Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
File: e234d9fb-5639-4264-99c1-35b39c1e56b5.roa (raw, json)
Hash identifier: ZQZx0ppZ0DnDlO10rYcMW/VsJF3C8Yf8MEK8jXCPH4w=
Subject key identifier: DF:DC:A8:2B:00:95:C1:76:32:06:98:DA:71:E5:6E:E9:B4:D7:98:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47BC1C0EA92F7998EB8DE46AE4747030DB3C1969
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
Signing time: Mon 01 Sep 2025 21:00:51 +0000
ROA not before: Mon 01 Sep 2025 21:00:51 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bc:1c:0e:a9:2f:79:98:eb:8d:e4:6a:e4:74:70:30:db:3c:19:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 21:00:51 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=f4a60b0621454fb64cdac773f403f354a8f7bfacda9dde4e86a4de758298129f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:c1:a3:16:3e:03:8a:3e:5e:b9:34:70:a9:
84:91:a5:bd:b5:6d:01:74:d4:2a:b3:8d:37:a2:df:
af:dd:bf:7c:1a:c0:fa:09:02:b8:4e:53:33:06:90:
f4:34:c5:6d:e7:39:77:0b:4d:bd:09:a8:33:59:31:
9e:d3:6e:af:9e:ff:76:62:e6:e6:c3:4d:4d:3f:13:
53:a3:16:3b:7a:c7:ca:04:4f:d4:51:c5:a5:1e:e4:
86:60:c7:6e:58:8c:e4:23:ee:f0:85:14:93:e9:e2:
a5:d8:f8:9d:85:36:32:9d:d0:9a:37:db:88:26:48:
c4:39:8a:1b:bc:02:87:57:51:ca:16:3e:04:e8:55:
8f:db:9a:8b:3b:ca:16:64:d6:4c:16:38:42:68:8d:
82:5f:3c:c2:b7:88:fe:fb:35:26:ee:0e:bf:ae:b9:
15:4b:47:3b:5c:e3:37:ba:23:c0:26:f3:3a:d2:05:
42:fe:b6:b9:dc:79:c2:3e:6d:3a:ca:5e:9d:a0:40:
8e:9e:c0:7c:67:b5:5c:4c:83:ab:4d:1e:3f:9c:c5:
ea:c6:bb:4c:6e:1d:f5:ef:7e:5f:3a:4e:d8:7b:6a:
34:86:1e:43:8d:c9:bf:13:e0:c5:64:ca:ce:f1:d0:
e7:98:5c:58:39:e3:f2:4a:d7:14:28:60:0e:87:3c:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DC:A8:2B:00:95:C1:76:32:06:98:DA:71:E5:6E:E9:B4:D7:98:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e234d9fb-5639-4264-99c1-35b39c1e56b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
35:86:3c:f0:8b:19:ba:0d:31:3e:54:03:f8:f4:c4:cf:bf:93:
c7:6a:89:73:7f:8a:3f:3e:1d:c8:08:bf:f3:11:7a:9f:d8:19:
dc:c0:2d:d2:f0:d1:0b:a7:74:ef:44:e6:2b:41:f7:4d:4a:95:
08:4b:2b:a6:cd:26:8a:1a:9a:e3:b8:73:34:29:99:c3:d4:03:
c9:6c:27:ab:a9:29:fa:fa:2c:01:d0:ef:27:34:c2:23:2b:88:
a5:7c:db:ba:b9:37:b1:f4:ed:9b:d0:bc:fa:bb:68:45:78:b1:
50:57:95:32:d1:fc:21:53:f1:d1:39:09:b9:e7:ac:65:42:8b:
65:49:63:3b:71:99:cb:8e:cc:9b:8a:a7:c1:0e:bb:73:7c:8f:
2f:e2:d1:7f:2d:38:dc:7f:d9:ba:2c:4a:7d:6b:2b:a3:03:47:
2e:fb:77:02:63:cd:3c:be:c1:eb:5d:3d:f9:63:63:ed:3b:85:
85:68:df:c0:5b:6c:c2:6b:01:11:ee:4c:90:67:2e:73:44:5c:
16:ed:61:fd:1d:a4:95:4d:52:c6:cf:de:1c:5d:28:41:8a:6b:
bc:be:30:f5:d7:e3:c7:ff:cf:35:cb:9b:d0:9f:a5:89:72:fb:
d3:2b:cf:c8:d5:30:d7:32:5c:7f:05:b0:b6:df:58:f4:3b:cb:
63:90:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:12:45 2025 by rpki-client