Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
File: 4a799a36-6e8c-4ca7-be23-5388518d8f95.roa (raw, json)
Hash identifier: dwiOXkNvxKyNi7cuPudTs0yR7rjzby5APl0lQf0/rgY=
Subject key identifier: B5:71:52:8D:2E:07:A5:77:C6:65:6D:DB:58:B7:85:3A:C0:F1:CC:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 794C90629D761BBCD618637428C4B291B758544A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
Signing time: Sat 09 Aug 2025 00:20:06 +0000
ROA not before: Sat 09 Aug 2025 00:20:06 +0000
ROA not after: Sat 13 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01f::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4c:90:62:9d:76:1b:bc:d6:18:63:74:28:c4:b2:91:b7:58:54:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 9 00:20:06 2025 GMT
Not After : Sep 13 23:59:59 2025 GMT
Subject: serialNumber=90aead1da40e7eea0881fb0d802ee8a37eed0881013f7c4100ec779b9256ae55, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:e1:c8:0c:d5:0f:07:46:f5:73:07:af:cc:
32:e6:77:79:e8:85:c6:2f:cd:0d:83:5d:95:c0:72:
b8:06:e4:96:8a:3e:9d:cd:ad:c1:75:f9:9a:54:0e:
4a:4b:9b:f9:23:80:58:04:08:b8:59:97:a6:be:39:
69:43:c9:27:b6:61:0c:37:c6:23:b5:51:0c:6e:55:
df:68:f1:6c:8b:4a:8c:21:9a:b9:9d:1e:c4:25:4d:
a4:db:f5:d0:03:e6:56:74:2b:5a:ce:6c:3e:0d:f5:
86:c6:6e:39:e9:93:e2:fb:15:cc:f2:89:7f:fd:c9:
9e:f9:05:13:df:a5:ba:d2:c9:da:8c:86:3d:c2:d9:
16:8b:f5:f1:c9:8b:1b:d3:96:83:1c:a7:57:02:b4:
6d:fe:67:de:fc:7a:b0:ec:1b:eb:40:15:91:5a:25:
2e:ed:09:e8:3e:d5:11:f5:79:98:39:6d:2c:fa:4f:
95:9b:9d:d9:45:12:ce:f3:af:9f:12:56:25:8a:28:
1a:4d:9c:55:34:61:e7:25:a4:f3:bf:47:99:2c:e0:
c2:c6:46:6c:0c:05:be:ff:b2:e4:33:c1:96:a1:39:
88:9d:16:0f:4a:61:02:74:f4:8a:cd:f8:f3:83:10:
cb:e1:5d:01:c3:b4:61:37:2d:48:9f:de:d9:4e:46:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:52:8D:2E:07:A5:77:C6:65:6D:DB:58:B7:85:3A:C0:F1:CC:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01f::/36
Signature Algorithm: sha256WithRSAEncryption
34:be:89:67:4a:ed:cc:54:d5:48:e4:13:99:ec:23:45:24:88:
4d:a2:ee:5e:dc:3b:02:67:ec:31:7a:fb:73:cc:f1:92:a6:f4:
5e:5e:64:eb:52:80:64:d7:5b:c6:85:85:40:24:ee:e0:72:3c:
dd:b2:e2:06:b7:08:2c:38:b0:aa:2e:a4:7e:d7:d8:55:41:82:
98:a3:0e:a6:ed:c4:1e:47:7f:f8:d6:d3:07:8b:71:b3:31:15:
2d:e4:bf:fb:c2:9e:04:fb:bf:43:af:94:13:b9:79:c5:eb:0f:
63:cc:08:54:93:72:62:59:8d:f1:c1:fd:2b:b5:16:ab:a4:bb:
a1:c4:5b:14:fa:cb:e2:94:f9:15:a6:57:31:e5:a3:c1:64:30:
73:27:0c:b9:ff:4d:93:6b:5b:ff:90:b0:fe:68:43:95:43:f1:
10:3a:04:2a:74:5e:f4:54:24:55:f6:f6:ba:75:fa:4d:57:a7:
fd:09:67:b5:dc:01:85:a9:08:e1:c7:41:cd:57:85:5c:da:10:
1a:3d:4d:00:98:58:e1:03:c2:6e:ae:be:fd:c5:c2:53:1c:21:
7f:ef:b3:e1:35:e1:fb:b8:91:57:bc:b0:73:01:59:d9:54:bb:
b4:d4:40:3a:91:1a:f4:b4:cc:61:3d:4a:9b:37:28:40:8c:19:
1d:9f:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:49:39 2025 by rpki-client