Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
File: d7b89972-677a-470e-88ff-f95e3c9a9443.roa (raw, json)
Hash identifier: LeIYjaQLJkftm6oePRbH3TwiMS1+zyyDtLfYY2mSdGA=
Subject key identifier: E5:09:31:D3:66:56:2C:E1:18:C2:D2:D5:BB:B7:79:12:7E:D3:F5:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B2F2A17D66245452FCE0ACA9D00B614F5E28BA9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
Signing time: Mon 01 Sep 2025 20:40:01 +0000
ROA not before: Mon 01 Sep 2025 20:40:01 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06d:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:2f:2a:17:d6:62:45:45:2f:ce:0a:ca:9d:00:b6:14:f5:e2:8b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:40:01 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=6d14d3cd4dc1c99d99bb846f971f016c578ea4106728afb1d2ca7c1ab0b89ec9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:be:e0:fc:3e:77:ab:62:79:58:47:40:95:
43:e3:08:ac:77:c2:33:c7:24:d3:73:63:7f:b5:0f:
21:87:0b:31:e0:67:69:3b:d9:ea:ca:c8:44:1e:93:
f3:af:9a:10:b8:08:3a:95:5b:16:e2:9b:6d:4b:e5:
47:2e:b4:57:5f:92:bd:b6:cb:cd:1e:2f:3f:be:d2:
15:7e:a0:03:d6:d1:2a:bf:2a:7b:fe:ba:74:4a:31:
c4:c5:90:40:87:1c:d0:cb:d5:0c:9a:40:86:6b:e3:
e7:9f:39:d1:bb:54:9f:a6:47:ac:75:18:79:47:0a:
f1:bf:60:41:63:bc:43:40:bc:20:95:ee:01:14:2b:
5b:9f:dd:3d:db:70:69:b3:dc:d2:66:98:63:75:44:
46:19:5c:16:6b:38:47:bb:b0:77:7b:aa:2f:1b:cd:
2d:6f:5a:22:95:40:fa:dc:89:ea:5c:4a:da:82:8c:
da:e0:9b:bf:f1:f3:09:46:4f:eb:d5:56:8d:d7:34:
f9:a0:db:0e:a0:f2:f3:51:aa:0f:fd:41:44:1c:ea:
be:b2:9b:39:0a:bc:56:3d:10:b2:0b:c9:9e:51:6e:
ee:a2:95:ae:75:1c:13:ae:d1:2d:c3:e1:23:22:01:
0b:9e:5a:79:9b:20:28:ec:00:12:0c:96:cc:e9:2e:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:09:31:D3:66:56:2C:E1:18:C2:D2:D5:BB:B7:79:12:7E:D3:F5:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7b89972-677a-470e-88ff-f95e3c9a9443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:800::/40
Signature Algorithm: sha256WithRSAEncryption
20:d9:b4:7d:e3:47:9f:6b:41:84:f6:80:72:62:b4:74:41:d8:
47:57:fe:84:ac:27:33:f8:66:52:58:31:e0:5f:4f:2b:8f:c8:
5b:ec:9d:ec:fe:15:9d:ea:d3:19:11:86:ab:1a:70:77:e4:e3:
cc:01:96:1a:64:76:77:f0:f5:98:5f:a8:7a:62:76:df:a4:d2:
b8:bf:f4:bb:02:1a:95:57:77:12:c9:6e:38:ff:0c:31:91:07:
8f:f4:45:8e:ad:bd:6f:0b:58:a9:0a:46:99:31:f2:cb:16:9e:
e3:fe:f0:f5:43:3c:8c:5d:2c:92:5b:cb:2c:3f:7c:8d:c3:11:
37:7c:a9:b5:74:21:31:d3:61:17:a3:3b:23:d3:e6:c2:6b:cd:
bf:b8:5b:54:f7:1c:0e:16:d0:4b:15:f9:e4:74:ce:c3:82:2e:
ed:f4:2e:bb:b4:d5:44:eb:52:16:65:fb:07:4d:59:e0:d4:e4:
54:7e:76:d4:7a:27:c4:2c:7a:b5:64:1d:27:60:e8:b5:1b:ec:
41:3e:66:28:68:e7:12:4a:54:38:97:f2:1a:94:b6:a0:ee:d5:
ba:e1:bc:63:9c:d7:77:f4:93:30:5f:b3:4c:c5:16:21:40:6a:
f8:f0:54:3e:5d:5b:ab:7d:54:1b:34:9a:1f:0e:f6:b1:56:d4:
66:ca:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:08:15 2025 by rpki-client