Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa
File: c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa (raw, json)
Hash identifier: 0F8cv/JY2GZYj/Kpx2AGvu/pHPq0FMTr+aBoPdcDD40=
Subject key identifier: 6C:4A:48:8B:23:A4:4B:C5:26:86:DF:44:03:D9:E8:89:AC:CF:89:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6307094BA9E67ED777B414E9F3AC93871B61590E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa
Signing time: Mon 01 Sep 2025 21:11:10 +0000
ROA not before: Mon 01 Sep 2025 21:11:10 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:07:09:4b:a9:e6:7e:d7:77:b4:14:e9:f3:ac:93:87:1b:61:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:11:10 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=7ccfd12775439cb25f1a89bab4e3b12068a1b17b53aeee62489050bfa7058026, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:04:0b:c8:e2:40:2a:fc:c0:85:34:9e:8e:
b9:08:9d:f3:56:fb:30:85:fc:ed:25:35:a7:d7:db:
ee:1e:6c:dd:e0:0e:e6:32:3c:52:08:8c:28:38:53:
dd:40:cd:2e:1b:8a:ec:1a:37:ed:dd:51:1d:43:92:
97:01:d4:52:e3:95:58:87:30:dd:f9:01:a0:cc:b6:
4b:a3:8c:d3:e9:54:62:a3:06:8f:31:56:b9:3e:5c:
f4:b5:73:81:aa:fe:ed:52:6e:6a:3a:4d:4d:46:fe:
13:ef:e7:a6:a4:ee:8e:67:a0:05:90:a1:27:dd:79:
e9:bf:b5:64:a7:32:22:ee:f4:b9:25:d6:c9:82:f4:
b6:69:be:6a:f0:0f:f9:5a:8d:de:32:65:95:e5:e5:
44:9a:f4:47:c8:d6:af:f0:35:8b:88:59:ab:04:dc:
d1:8c:80:c1:37:35:c0:aa:68:57:a9:81:1c:48:ad:
2d:17:e1:23:90:2d:41:6d:97:07:4f:89:df:a0:59:
2a:0c:91:d3:1e:cc:a5:67:5b:ca:21:fc:a1:9f:e1:
a0:51:c2:22:b3:4a:17:de:77:cf:e2:ed:9f:0d:ea:
47:3f:46:ff:0f:a7:2c:8c:77:fa:d4:03:cf:15:c0:
f5:e6:58:17:4a:17:f2:96:61:ae:9a:22:91:62:01:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4A:48:8B:23:A4:4B:C5:26:86:DF:44:03:D9:E8:89:AC:CF:89:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6ce96a4-eb6b-4bed-b15b-b1e3cdcac418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/38
Signature Algorithm: sha256WithRSAEncryption
42:ae:c7:7b:8e:45:15:73:22:68:69:e5:c9:9a:7b:08:69:e6:
8d:33:8b:95:bc:db:b1:92:08:94:bc:17:a8:43:32:c9:e0:90:
ab:8c:b8:d7:40:eb:4e:09:b1:b1:ff:00:99:72:10:37:92:d8:
1e:b4:c6:1b:31:b1:a5:ac:f4:0e:09:7b:bf:30:fc:b6:64:af:
28:68:6d:01:da:57:da:a1:29:ac:09:0a:93:70:09:ed:c8:af:
be:26:9b:f2:62:ab:33:4d:c7:87:fe:f6:80:d0:80:bf:2f:70:
18:6a:43:fe:ff:d4:08:0c:a1:37:67:54:55:4f:fc:aa:fd:6e:
5b:ec:dc:6f:8e:21:7c:cf:a0:19:0f:be:31:fb:39:c9:72:98:
36:08:a7:43:e9:80:e2:9e:2b:92:91:2f:e2:ab:7d:76:ba:d6:
3b:41:db:68:18:f0:50:79:7f:bd:d4:13:b0:2e:24:c6:71:23:
31:74:3f:3a:6b:99:3d:9a:93:06:c0:7f:4f:2a:66:a6:a7:4c:
23:ff:e3:cc:5b:43:f6:9c:52:48:ae:38:02:26:14:45:fc:6f:
71:90:e5:ed:b1:2a:70:5f:b4:b9:c2:6a:31:13:4d:1c:63:c8:
3a:dd:a3:4b:6b:d7:34:df:5f:ce:ca:a1:6c:b2:ea:d8:89:0c:
0c:97:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:26 2025 by rpki-client