Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf5404c2-bcbe-4df4-86ce-72ceb067f666.roa
File: bf5404c2-bcbe-4df4-86ce-72ceb067f666.roa (raw, json)
Hash identifier: wuQ5ExDFhX46vyxmqJre/T6WQOajtdLhfkHkQpshNn0=
Subject key identifier: 0A:7F:CD:3A:C6:0D:37:C7:80:2C:AA:8B:D8:14:C3:DA:1F:E0:2C:7C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D179C86FF6EB463149BAF1A779150A42FF698ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf5404c2-bcbe-4df4-86ce-72ceb067f666.roa
Signing time: Tue 21 Oct 2025 13:40:09 +0000
ROA not before: Tue 21 Oct 2025 13:40:09 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:17:9c:86:ff:6e:b4:63:14:9b:af:1a:77:91:50:a4:2f:f6:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:40:09 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=5ffce231f5070f8541602a573c24e0531082b4f1698e8929e22743fd665178ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:28:e8:15:58:f6:24:48:77:13:11:79:e0:
06:16:2a:a6:ef:8e:1c:9f:39:1c:f0:ce:90:65:13:
ab:c5:ea:35:80:a0:98:07:27:1f:f4:0c:ef:0d:4e:
59:14:08:e4:91:a1:84:cc:be:49:bc:2d:03:55:b1:
db:39:f3:5e:53:88:9b:fb:59:1e:fb:c5:99:0e:bf:
55:58:ef:2f:60:46:09:24:57:f3:d2:b3:d3:8e:9e:
d9:81:9d:c0:b4:74:21:b7:ba:3e:c2:e0:71:33:48:
8f:88:02:18:51:c7:16:63:8a:79:db:21:b5:5b:fa:
e1:19:7b:f1:37:da:1a:1e:e7:4d:4b:15:60:3f:6a:
3a:4c:99:48:d5:76:a0:66:9c:fc:2f:39:3c:6f:fa:
8c:9e:d4:e0:01:26:77:5c:6e:e8:18:cd:0b:b3:a3:
df:cf:c1:04:e3:cc:1d:6a:a6:50:33:ce:5d:af:3d:
bf:87:90:2e:98:70:b3:05:3c:27:39:06:c9:7e:b7:
dd:47:93:6a:54:9b:b0:88:ea:8a:a0:e1:21:ae:e3:
64:1d:df:d6:7e:64:fa:22:83:a2:bb:07:74:81:1c:
98:2b:dd:5e:5d:c8:9b:1a:34:2f:89:ba:f5:38:e5:
60:7c:6c:57:26:f0:a1:9f:d5:7f:1b:86:86:f7:d2:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:CD:3A:C6:0D:37:C7:80:2C:AA:8B:D8:14:C3:DA:1F:E0:2C:7C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf5404c2-bcbe-4df4-86ce-72ceb067f666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4020::/48
Signature Algorithm: sha256WithRSAEncryption
02:7c:60:bb:da:b1:94:80:92:6a:d7:77:82:e7:34:98:81:22:
55:36:5e:4d:be:1f:96:17:fe:f9:16:66:f2:20:82:65:19:00:
71:e6:9a:f6:d9:8a:00:3b:98:b1:c8:1b:61:e5:cc:97:07:fd:
ad:e3:8b:1c:d5:cf:1a:df:d0:20:af:81:b8:7b:b0:f6:af:fb:
91:e0:0d:b6:10:c5:df:17:17:06:77:71:8a:97:7b:42:d2:1d:
9f:f2:a4:66:ac:10:07:99:b4:bf:1e:4f:db:56:16:c1:16:69:
dd:40:2b:07:08:c0:af:59:cc:01:85:db:9a:83:b9:3f:a7:90:
ae:f9:45:bc:4a:e3:c2:db:0d:ef:98:5e:92:92:b9:10:23:c8:
96:0d:82:53:97:4c:3b:98:42:5b:c6:ad:d0:f3:9e:47:07:1d:
11:74:9e:ea:d7:47:e1:c0:16:f6:0a:3c:c9:3e:f1:a8:a4:bf:
67:ba:9c:be:e9:84:5e:4e:a2:09:4f:cd:46:41:32:47:be:72:
5b:54:23:d1:d7:eb:ce:bc:49:81:d4:c8:bd:3c:e4:15:ec:51:
17:32:18:e0:64:9e:d7:32:45:f2:ca:84:47:b6:1f:02:99:b9:
b0:23:57:83:b3:b8:ba:a8:72:e1:3b:3c:ad:df:9c:b4:30:cc:
c8:a3:9f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:14:24 2025 by rpki-client