Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
File: da4dde97-2ca6-497d-9086-e0957352d3a4.roa (raw, json)
Hash identifier: xWG9P1fCdItfTzid6GcHZUCu24jlx8W9JjucgSi4UaM=
Subject key identifier: BC:36:C6:58:4A:4A:F5:3F:61:C9:F3:4E:8F:4E:5B:56:0B:E8:A0:0A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E09A9B7B47230F48358888BCDD5A5B795DCE94E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
Signing time: Tue 21 Oct 2025 13:10:10 +0000
ROA not before: Tue 21 Oct 2025 13:10:10 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:09:a9:b7:b4:72:30:f4:83:58:88:8b:cd:d5:a5:b7:95:dc:e9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 21 13:10:10 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=c5f10d994899fa2dbf34e5470237343971dd8a02fd2f27517f1950828bf8b41b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:5d:c2:90:8f:dc:d9:19:8c:a4:5b:14:57:
5d:e8:8d:7b:b0:a2:aa:37:f0:4e:a8:2e:16:03:19:
6e:28:cd:21:52:54:61:da:46:ac:c3:46:4d:52:34:
fd:3a:ae:29:94:4f:44:21:e0:0a:57:73:82:8a:ea:
dd:cc:a0:75:51:82:ce:2a:b0:30:96:03:41:ce:39:
80:15:d0:2e:00:70:2d:cb:96:c1:4c:73:0b:07:61:
cb:40:8a:ec:62:a8:3c:7f:5c:dc:8e:97:cf:c5:2e:
a0:bc:32:ec:3c:6b:3a:0f:c2:4d:6c:89:e1:68:4c:
db:73:18:3e:3a:ab:bd:6f:b5:82:67:c3:c4:5e:0f:
b0:89:f8:4a:cf:f5:9b:5a:c3:6a:f7:c0:33:1a:10:
45:47:3f:c8:b5:df:5b:72:fc:f5:9c:f5:68:64:fb:
22:54:af:0a:32:e1:3c:62:f9:3b:69:50:96:01:3c:
5c:27:bb:41:ed:ac:9f:94:45:cb:cb:53:99:8e:e1:
a0:e0:fb:43:11:4f:0b:c0:0b:45:57:52:a5:03:29:
c1:6a:3e:f3:2c:5a:15:c5:63:cb:7e:23:3c:6b:93:
d9:00:4a:b2:a4:fb:f5:cd:93:1d:89:67:03:90:5e:
0b:91:d5:d1:78:a9:af:62:8e:0a:6b:15:a2:b4:c7:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:C6:58:4A:4A:F5:3F:61:C9:F3:4E:8F:4E:5B:56:0B:E8:A0:0A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8000::/40
Signature Algorithm: sha256WithRSAEncryption
a5:10:24:c0:65:71:b7:ce:6e:09:0d:2c:2f:31:33:37:f4:af:
c6:c0:1d:0e:e7:7f:e6:95:7d:b4:12:19:62:a6:fc:90:6e:36:
66:ce:c2:55:75:a6:48:5a:b7:73:09:0a:48:83:73:a5:a7:00:
0a:93:b7:30:41:f7:ab:d2:f4:3f:eb:f7:93:7e:0e:74:34:4b:
05:40:bb:a0:f6:31:62:b4:49:53:a0:c0:f0:74:d0:9a:cd:2a:
92:97:26:68:a2:98:7b:ff:96:0b:43:70:e1:f8:49:b8:31:c0:
25:03:21:29:4a:0c:41:0e:af:e7:40:2f:07:8c:b0:ec:01:ef:
2f:60:a8:0d:e2:cd:f0:dc:fb:57:5e:84:4e:2b:86:ec:35:9b:
ba:89:50:2d:8b:04:48:b9:45:ea:43:b4:87:aa:2a:e7:cf:71:
f4:10:23:80:c8:5f:0f:12:ad:33:5f:bc:0a:a7:20:b6:42:76:
02:64:f3:19:16:49:11:ef:cf:92:a6:37:83:a9:8c:bd:1f:44:
d7:78:98:d4:d2:57:ee:c8:1a:57:dc:6e:26:cd:61:c6:b8:86:
fe:26:ae:92:81:b9:1b:3f:d8:59:88:03:31:de:99:18:f6:52:
52:3b:01:25:28:e8:78:ed:e0:85:e2:23:12:ae:42:fc:bc:bd:
91:61:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:11 2025 by rpki-client