Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
File: e875eadd-6478-4ac0-8792-06722aa80dd0.roa (raw, json)
Hash identifier: Hyt2FOfCmbPhQuixz6sUYwoAjBU+76Qs5Rr4NUpzZgo=
Subject key identifier: 2B:08:67:DC:10:17:58:73:CF:3D:AD:50:14:A1:C4:90:9C:5B:56:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F2FB3C24C436F038371FC988638B6C326D95250
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
Signing time: Mon 01 Sep 2025 19:51:10 +0000
ROA not before: Mon 01 Sep 2025 19:51:10 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2f:b3:c2:4c:43:6f:03:83:71:fc:98:86:38:b6:c3:26:d9:52:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 19:51:10 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=6762058c59238caa412e917542aa268b6ff95c75121c1ac162d050f326da1e07, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:41:6e:ab:d4:4c:f0:0d:0e:e6:4f:2a:87:
ff:30:a2:7c:04:84:b9:f5:87:68:54:d8:ba:68:71:
3b:7f:b8:3c:6b:09:a2:d6:b7:37:f0:9c:6f:32:e7:
cf:64:7d:61:65:b4:8f:33:e1:5c:c0:2a:04:ec:00:
b6:eb:e8:54:00:6d:43:d6:43:68:8a:6b:8f:ea:5f:
fb:f6:60:4b:ba:52:44:dc:04:4a:65:a7:8b:b8:a1:
bc:3e:fb:9c:92:19:0b:e9:0e:01:b7:fb:47:cb:3a:
29:a5:a0:e5:d8:dd:ef:5a:af:54:4b:f0:05:f6:d3:
cf:f3:2f:94:99:e9:6d:49:ff:0c:bf:f1:85:7e:e5:
9c:a7:b8:a4:fb:ff:f9:0e:ff:b8:43:73:28:5f:aa:
3d:7a:e8:b3:41:00:19:eb:42:b4:9a:2f:8a:95:54:
f9:4d:48:da:8e:65:83:6a:59:1f:12:0a:7f:b5:18:
76:d9:1e:7b:d3:a8:03:cf:0b:b7:4f:13:92:c0:2f:
a5:94:c1:61:66:5e:9d:ae:c9:9a:78:11:70:89:c5:
7e:19:0f:5b:3c:16:6d:59:b8:17:33:c6:03:c5:13:
b2:f8:2f:6d:96:9d:0d:d4:4d:43:00:b3:a3:27:30:
24:f2:6a:be:50:6e:d6:ca:48:65:21:b4:bc:f0:f1:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:08:67:DC:10:17:58:73:CF:3D:AD:50:14:A1:C4:90:9C:5B:56:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e875eadd-6478-4ac0-8792-06722aa80dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
14:94:09:50:69:6f:fb:f7:4f:72:bb:fc:0b:a6:ea:bf:e2:0e:
fb:1a:f8:1c:4f:63:f6:28:e3:d6:a9:2f:26:d9:6a:41:c4:a9:
bd:53:ce:cf:ad:b0:1d:b9:40:81:06:44:d3:f2:c4:57:ea:73:
e2:13:06:eb:3d:43:6e:ee:c3:8b:bb:df:25:3b:51:a3:06:a0:
7c:74:0b:6d:b2:b7:8d:71:63:f7:40:13:66:2d:b6:42:c5:02:
68:ef:2f:02:0c:6a:fe:d2:7a:c0:b7:a8:d2:96:6d:34:40:60:
3a:9b:8b:7b:ef:59:78:f2:8f:84:27:32:91:53:ba:52:a7:f9:
84:49:e5:24:d1:ef:8e:66:21:90:1c:f1:b2:03:52:47:1c:20:
7b:8f:00:5a:c3:b4:3d:23:38:6b:7f:ba:1f:eb:87:97:65:e3:
0e:74:29:da:8e:11:62:6b:2d:bd:f2:24:b0:33:96:3e:95:4c:
b9:59:65:ce:c9:45:d6:be:de:c7:6b:02:ef:16:9e:cd:2c:85:
30:d8:95:83:ae:41:d1:43:c6:01:1d:94:b4:fa:a3:4c:58:88:
c3:55:d3:ff:9c:cb:e3:da:98:0d:e6:15:94:ae:03:59:47:3b:
cb:15:8f:66:a5:1e:53:9d:a4:23:06:ca:f2:95:a6:32:cc:d4:
2f:c9:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:18:28 2025 by rpki-client