Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
File: 35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa (raw, json)
Hash identifier: h2ywvWppcvh6m6oC254spyg36gPr63ZoSDqtmw6oQ1w=
Subject key identifier: 30:6B:6D:0D:83:D3:01:EC:17:51:4C:6E:A8:E3:C1:B3:E8:57:D8:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5698227F5E661682053BB5682C2211708E2D3B7F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
Signing time: Fri 22 Aug 2025 15:10:13 +0000
ROA not before: Fri 22 Aug 2025 15:10:13 +0000
ROA not after: Fri 26 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:98:22:7f:5e:66:16:82:05:3b:b5:68:2c:22:11:70:8e:2d:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 22 15:10:13 2025 GMT
Not After : Sep 26 23:59:59 2025 GMT
Subject: serialNumber=726c84e194a7ee3295da5fe853941b7e8338bd71d62133adadfd45c7e25bf012, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:db:37:22:79:f2:18:ce:33:9f:1a:c3:b7:
eb:5c:a4:d5:57:ef:5f:48:81:2b:9c:18:ae:9e:15:
21:b7:ec:75:e0:6c:61:0e:96:9e:97:f4:d1:ad:5f:
ff:51:e8:dd:4d:3f:ca:15:af:bb:1b:42:43:a0:a6:
4e:1b:8d:a7:27:b9:8f:ae:f3:d4:3b:8f:eb:83:c7:
12:58:f8:83:75:2c:1e:33:79:bc:22:00:28:ee:d1:
b9:fe:40:75:80:f4:9e:bd:f2:35:18:f1:e9:9f:c6:
d9:97:f9:27:61:c4:e2:39:a7:e5:19:5f:c0:ad:1f:
64:29:7d:0f:39:9e:fc:aa:ad:d2:9e:a5:84:6f:ce:
db:1b:b4:e4:5e:36:22:98:05:b9:bc:ed:cd:82:74:
d6:ed:ba:d9:03:24:eb:f1:16:a3:f2:a1:0e:be:2b:
9a:10:e2:41:b3:e3:5c:d0:a3:69:27:c9:c9:32:11:
c8:cb:3c:44:ec:42:df:02:70:f9:7b:60:92:47:6f:
9e:54:ca:83:6f:87:e1:4a:74:93:b1:79:aa:d2:38:
a6:14:a7:db:c9:d7:21:44:95:fd:41:b9:1d:e0:60:
db:30:b4:e5:05:aa:56:e4:4c:89:05:c7:34:c0:7b:
d9:09:c9:d7:a8:3b:f5:46:27:e9:12:36:41:27:c9:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6B:6D:0D:83:D3:01:EC:17:51:4C:6E:A8:E3:C1:B3:E8:57:D8:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/35f0e19e-59f2-44f3-b0bf-e80d9fe0b48b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:b000::/40
Signature Algorithm: sha256WithRSAEncryption
7e:25:34:2a:2d:59:76:23:1d:a8:6c:23:cf:10:c3:7f:e1:a8:
8d:98:1c:86:77:e7:a8:a1:6f:5a:62:4a:0f:3a:f7:81:6c:9d:
a9:f5:73:ac:ec:5f:39:c9:34:9e:16:f3:b1:1b:85:23:94:d2:
c4:a7:2d:b8:b8:56:b3:dc:9c:1c:b5:44:4a:08:a0:5d:0c:e3:
56:ad:17:f8:53:c5:fe:57:fb:d2:8c:ea:61:e3:8e:6b:e1:f1:
42:5b:3b:fe:4f:94:95:db:cc:31:a2:9e:c8:a6:ff:59:8f:75:
66:75:b5:0e:14:23:3b:57:d0:d9:70:66:c5:53:1a:d8:92:86:
b0:8b:17:3e:73:d4:50:5d:3b:e3:99:d8:8e:33:bb:b6:56:a9:
38:a0:90:63:40:c5:fa:f2:49:ff:5a:78:94:18:0b:32:ba:10:
98:33:48:a7:c4:7b:79:8e:83:8e:51:67:6d:bb:ae:b3:23:4f:
ee:51:e6:e2:13:69:cd:b4:76:d2:c1:11:d5:98:d3:56:32:73:
ce:e2:8d:ec:c4:b6:1c:48:d2:74:d5:1e:66:6d:e3:fa:cc:fd:
ca:27:bc:a9:ba:3a:e1:54:2c:f6:3c:9c:b3:88:a5:5f:ac:ae:
01:5d:73:e3:be:72:e3:62:48:4f:07:5d:92:55:d7:02:c1:c8:
14:da:1c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:54 2025 by rpki-client