Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
File: b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa (raw, json)
Hash identifier: RjU+1hudvMPTFSAehbVfCQuWMgEhlzjRPIKe1Azv0o4=
Subject key identifier: EE:BE:FA:FB:D9:CB:57:E0:3C:A0:6B:31:B0:EC:7E:2C:13:2A:12:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CF6D519214066626D79808411B0D5245D814F71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
Signing time: Mon 01 Sep 2025 20:10:58 +0000
ROA not before: Mon 01 Sep 2025 20:10:58 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f6:d5:19:21:40:66:62:6d:79:80:84:11:b0:d5:24:5d:81:4f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:10:58 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=aed19339c5f60dffcb2c20d0e2df119bc5fa41fdc5cf401b97db260cb18c185c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2d:8f:6a:c6:86:77:36:00:29:e0:0a:66:4e:
b4:a1:13:01:a8:09:34:1a:e6:14:47:15:8e:26:b7:
4a:b4:d6:57:8d:d0:e4:f2:ff:5f:2a:a5:f6:20:18:
2a:4f:58:1c:d5:b1:d1:6c:07:db:16:3b:31:61:cc:
c2:80:d8:a3:36:23:6c:f8:51:a3:43:0f:cf:ce:bf:
60:89:7d:e4:bf:1c:e3:fb:b0:ab:61:e0:6c:44:8f:
fc:16:46:82:a5:3d:34:a2:d6:8d:31:d1:45:8e:68:
61:4b:d6:0a:63:90:11:68:d3:e0:8a:ea:e0:06:5b:
28:61:9a:d0:76:27:50:41:14:2c:f9:4c:ab:0f:e6:
fc:ff:c2:43:8a:c9:b1:84:c9:41:19:29:d5:0d:9c:
c1:b8:73:8c:ce:24:67:48:c9:71:a3:76:70:86:05:
73:eb:ba:1c:43:a4:3f:07:86:cb:57:95:8d:63:1b:
61:cc:9d:d7:11:0e:43:4e:c1:b6:3a:84:bc:e3:9e:
c2:de:ff:60:2e:35:67:cb:76:ef:56:32:ae:d0:13:
bc:f9:02:d3:71:2f:3c:fa:3c:49:bc:6f:4c:a2:fa:
92:50:3d:9b:07:7f:f4:d8:da:fe:53:6c:87:73:7f:
29:14:20:b7:d6:a4:e2:99:55:96:c3:05:0c:f8:03:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BE:FA:FB:D9:CB:57:E0:3C:A0:6B:31:B0:EC:7E:2C:13:2A:12:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ea62d6-dce3-4c74-b931-0cca87ccadea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c080::/48
Signature Algorithm: sha256WithRSAEncryption
7b:cc:78:b2:93:cf:f6:62:7c:c1:92:e2:72:28:65:c6:fe:f2:
26:4b:48:fb:29:b0:55:f0:a6:55:5a:59:dc:b7:69:96:86:fc:
f7:71:04:3a:f5:a9:b3:7e:f7:70:2f:20:e5:a8:53:bc:9d:be:
8e:38:0b:d3:51:a9:01:83:20:10:48:02:d6:e9:46:08:d8:25:
3a:66:0c:cd:f8:cf:3b:97:81:56:41:f9:66:e1:9c:8c:61:97:
37:21:59:84:50:13:24:da:b2:2f:f7:d2:d2:18:d4:2f:cb:d2:
74:c7:75:9b:c6:e0:eb:ee:ff:58:a3:32:97:6a:22:f9:97:0a:
01:32:b2:1a:8b:1b:5e:43:9c:e9:53:dc:30:22:8f:68:6d:40:
d9:12:10:1c:e6:19:3a:c6:8e:a8:6f:88:00:d1:09:19:44:37:
53:6f:57:94:81:54:1b:9f:88:04:cc:b8:41:4c:59:bf:56:e1:
e2:96:b5:00:74:d9:1c:fd:d3:92:cf:08:b0:12:70:2f:72:84:
fd:f9:13:00:cc:ea:20:ed:7c:16:7b:52:2f:5a:bb:f3:18:57:
39:3a:aa:7a:30:17:61:1c:ba:08:3c:49:15:da:25:c7:fe:b0:
8e:3d:b7:04:83:e4:3c:ea:9d:4f:13:e2:2a:92:ba:0a:f6:7a:
c5:df:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:04 2025 by rpki-client