Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json)
Hash identifier: AvmeZJG3QSmsPll2fmga1F/vN8XcuhsdzZK04I0sDok=
Subject key identifier: E7:68:4E:00:CD:32:2F:CA:24:A3:DB:C6:F0:C0:49:28:E9:FB:FF:0E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3B2A5111E27EFB0DD47EF4F991AD2680138711CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
Signing time: Fri 26 Sep 2025 18:40:34 +0000
ROA not before: Fri 26 Sep 2025 18:40:34 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:2a:51:11:e2:7e:fb:0d:d4:7e:f4:f9:91:ad:26:80:13:87:11:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 26 18:40:34 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=1b565e436e28510becc7665606f4e5af1c43ee60269443f63373ccbc7a0579b3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:8d:85:31:7a:a4:34:22:71:a3:37:4b:68:
df:f3:3f:59:9a:d9:08:f0:0a:c8:83:7c:34:34:67:
04:74:a9:a0:23:9a:06:75:0d:2d:63:a8:09:7a:98:
f1:b9:e7:e1:57:dc:aa:6b:d7:5c:37:b0:25:c6:4e:
cf:5f:4a:f9:ec:4b:5c:f1:c9:4f:1b:3d:48:17:ad:
7c:99:7f:7c:0d:95:6b:9b:3a:8d:ae:1f:9b:1b:70:
58:cd:a4:c0:c8:eb:f6:16:2d:82:8e:26:78:55:cf:
66:b7:25:66:4d:45:59:5d:37:a6:a3:06:b7:4e:07:
37:b6:5c:68:95:12:e5:9b:99:fd:49:ae:b3:21:25:
31:3e:f3:d7:d8:bf:60:e2:24:69:22:ef:b4:41:60:
3e:91:9f:6c:ea:97:08:c8:c1:be:41:92:6d:c7:21:
8d:38:dc:1c:cb:8b:0f:05:f1:ef:f7:8c:03:8b:7f:
af:4d:12:09:54:6d:8f:c5:cc:de:94:35:d4:97:f8:
dd:55:57:6c:f8:3a:03:47:ed:06:93:9d:37:ab:d9:
41:9f:a6:76:23:3e:fa:f4:60:2b:51:ed:e2:fe:2d:
7e:ba:74:ed:3d:2d:0f:f4:41:54:91:98:56:c0:4b:
f8:23:c6:51:57:4d:3f:9c:0f:18:6a:0c:e6:5f:3e:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:68:4E:00:CD:32:2F:CA:24:A3:DB:C6:F0:C0:49:28:E9:FB:FF:0E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
50:29:52:e5:4b:d3:c5:1b:fa:ac:59:24:13:bf:8c:00:cb:16:
27:ae:e6:39:dc:53:70:58:ae:4f:d8:7c:0d:69:7d:75:4b:40:
3f:b6:18:bd:d7:43:ab:b7:b7:d4:c2:9a:2e:b8:1e:b1:b4:a3:
dc:d8:6d:09:0d:f8:ec:a1:6a:e4:bc:98:d5:b8:f6:c1:f1:3f:
a5:01:5a:de:2a:9f:a5:9c:ea:fd:0c:2e:15:05:e7:4e:58:a5:
84:03:44:ab:9f:34:3c:f6:af:a9:4c:4a:0e:57:d0:c0:7d:88:
84:ba:d9:9c:be:53:b0:f2:4c:de:0d:a3:bf:b8:c6:b8:2e:0a:
6b:0a:b9:25:11:0c:4e:e6:f4:c0:16:19:ef:15:8a:bc:fe:1e:
c6:0f:e1:80:84:31:95:6b:f9:69:79:9d:3c:7a:e9:99:37:40:
ec:46:42:b7:78:64:84:68:34:bc:d5:e2:c0:7b:65:93:c0:06:
0c:cb:05:41:45:4d:87:8b:b4:db:51:2e:53:dd:63:a1:ae:12:
cf:19:3e:f5:e6:11:d8:c4:f3:6f:89:bd:2b:ae:0b:3f:5d:34:
8e:a9:3d:d6:0a:a7:dd:b5:59:39:7f:ea:4c:fc:8b:ab:cb:d9:
a2:2e:90:82:1b:02:91:64:c1:a1:0a:5f:3b:20:8e:f7:ed:df:
84:2c:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:15 2025 by rpki-client