Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
File: dd7649a8-cae4-4d67-90f1-f01144285a2f.roa (raw, json)
Hash identifier: EzaoIHfVIaF1fZ+FJpgM2fiDR0DeYF6SZtKBrAmL1DQ=
Subject key identifier: 70:78:15:E6:F4:CD:D2:CB:DA:E6:A3:0A:3D:02:67:A0:5E:47:E7:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D759446C5F1199B4E76DB32F7A38A1AEE780330
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
Signing time: Mon 01 Sep 2025 19:41:17 +0000
ROA not before: Mon 01 Sep 2025 19:41:17 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:75:94:46:c5:f1:19:9b:4e:76:db:32:f7:a3:8a:1a:ee:78:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:41:17 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=af3241412ae52cae7fce2e21f520ebb516dccda20df788fc079d2def5103c715, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:a7:32:b1:bc:29:67:c0:7d:fd:a1:fa:e5:
16:8d:9d:98:1d:46:06:fb:91:3b:e5:fd:ce:f6:11:
43:95:a7:50:a1:5b:5f:3a:44:7c:1f:73:2b:fb:e3:
85:32:d1:2a:9c:68:1f:d0:a5:18:dc:e4:0c:e7:76:
5e:0d:3a:2a:6d:a2:58:03:e4:91:9b:08:f8:2c:3c:
46:cd:c8:b2:b8:1e:77:c7:8f:e4:55:cd:0b:03:30:
1c:31:ab:32:42:1e:1e:68:2c:7f:c4:83:ca:6e:4d:
3b:e8:5f:ac:06:8f:2c:2d:df:c4:20:bd:6c:b3:22:
c7:a8:18:d2:8d:0d:9f:79:71:3b:5a:95:7b:29:b2:
f7:21:75:eb:20:62:7c:84:48:c5:61:56:31:31:55:
7f:bf:88:72:50:4a:6e:c0:48:76:e9:38:85:e6:04:
d2:19:2c:e4:7f:79:75:0d:7f:3d:f5:90:00:63:03:
55:b6:e5:a5:44:ae:4b:87:09:8f:69:cc:0d:fc:1b:
99:a8:a5:ce:92:c1:08:90:97:92:2f:bb:8d:50:0f:
78:6e:6b:2f:7f:1f:02:45:10:7f:87:e5:b7:5b:33:
8a:ef:b0:03:6b:92:02:94:d5:14:b4:8a:ab:25:ff:
1a:7a:d8:a5:9f:67:71:78:bb:36:a2:42:d1:4a:e9:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:15:E6:F4:CD:D2:CB:DA:E6:A3:0A:3D:02:67:A0:5E:47:E7:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd7649a8-cae4-4d67-90f1-f01144285a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:4040::/48
Signature Algorithm: sha256WithRSAEncryption
86:c0:0e:a3:50:0f:a9:f5:03:f4:58:ff:cd:8d:37:29:82:d9:
01:30:60:62:ee:94:03:d3:6a:ca:6c:e1:47:dc:2e:19:40:e6:
c6:e1:fd:35:25:31:82:50:b1:d0:4b:a6:e8:d4:c3:98:23:d7:
39:9e:df:3c:e1:ee:ae:bb:47:31:21:80:8b:76:7b:1d:2b:21:
ce:0d:f6:fb:23:50:a0:c0:c1:ba:2f:f4:af:dd:d0:62:fb:e7:
97:23:7d:c4:36:6b:fc:e7:a7:9c:6e:48:56:32:ca:53:99:69:
da:5f:7d:b9:88:a6:a9:db:f0:a7:27:f1:fa:00:c1:ea:fc:16:
c2:f6:d0:e5:3f:6d:c6:47:bb:a8:92:5e:99:a4:06:2a:37:53:
87:1b:3c:2d:f6:3e:62:a3:af:8a:b2:86:0d:71:0c:e1:e2:2d:
da:71:d9:55:18:c1:0d:ce:20:0f:0d:58:dd:c4:8d:42:3c:2e:
27:0c:96:52:c7:bf:4c:30:fb:05:69:4f:3d:33:d3:43:e0:11:
34:8f:03:d5:25:03:13:6f:0d:f8:b6:32:c4:24:bf:0d:54:a4:
32:6e:b8:ab:22:d2:2b:a7:94:4e:e3:17:2f:21:12:c8:49:c7:
79:e5:98:b9:0d:ae:46:d9:21:42:fc:94:67:a6:b5:e2:4b:08:
ae:ba:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:07:08 2025 by rpki-client