Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
File: 1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa (raw, json)
Hash identifier: gtnd4KrM6b6FiZNZEXXYYmrRpjoeLLxRhi+U4KSngZo=
Subject key identifier: A4:66:D5:EE:65:63:01:60:9C:D7:F4:09:A0:7C:A1:3B:F9:96:08:E2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4B588DC065FE7E06DCC16520A872C1D6DB0D3A24
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
Signing time: Wed 06 Aug 2025 00:51:16 +0000
ROA not before: Wed 06 Aug 2025 00:51:16 +0000
ROA not after: Wed 10 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:58:8d:c0:65:fe:7e:06:dc:c1:65:20:a8:72:c1:d6:db:0d:3a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 6 00:51:16 2025 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: serialNumber=b4ca9370450683a4025a26f13cc823b8e835fde2263338a0ce16130fd5da1074, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:7f:01:40:a0:de:33:85:24:8b:cb:c5:51:
d0:90:78:78:f5:51:fd:c1:cf:58:e9:0c:48:de:d0:
81:64:44:35:4f:9f:b8:26:0b:34:12:6e:c1:3b:35:
36:83:63:29:8c:b3:a0:df:ab:70:bc:bc:3f:62:1a:
da:24:c2:2d:95:fc:4b:f3:2e:85:67:bf:27:42:f1:
9d:c2:ec:3d:40:6f:0b:4f:7e:43:58:0a:ea:be:45:
ef:01:db:93:c2:b5:d1:5d:c1:61:86:f1:34:f4:d6:
b2:3c:cc:8f:19:89:4f:96:ca:56:e6:58:2d:50:38:
cf:ad:c6:b6:47:3d:fa:02:51:31:f5:fc:9c:10:95:
17:84:3a:4d:47:11:d9:da:58:1b:ac:7a:38:7a:32:
e7:9a:ae:8c:da:1b:7a:53:df:de:de:fa:21:48:64:
e8:b3:7b:c4:e7:7f:e6:83:1d:53:eb:85:e8:0d:a9:
49:3f:ee:11:f0:96:18:e9:27:5c:10:aa:fc:97:e5:
21:f0:a9:ad:fb:6b:88:cd:3d:e2:44:d4:d9:1f:cf:
d1:46:cb:22:4d:59:b9:ce:72:44:66:19:24:8b:de:
75:b1:90:da:76:f9:56:33:75:bf:c9:2e:e1:b2:be:
d8:f3:06:33:e9:21:57:3c:38:2a:94:65:49:63:07:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:D5:EE:65:63:01:60:9C:D7:F4:09:A0:7C:A1:3B:F9:96:08:E2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
27:bd:6d:2a:65:53:7b:3e:a1:d4:2b:47:1f:3e:17:80:8b:9f:
4b:da:19:82:f1:58:b2:29:33:74:6f:47:f6:65:0e:0e:f3:ab:
45:a2:98:ea:e1:dc:f3:96:ec:33:61:6f:ac:09:cc:9c:17:80:
c5:05:69:30:7e:7a:5d:7c:2c:08:3c:88:77:2b:97:95:0d:54:
7d:8f:05:42:0b:e8:a2:08:77:55:7d:83:ac:ce:18:e6:5b:c2:
63:4e:b1:64:50:88:6c:37:06:b2:aa:c5:ec:ba:d7:f9:c3:a9:
0a:c5:b0:60:f8:ee:c8:98:0c:e0:f5:27:c3:5f:7e:ec:57:37:
47:b7:18:e5:07:00:e1:28:17:13:92:bf:90:36:ae:c7:62:61:
79:38:d4:88:b6:4f:1c:6c:bf:93:07:c1:9f:1e:28:29:73:11:
3b:ef:1c:13:21:27:f2:41:7c:6b:7b:67:de:30:98:ff:17:3d:
d4:62:1a:e8:68:ea:82:1a:2d:47:d7:e0:d3:f6:64:1a:d2:27:
3a:5e:63:22:e3:77:8d:ad:ad:9c:7f:b1:55:0a:43:cc:3a:b6:
eb:66:e4:13:2e:eb:98:0f:12:e5:7c:a0:a7:da:d1:70:73:cb:
3b:a3:e4:ee:20:26:6c:07:d7:ac:3a:a1:d7:f9:ce:3a:65:6f:
99:9c:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:05 2025 by rpki-client