Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
File: 46265eea-a395-4578-afc8-0bf551de327d.roa (raw, json)
Hash identifier: gIKX0VjrJUy3YpiPmbLkmJU04opVkbd55v8ptVD82xw=
Subject key identifier: 3E:2F:59:A4:78:EF:1B:07:A2:4D:AE:1D:DD:E3:57:F0:82:03:07:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34AA81D74B651CF3EFE3BF755693A4826C2EE979
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
Signing time: Mon 06 Oct 2025 18:00:02 +0000
ROA not before: Mon 06 Oct 2025 18:00:02 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:aa:81:d7:4b:65:1c:f3:ef:e3:bf:75:56:93:a4:82:6c:2e:e9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:00:02 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=f741e496c29c94a331888345356f66663ac2bc002a7ec506e402b23e3f90c11c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:06:4d:95:2c:a2:42:46:1b:59:65:ae:f2:
9a:20:98:09:bb:b2:c0:bd:b9:57:b5:c0:1a:60:d5:
20:37:bd:23:65:9c:21:bd:69:cd:b2:3b:b8:b8:64:
3f:f6:34:9d:6f:b0:c2:37:6b:da:54:4a:ae:4c:b9:
4b:10:7f:27:85:a4:c3:fd:cf:26:c5:bc:d7:f2:c0:
50:97:6a:e5:6f:3a:71:93:af:f2:57:07:5c:da:e1:
2d:a3:e2:ed:c8:df:ac:59:a7:41:99:d0:a8:41:1d:
c6:61:59:e5:93:ca:e1:64:98:c3:24:a3:cd:be:af:
94:c9:87:d6:96:46:34:fa:91:a2:5d:64:02:99:77:
dd:ff:fa:4c:d4:99:55:ee:53:df:f3:78:c7:ca:1d:
a5:e3:e8:f1:f2:20:42:4d:93:55:8f:f0:8a:1b:68:
7b:06:77:1f:89:a6:6e:6c:82:7e:e9:26:09:da:36:
7d:9e:6a:34:8f:6c:1b:81:54:57:c0:59:9e:6f:24:
b6:4e:40:73:ce:2c:d9:b2:8d:a0:62:bc:37:34:5e:
5c:7f:b7:d2:8c:d8:d7:ff:1a:32:67:e0:33:bf:4b:
b9:91:51:6c:d3:36:b6:fe:02:2a:a4:e6:64:58:1e:
d4:e3:e3:15:21:ee:49:d8:cc:63:15:26:e5:51:16:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:59:A4:78:EF:1B:07:A2:4D:AE:1D:DD:E3:57:F0:82:03:07:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
64:b1:1d:2b:39:7f:e6:00:79:eb:61:79:20:a4:4c:61:8d:39:
48:8d:3f:37:51:f7:a7:8a:ae:a9:f9:f0:63:95:89:76:d8:b5:
8f:e7:65:12:9f:fb:1b:82:f9:3d:df:e4:09:56:e5:55:c3:df:
5a:7c:e2:bc:8f:d5:75:03:aa:1b:39:b7:2c:5d:b1:16:83:09:
f8:2b:26:1b:73:6f:31:42:d0:7b:06:69:b7:01:29:f6:18:e1:
0d:8c:33:01:49:b8:1d:fc:0f:a8:0c:4c:2d:0a:35:5e:1a:c7:
1d:02:2a:c5:89:75:bb:00:94:72:8e:92:ad:bb:81:ec:5e:70:
b1:26:53:b6:f4:4d:81:91:ee:ea:44:72:e8:56:42:98:ed:24:
e2:cc:f7:56:1a:ac:3e:1d:8a:0f:1c:dd:4c:2e:84:3c:97:9f:
04:62:1b:83:7d:4b:e3:9e:78:b0:86:76:cc:cf:d5:2c:82:9b:
92:87:19:aa:9e:32:4f:93:6e:eb:16:af:a4:1c:8f:81:3d:b1:
05:90:82:d1:33:8d:1d:3e:45:0d:30:90:2e:b1:73:bc:49:30:
62:ae:45:e0:7a:8b:be:3c:d3:8d:c6:09:49:a5:98:a9:cf:b2:
17:4d:65:e9:e3:e8:b2:b3:09:ad:0c:18:c1:b8:fa:47:da:5a:
12:a6:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:31 2025 by rpki-client