Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0dc8f6b9-9b2e-4559-b3e3-b61b0d685e4a.roa
File: 0dc8f6b9-9b2e-4559-b3e3-b61b0d685e4a.roa (raw, json)
Hash identifier: we8ckEtsB56hjUAafB8oYr71YOGDeC/j7aFAXTiDy4I=
Subject key identifier: 9B:7E:BA:92:67:02:20:CD:08:2E:7F:F4:3D:F7:63:20:0F:45:15:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0870732DCE49773DDA2BB6998FE1A885B1E5A1A4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0dc8f6b9-9b2e-4559-b3e3-b61b0d685e4a.roa
Signing time: Mon 06 Oct 2025 18:00:40 +0000
ROA not before: Mon 06 Oct 2025 18:00:40 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:20c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:70:73:2d:ce:49:77:3d:da:2b:b6:99:8f:e1:a8:85:b1:e5:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:00:40 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=a4c4d89d912958ced934eb026589330f080118f749aec2e95ca1265d0a864b8e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:13:80:5d:b6:47:4d:8d:b6:a9:e1:e0:39:
07:80:fa:b4:02:c9:14:68:86:ca:2e:b6:37:5c:10:
80:16:6a:6d:14:e3:45:f3:7c:29:df:66:52:d2:b6:
55:80:4c:15:17:e4:74:eb:80:14:3e:96:9a:60:cf:
5c:93:1c:4a:fe:ef:a7:c5:75:b2:2e:0e:56:84:a0:
aa:5a:ee:53:64:fc:05:67:e0:2a:34:2f:d8:e7:9b:
c0:94:1a:b2:e0:fb:c3:01:0b:a7:2a:dc:eb:bb:9f:
57:b3:10:9c:e2:da:a5:f1:d0:f4:fc:ee:5d:9e:c3:
73:cb:93:97:72:c2:9c:29:82:39:f1:94:ab:af:0d:
7f:f1:9b:1e:37:ee:f1:b6:22:af:ea:d0:71:70:c6:
8c:d8:6b:27:77:ff:95:79:de:86:30:84:7e:20:b7:
e8:e0:15:f6:8f:80:32:58:c2:48:2b:93:4c:82:1b:
11:04:b6:4e:55:8d:ce:97:9c:51:66:9a:a7:4b:3e:
b1:dc:b2:03:54:8b:d6:b3:23:08:ac:21:88:9a:da:
a4:2a:3a:64:05:02:33:0b:ea:0d:bb:74:d8:6e:57:
21:a5:16:fb:4c:40:06:33:c1:b7:14:e7:30:de:a6:
f5:5c:38:f9:52:e5:9e:00:af:62:b3:5d:01:1c:c5:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:BA:92:67:02:20:CD:08:2E:7F:F4:3D:F7:63:20:0F:45:15:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0dc8f6b9-9b2e-4559-b3e3-b61b0d685e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
9d:e0:d8:58:d6:4a:0f:8d:23:9c:66:c5:22:48:e6:cc:b0:e1:
5d:e6:97:55:55:47:31:be:e5:f1:2f:aa:87:54:11:b1:d3:eb:
4b:a6:25:14:54:40:22:1a:c2:1b:97:5e:e8:1f:34:ed:53:7f:
10:f4:08:42:b7:59:49:8e:96:85:92:56:65:49:75:af:a2:b6:
bc:3c:db:1a:cf:1e:7e:69:02:34:64:c1:a7:2d:cd:20:74:e0:
8f:7d:71:3a:3b:7a:0d:2d:40:25:5d:e0:b9:3e:57:08:f9:4a:
c0:a2:94:0a:85:cd:03:8a:c8:b0:d5:46:53:45:62:b7:0b:ba:
3c:fe:56:e9:fc:d2:d0:dd:88:45:5c:1f:83:a8:4b:ab:70:3e:
c4:6a:cf:6c:c5:72:35:c6:e9:38:84:76:a9:03:87:6d:96:e9:
c7:8b:7e:8d:1a:d8:40:7a:72:8a:4d:17:62:76:09:06:8d:82:
58:07:81:53:38:22:7d:51:d1:b5:60:61:d4:eb:bf:30:e4:5a:
87:fa:e3:03:bd:e3:c8:b0:63:18:1d:da:e9:80:37:c2:14:73:
ff:41:4f:1c:05:2e:c3:df:5c:4a:72:06:07:f8:a2:ac:b7:af:
79:30:58:2f:95:cf:96:fa:3e:4a:17:55:a5:46:bb:5d:d1:84:
90:5e:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:18:50 2025 by rpki-client