Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
File: 44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json)
Hash identifier: ObSWSgEvn2vXCXCVqgEhEl6jxVRapV/7x0mC4ynT9yc=
Subject key identifier: 5C:3E:7A:C0:0D:2A:44:D2:2C:0C:34:B7:0A:F7:1E:24:C1:33:DE:4C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E4E573320F0503CE932AD0FC3DA1F3E7E6AFEA3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
Signing time: Tue 05 Aug 2025 18:50:06 +0000
ROA not before: Tue 05 Aug 2025 18:50:06 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4e:57:33:20:f0:50:3c:e9:32:ad:0f:c3:da:1f:3e:7e:6a:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 18:50:06 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=be9dd17d81a797230f61fac298f65f80319ebd8862fcf35c1192559e5d1ebc19, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:f3:b5:60:9b:08:79:d7:e0:a1:ad:79:0e:
c0:58:3d:5b:70:25:e2:05:f0:6f:a3:b8:f3:5a:b3:
d2:0d:26:30:f6:67:1c:ba:f2:69:0e:81:96:37:0a:
2f:b1:8c:3d:51:f5:4b:39:86:96:e2:8d:07:a6:c4:
d8:bc:4f:dd:14:82:a5:eb:74:11:e3:af:b6:3d:5b:
eb:aa:f2:10:09:43:24:9d:6e:b8:ad:69:22:12:a4:
90:54:5d:60:15:53:f6:aa:e5:3f:ef:b8:5c:49:b4:
2c:9d:c9:05:b3:5d:a5:c4:9a:2f:01:d0:e7:c3:76:
f9:9c:58:8f:25:01:98:37:e9:b6:0c:fc:64:a2:03:
a7:51:60:a5:24:65:55:59:c5:cf:98:d9:cf:c7:28:
15:18:35:a0:b4:16:8b:bb:b1:32:f0:fd:7a:89:90:
fe:31:6b:e0:c2:bb:38:eb:99:92:8b:72:5c:eb:66:
f8:91:0c:4e:48:54:53:78:11:a5:e8:72:33:2d:8e:
bd:fa:18:dd:70:e2:4e:08:c9:c4:ef:a4:35:dd:9e:
ee:ae:27:0a:9b:1d:6c:13:21:a8:ca:00:f2:3b:85:
43:96:b1:ba:e5:34:8c:10:8a:6a:97:fc:67:81:b8:
1f:4d:cc:20:f0:a1:24:bf:f2:eb:d6:48:77:93:ee:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3E:7A:C0:0D:2A:44:D2:2C:0C:34:B7:0A:F7:1E:24:C1:33:DE:4C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5040::/48
Signature Algorithm: sha256WithRSAEncryption
30:a4:25:9a:f3:ff:1e:df:d0:98:7f:0b:24:18:b5:a9:e2:dd:
e9:a4:62:3e:51:3b:7e:ae:1f:b3:83:ea:88:f8:79:e5:6c:4d:
ff:45:40:60:9d:eb:32:2d:b8:c4:e9:1e:0b:b9:12:de:8e:2e:
dd:5f:ba:19:3d:cb:56:37:61:70:5b:6b:18:de:cc:70:ab:7e:
48:7f:ee:b9:16:17:95:46:4f:9c:cb:f0:e0:cd:1b:bf:fd:55:
71:63:61:99:2e:3a:44:08:7a:f7:e9:50:f0:01:24:c1:3b:58:
67:e8:74:b7:55:4c:80:13:3d:9f:5f:38:fa:b6:52:7f:8f:e3:
5b:32:c6:90:a6:35:72:f9:43:2e:d9:c4:77:02:3f:52:90:67:
60:33:64:b0:d0:b7:a6:ce:87:e7:99:cd:45:6b:aa:d8:00:a5:
93:b9:c9:cc:b2:28:8b:ed:88:ad:26:dd:76:d4:97:9e:3e:e3:
88:66:f0:6d:41:3b:4e:5c:84:31:d3:94:a5:55:c8:ec:45:b0:
87:8c:95:65:87:eb:08:d8:54:12:ef:51:73:50:99:70:65:65:
b6:22:43:30:8a:7f:09:08:d9:ce:03:de:c6:d8:ab:46:b0:a3:
11:8b:a8:82:c2:af:f8:2a:c8:7d:1d:aa:14:12:c3:f3:5e:37:
4e:a6:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:50:48 2025 by rpki-client