Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
File: 0849241f-abaf-4c57-aadb-d881485a0aac.roa (raw, json)
Hash identifier: hp7omdz71JJBFHcK8w/ig0bs6/xFO64Dd6c5zrufE1k=
Subject key identifier: 07:02:BE:8D:60:03:00:C0:D5:DD:23:ED:76:64:7A:B8:EF:E4:30:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 666677F8BA727ABF1CD2DD7E66F3DB9671F2060D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
Signing time: Tue 05 Aug 2025 20:00:07 +0000
ROA not before: Tue 05 Aug 2025 20:00:07 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d012::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:66:77:f8:ba:72:7a:bf:1c:d2:dd:7e:66:f3:db:96:71:f2:06:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:00:07 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=c20ab87fdd25003345bef5da8289f7ea1ff5a43018ee002606cf518102197809, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:7d:fb:00:ed:f7:0a:36:98:c5:e2:93:b8:
5a:aa:7d:11:1f:f9:f3:de:6c:88:03:30:2e:ea:97:
72:8b:82:4d:ed:69:65:a4:bf:b3:40:9f:d7:e8:7e:
66:75:0d:70:ed:74:f1:4f:6b:0f:1e:88:d9:9f:e2:
52:08:67:13:4f:ec:da:eb:1e:8b:3c:c0:d8:64:7e:
f1:f2:dd:af:8b:79:e5:60:2d:36:10:06:43:57:5a:
1a:a8:b1:b5:91:34:31:e1:fa:1b:b7:b4:40:78:97:
61:7d:24:29:59:35:96:53:d5:c6:19:51:5a:72:17:
36:4a:98:b9:ad:c6:cc:06:76:f8:fa:b1:83:8e:c4:
16:df:46:4a:c8:5e:b7:e6:1a:ad:b4:c0:c0:b7:de:
b4:56:cf:57:f1:f3:f0:95:d5:81:4d:a0:8e:b0:90:
bd:56:20:ad:e7:2f:52:6e:ca:c2:3f:69:55:a9:35:
3a:1f:6c:8e:92:e8:eb:74:03:89:28:d4:f8:23:fa:
6c:66:dd:03:2a:ac:b5:52:33:4d:ed:33:dc:e1:a7:
6a:24:4e:ae:26:ff:b9:90:ee:49:36:92:3c:80:f1:
63:fa:1d:b5:09:c0:83:5b:7f:5d:ea:a4:31:d5:61:
b0:96:e9:78:4f:d2:f5:c2:f5:75:9d:9e:6b:f3:d6:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:BE:8D:60:03:00:C0:D5:DD:23:ED:76:64:7A:B8:EF:E4:30:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0849241f-abaf-4c57-aadb-d881485a0aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d012::/38
Signature Algorithm: sha256WithRSAEncryption
1b:92:9e:07:6c:52:07:a9:3b:b9:c1:8a:72:32:ae:4f:d2:7e:
74:93:47:c5:a5:b0:e8:c6:10:67:64:28:fc:80:8f:81:30:f2:
7e:8a:00:c2:45:4c:cd:b7:12:fb:da:7c:fc:5e:26:7f:e4:21:
b9:7c:09:52:47:d8:0e:2d:24:2e:bf:ad:63:6b:b3:8d:6b:a5:
5f:e0:ed:0c:23:6b:1e:2e:99:db:31:25:51:f3:0a:33:64:46:
d8:9f:50:87:8c:f2:3c:0b:05:96:a8:a8:6d:47:f7:63:e1:1a:
99:9a:71:78:3d:01:17:6d:15:d3:0c:6b:79:6c:f3:ad:8c:0f:
15:3f:9a:23:d5:99:f4:31:5b:43:42:08:bd:9e:77:ec:e0:c3:
59:2f:63:bb:80:3e:3e:7c:64:38:57:bd:a6:d2:2e:26:81:ce:
9b:24:b9:12:bc:91:57:d3:3a:1b:82:0e:97:5d:e3:5f:55:f9:
10:2c:ac:81:a8:64:44:b6:cc:f3:5a:ac:29:1f:15:f3:77:b3:
28:60:0f:1c:71:76:c7:b0:9d:28:47:ee:3c:5b:ec:c9:85:08:
75:82:fe:fe:c5:5e:66:3f:87:29:ef:9f:ea:98:e4:15:25:4f:
20:2b:2b:fe:b6:22:f4:b1:01:b8:aa:8b:70:1b:27:42:9d:6c:
a9:f7:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:06 2025 by rpki-client