Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
File: d3564159-9d8d-43eb-bf55-66a4445d2727.roa (raw, json)
Hash identifier: WhmIIDb5I1IyfmNe7qq+RZhy7Zdioeccw8fnCBiH818=
Subject key identifier: C1:CD:13:2B:2A:92:A5:E7:9C:AF:19:D5:5C:E9:24:F5:42:A2:52:B9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 23C0BACAC7269B4D030E81C8717648975F92E4BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
Signing time: Mon 01 Sep 2025 20:50:08 +0000
ROA not before: Mon 01 Sep 2025 20:50:08 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c0:ba:ca:c7:26:9b:4d:03:0e:81:c8:71:76:48:97:5f:92:e4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:50:08 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=3640ca0c0ffc61b61f4840a84492e0f0e7b204524e7c906dd576b172f046d555, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:cf:f8:8f:35:6a:e2:b2:5f:1a:5e:7f:a0:
47:cd:0b:ab:83:59:85:f4:0b:61:f8:5d:4f:1e:81:
00:35:ee:bc:ac:26:ae:4f:1d:32:19:46:6e:3f:44:
9a:c5:30:24:67:d4:32:ad:5e:8e:6e:59:34:85:e6:
41:45:e4:f4:f4:b3:15:80:31:79:35:85:c8:22:5a:
fd:27:e2:5c:6f:86:65:d8:18:54:72:60:12:8c:09:
86:29:8e:f0:8d:9f:79:21:7a:3f:e5:dd:a2:e7:54:
e2:7a:f7:42:c9:01:c7:d9:f3:f2:22:ca:67:a1:c9:
60:17:c9:b1:5e:23:ca:28:96:0c:ea:21:ee:bf:b3:
7c:cb:a4:cd:4b:4f:f5:84:a9:f4:e8:b5:48:db:8f:
7f:9a:e3:ac:45:24:8e:84:2b:2a:a5:a3:b2:6b:83:
32:dd:16:6d:dc:a3:44:2f:4a:a5:3b:e9:28:eb:6f:
d1:19:b9:18:52:c0:54:9e:56:5b:e3:e4:76:d0:00:
e1:97:92:d8:15:39:04:30:ea:a3:6a:69:24:2a:5b:
8c:9e:78:5a:6e:80:53:77:63:f0:19:5a:1a:7e:73:
f6:86:7b:e9:7c:5b:26:e2:01:2a:ee:66:da:bd:cf:
01:48:1b:80:45:02:a8:bb:7a:be:71:20:f8:fa:b7:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CD:13:2B:2A:92:A5:E7:9C:AF:19:D5:5C:E9:24:F5:42:A2:52:B9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:b000::/40
Signature Algorithm: sha256WithRSAEncryption
3d:18:cc:12:b0:83:90:58:97:47:fb:bf:9b:2c:0e:fb:6a:d3:
fa:3b:28:c2:c8:7c:d0:fa:7e:03:01:a9:83:d6:65:de:4f:5a:
07:78:b0:7a:90:41:46:a3:c2:82:7f:7b:7a:e0:e1:aa:46:40:
4c:e3:6b:bd:a7:50:e8:34:09:90:eb:1c:fe:50:61:7e:50:12:
8a:a9:cb:3a:41:ef:cb:8c:cc:ba:ce:ff:02:e1:71:88:21:84:
30:7e:ae:ab:0f:8e:6f:09:54:1f:73:2e:d1:34:7b:99:da:6d:
ce:81:83:fb:aa:e1:4a:62:0c:45:06:88:c1:77:7d:cc:e9:85:
11:53:ae:51:58:9b:14:ab:9a:7d:5f:1a:72:45:0f:bd:65:d5:
b7:8b:1e:c9:6c:3c:bc:b3:22:2a:be:08:0d:a0:c2:62:59:c1:
4d:8f:72:9c:b7:62:88:4b:18:26:84:e3:53:8f:69:68:95:99:
26:e0:4d:a8:67:6d:ae:93:43:0c:d9:e3:4f:e1:87:10:3b:59:
02:14:42:75:29:12:3f:d1:60:05:e1:09:86:86:5e:44:89:57:
99:96:ab:95:12:19:79:6e:be:54:53:e5:df:7b:7e:78:30:e9:
e9:49:4d:de:86:e0:76:eb:44:62:73:fe:31:9b:15:bb:68:84:
a2:dc:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:17 2025 by rpki-client