Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
File: da4dde97-2ca6-497d-9086-e0957352d3a4.roa (raw, json)
Hash identifier: 31OI/N1ofEcoiDzYwfdwl912a33tovMyTzNB+fW7yHE=
Subject key identifier: F9:84:45:BE:4A:4B:2C:81:21:25:0D:3E:78:98:B6:DD:85:F3:9B:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1EF6829F71F3C523A692054F198CC41247FDF6C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
Signing time: Mon 01 Sep 2025 21:00:18 +0000
ROA not before: Mon 01 Sep 2025 21:00:18 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f6:82:9f:71:f3:c5:23:a6:92:05:4f:19:8c:c4:12:47:fd:f6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:00:18 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=2337fdedb27ba4fd854fe684f4e35d616c52b8c31beb40eda7e51bba868bbee5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:af:61:5c:49:e8:31:ec:eb:d5:81:09:5d:
0e:d5:62:b6:82:d3:eb:ca:27:77:46:3c:d3:94:b5:
1a:84:f4:73:c6:d5:86:04:ee:24:ad:cf:e1:7d:50:
31:6e:3c:9d:cd:3c:1a:2f:ba:5b:28:7a:82:db:76:
48:36:2b:b2:28:33:cc:a3:e9:5c:5c:90:ae:33:87:
e3:8e:44:a8:d2:9e:56:4b:4d:92:67:9b:62:c3:75:
94:82:6a:65:62:bb:7e:34:8e:80:3f:3d:b3:d4:eb:
ed:02:d2:1b:8e:c3:39:ec:18:f7:ac:2e:d6:36:19:
01:80:18:7a:0d:17:7b:ee:49:ea:8d:8b:e0:fa:00:
d7:b8:51:43:c0:b7:4e:56:4c:5a:b2:eb:07:2b:fb:
3e:cd:e6:51:ca:4d:05:4a:4c:be:c0:21:bc:9e:35:
a4:23:15:7e:12:e4:46:69:83:39:40:95:7f:f7:92:
b5:b3:e1:a3:26:ca:cd:a9:dc:bf:50:76:94:3d:44:
a4:22:ed:01:92:9d:76:c7:ee:39:ab:10:a3:23:da:
f4:53:5c:ed:bc:c0:67:71:a4:4f:7c:3b:68:91:d0:
1c:44:0b:7d:c0:51:33:a9:90:62:a0:82:68:5f:78:
ce:b6:f1:bf:51:9d:9b:40:4b:16:c6:40:25:65:a1:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:45:BE:4A:4B:2C:81:21:25:0D:3E:78:98:B6:DD:85:F3:9B:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da4dde97-2ca6-497d-9086-e0957352d3a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8000::/40
Signature Algorithm: sha256WithRSAEncryption
77:c1:2c:67:ee:b7:e3:b9:e6:77:a8:93:2f:b8:9e:a7:4b:e6:
4d:fe:a9:2a:78:cc:af:60:eb:4f:60:95:01:b7:1e:0c:87:27:
ac:2d:b9:81:17:d1:50:4c:dd:b9:9a:e2:33:84:20:94:f9:bb:
10:a2:c9:70:43:2d:d6:e1:51:03:b0:40:24:a5:3a:30:94:94:
f3:60:a5:9e:ff:f0:47:40:91:db:d9:ba:52:c8:bd:b1:f3:23:
2b:bc:b7:13:fc:29:28:fc:57:4d:54:42:b7:1a:31:90:a4:51:
f1:ee:ec:ae:41:a8:71:c3:0b:f4:48:b7:31:0d:8f:79:b8:54:
76:b3:cc:cb:53:5c:7b:18:3d:35:f9:ad:8d:f7:42:3c:48:f3:
fc:18:c1:fd:bf:a4:8c:32:12:f1:19:d5:e2:88:a9:30:0a:ba:
2e:6b:19:4e:06:98:1e:fc:1a:64:56:87:66:90:d6:6a:f7:80:
07:1e:f7:1e:ca:0d:e0:ee:56:25:a4:83:78:53:42:27:ff:0b:
9b:a2:ad:67:78:51:2a:11:07:4c:36:b4:03:fc:d7:31:8c:b1:
51:b2:df:20:90:ff:81:33:b4:06:81:6c:c0:3d:9f:37:04:77:
57:31:9b:1f:fa:a7:33:b2:e9:b7:26:02:17:dd:33:1a:11:3a:
d7:b5:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:26 2025 by rpki-client