Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e49a1a2-dc4c-40c4-9c7e-f41c937ffb61.roa
File: 2e49a1a2-dc4c-40c4-9c7e-f41c937ffb61.roa (raw, json)
Hash identifier: amvh4aNDIBS7pLFw6RlQbrgeSnc2KXkm/pUIdQ8jT+E=
Subject key identifier: F9:8F:E8:9E:C6:6C:D6:F8:3A:A4:38:3A:1E:A6:35:AA:AC:1B:C6:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71B554236D4308E0AFD3FCABB3941974A893B72C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e49a1a2-dc4c-40c4-9c7e-f41c937ffb61.roa
Signing time: Mon 29 Sep 2025 15:24:03 +0000
ROA not before: Mon 29 Sep 2025 15:24:03 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06d:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b5:54:23:6d:43:08:e0:af:d3:fc:ab:b3:94:19:74:a8:93:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 15:24:03 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=43483d77b6bacf86ffb6f4e33b8b50a0008d3d8c30912283a2c2cc54728a27b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:aa:91:fc:ee:bb:cc:89:02:02:c9:c8:67:
24:9c:1e:ea:f5:4d:c9:3e:18:a8:4c:6a:3c:f3:8d:
d5:52:ad:ab:98:2c:2b:f0:2a:f2:34:ab:21:ca:0c:
7e:ce:5e:60:78:6f:24:28:af:24:4c:ec:2b:46:27:
9c:80:ff:9a:6c:bc:fd:fd:89:d7:96:64:3f:e7:7e:
b1:c4:39:e5:ed:68:23:74:ac:1c:6f:8d:cb:ea:d2:
17:3e:7b:a9:e9:4c:56:f0:f2:c3:3f:2d:1d:df:bc:
69:00:50:47:02:3b:3f:52:aa:63:84:8e:e3:6a:03:
b9:e8:c7:f8:2b:cb:34:0b:1e:e8:3c:c8:0e:62:8d:
6a:bf:1c:aa:2b:f0:a4:1b:01:0d:1b:39:5a:57:d9:
17:ec:f0:af:0a:e8:00:d5:1c:b5:bf:4b:7e:a3:6d:
b8:82:c2:98:61:da:b8:3c:9b:40:f2:1a:1d:b4:e3:
2b:63:44:e2:8e:c4:4d:ce:53:b5:41:bc:f6:7b:65:
e4:18:63:de:22:f6:df:d3:27:6c:cd:ee:36:25:4f:
6d:1d:d9:5b:fc:b1:ea:95:a4:87:bd:ce:d3:38:99:
7b:c4:1d:c0:5d:32:4a:62:f8:59:68:8c:3e:d9:94:
f3:d7:ea:f0:1e:38:1c:d4:35:81:9c:f7:60:80:06:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8F:E8:9E:C6:6C:D6:F8:3A:A4:38:3A:1E:A6:35:AA:AC:1B:C6:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e49a1a2-dc4c-40c4-9c7e-f41c937ffb61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06d:6040::/48
Signature Algorithm: sha256WithRSAEncryption
63:6c:3a:61:b9:d2:52:01:79:f8:8e:6d:7b:07:f1:85:35:9d:
c8:16:85:45:1a:31:08:d0:0c:59:9c:bb:e2:33:68:98:84:01:
1a:f9:10:22:49:d9:12:87:59:be:63:48:f5:6a:87:16:8c:e6:
b0:4d:c6:66:b5:92:e2:4e:67:a5:df:e5:d9:df:83:dd:eb:18:
59:51:4f:0d:7b:ef:53:54:28:11:cf:b9:1d:9e:12:57:3d:f0:
7b:b2:59:bf:3f:d7:83:0c:de:8c:b8:e3:db:7a:8b:7c:6f:81:
29:d8:96:4e:7c:51:eb:35:ee:02:f3:da:f6:40:f0:1d:f2:76:
9d:70:80:e7:f3:f6:ec:97:d9:a4:0d:8f:7a:95:97:f2:0c:c8:
15:4c:3b:1f:6a:8d:c4:74:35:4f:68:e7:81:9f:47:e1:0f:ca:
b1:ce:45:7c:06:48:77:a0:4a:3c:5c:1f:ce:58:ce:e5:bf:39:
51:30:11:8f:06:e0:8a:8b:d2:c5:5a:86:c4:96:64:15:b4:46:
b3:22:ef:92:79:f7:cc:e1:89:56:a5:c6:c2:ec:a4:45:8b:a4:
ac:d0:6e:36:88:e1:4c:a2:ac:b9:62:27:9d:ad:71:ba:be:43:
5b:d9:cd:d0:2e:c8:96:7f:c6:93:c8:90:14:a4:a3:a6:3d:05:
a5:bb:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:39 2025 by rpki-client