Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa
File: cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa (raw, json)
Hash identifier: /tYN3HhrdJmYic15VZ8fMPBsq8pn3sX6pqJ09tJaRzE=
Subject key identifier: 21:9B:D8:99:E4:A3:E6:66:D7:76:6A:BB:5E:7F:BF:C2:4C:07:2E:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B09D6FF4F52D3B28ABEB91B1A5EB6F740A6C824
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa
Signing time: Mon 01 Sep 2025 20:20:15 +0000
ROA not before: Mon 01 Sep 2025 20:20:15 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:09:d6:ff:4f:52:d3:b2:8a:be:b9:1b:1a:5e:b6:f7:40:a6:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:20:15 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=50fd8373efdd5b8e82a547536608010f03b6e492d4bbac6520165bc3793e7250, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:73:2d:cf:83:b8:e1:7c:5e:30:69:b6:08:
ea:0b:47:69:e1:1c:0a:de:28:44:5f:0d:5e:5b:2d:
af:ec:4f:40:96:6b:f1:41:5f:0e:2e:a8:9e:36:3f:
79:dd:b2:8b:b7:d5:b2:66:ba:39:5e:67:d5:70:05:
d6:06:e3:3a:fc:fc:2a:5b:45:0f:87:98:e3:0a:3d:
bb:86:4b:69:a2:4d:35:bf:c7:fd:c5:61:d9:a5:05:
cf:21:4a:99:70:97:91:ad:43:cf:cf:1e:da:ea:13:
e6:0a:e8:b5:12:03:f9:a5:d9:4c:0d:ee:bc:77:a6:
42:ac:01:23:14:10:ab:e9:9c:6f:71:b1:5b:b0:1a:
6f:8c:38:bb:ba:06:d0:68:3b:dc:fa:14:7f:a8:2d:
1b:3b:fd:25:07:8a:04:72:32:ef:be:d1:48:9f:19:
b9:38:5e:70:b1:13:69:53:84:5c:9a:81:6a:03:f7:
e1:ee:5c:6c:a6:8f:ca:9c:96:60:76:1b:74:f4:3d:
20:19:b2:78:da:a0:f1:04:88:3a:b1:ee:af:bb:a5:
40:c8:0d:88:1f:00:f0:90:06:05:88:47:98:46:c5:
0d:36:a7:c0:66:8b:af:d6:36:6b:e5:56:ed:70:80:
f5:53:57:c5:61:85:10:21:95:50:c8:aa:55:ad:62:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:D8:99:E4:A3:E6:66:D7:76:6A:BB:5E:7F:BF:C2:4C:07:2E:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cacad3d9-bfa1-49a8-a9b3-cbac7be9fdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:9000::/40
Signature Algorithm: sha256WithRSAEncryption
ba:11:1c:09:1b:62:0b:e4:15:cd:a6:af:8f:95:c6:00:fa:ad:
c9:29:a0:c3:5a:d5:ec:b1:09:e6:48:bc:98:a0:c7:82:8b:20:
f3:b0:bf:76:c2:73:31:50:1f:fe:ea:05:f4:96:1a:d7:0b:1c:
80:f6:21:73:59:a1:45:85:70:a5:96:c0:a3:b3:2c:4d:18:12:
79:6e:1c:b6:b6:e5:13:55:55:8f:1f:aa:ec:ce:e9:a5:f2:88:
97:3f:8e:f2:12:f3:0c:42:6f:3c:33:17:b9:24:f8:33:a1:05:
7a:11:34:63:6c:c9:cd:18:f6:be:ae:34:6b:1d:11:0f:77:af:
39:c0:59:2d:9b:33:39:d9:dd:75:0f:ca:f8:c9:b9:25:09:ff:
60:82:d2:b7:eb:2e:5c:0e:bc:58:91:74:a8:52:c8:f5:95:78:
0b:af:4e:07:58:dc:e5:0a:02:23:ef:42:e9:76:4c:82:42:ff:
62:de:14:70:42:4d:83:71:36:bb:a0:c9:e8:7c:24:35:8c:96:
4b:ee:bf:4a:c1:03:d7:78:73:92:37:88:67:5a:dc:8a:60:3e:
cd:de:f8:5d:37:f8:cb:fb:cb:0d:03:29:6b:a0:4c:77:02:fd:
69:8e:41:a7:be:d3:3a:39:a0:f3:e7:09:e7:6d:87:d1:cf:42:
67:29:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:06:11 2025 by rpki-client