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012:400::/38
Signature Algorithm: sha256WithRSAEncryption
11:42:16:15:c3:83:e8:d8:a7:d4:d1:a8:3e:be:29:83:c7:63:
fd:12:4d:f2:e3:be:dc:7c:02:24:4b:2b:65:2f:b8:53:06:28:
22:67:4f:7a:20:c7:38:3b:dd:1d:86:f4:ff:ca:89:62:26:13:
c1:3f:8a:bc:76:cf:b3:29:eb:69:e6:bc:5d:ee:fa:53:2b:49:
d4:72:d0:bc:2b:66:14:9d:ec:3b:48:70:ab:75:43:2d:f3:cd:
d0:7e:37:85:d6:e0:41:82:3d:a5:52:45:cb:d3:58:88:83:2a:
a8:5e:c1:7a:bf:c3:b2:63:fc:35:7d:bf:55:fc:63:dd:69:8f:
fd:ef:54:7a:c1:3b:8b:3d:c2:b0:88:0d:e0:e5:ac:1c:f3:4d:
58:c8:73:be:92:97:58:71:e5:24:74:6b:73:02:df:18:bc:a5:
68:32:09:a9:1a:3c:ea:09:e3:af:c5:d3:16:0b:a0:e0:e2:90:
c5:c0:4e:19:cc:94:41:76:f5:db:53:09:43:ad:80:53:31:f6:
29:f8:12:01:46:c3:54:6a:bf:0d:60:fc:22:60:53:95:32:fc:
c2:c2:7c:f7:b8:61:e2:27:73:93:b6:fb:97:86:c8:02:cf:da:
7e:fd:29:fa:d5:b6:f5:67:c4:02:ca:38:f0:41:7a:30:b5:a7:
85:38:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:15 2025 by rpki-client