Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
File: 4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa (raw, json)
Hash identifier: Docqc82Yi8bHN8d90Nr9Lw5QHrEtETXPSdTdSsfKLvQ=
Subject key identifier: 17:0A:7A:39:80:A2:3E:F9:4C:D4:CB:7E:AF:3F:1A:B8:86:61:98:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F0B20069A0665C0E0FB14D67B3BF384B220BD54
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
Signing time: Fri 22 Aug 2025 15:10:32 +0000
ROA not before: Fri 22 Aug 2025 15:10:32 +0000
ROA not after: Fri 26 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0b:20:06:9a:06:65:c0:e0:fb:14:d6:7b:3b:f3:84:b2:20:bd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 22 15:10:32 2025 GMT
Not After : Sep 26 23:59:59 2025 GMT
Subject: serialNumber=1603002751f23407fdf3c90d39788d13a945af0d8af103f1dbf2ab9f3b6d2fca, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:a1:95:9f:1b:34:c4:1a:64:fc:a4:63:27:
9e:95:05:a9:2f:b0:83:be:f9:70:d7:8d:b5:39:e0:
cf:54:b7:e1:da:92:ae:b7:03:bc:18:31:b3:cd:e5:
29:cd:84:85:36:60:24:61:28:9e:6c:33:0e:5a:a4:
72:cf:43:8e:08:b9:ba:6f:ca:e3:4b:a7:45:37:5f:
a1:36:63:65:aa:26:e8:7c:55:2e:18:af:8f:26:6d:
0a:4c:a2:f9:04:65:f8:e6:ef:4c:62:0e:d1:06:eb:
9c:a9:e6:a3:90:e3:3a:8a:82:5d:70:b2:c1:cc:47:
fe:11:76:d0:18:ca:60:d8:7d:27:2c:df:77:17:33:
89:fc:34:6f:59:44:03:bd:63:c8:7e:25:92:76:f7:
7e:e8:0d:02:cf:af:d7:bf:98:0d:55:16:2c:e7:be:
1c:e7:72:d3:5c:1f:c2:b3:ff:31:63:b3:b4:56:7a:
25:f2:79:43:d1:b2:9b:5b:6d:fb:e9:e3:22:39:8e:
9f:bf:b2:31:34:18:44:e8:6c:cf:14:b6:e9:81:ad:
83:e3:5c:8b:92:58:c1:20:7a:c0:6c:98:90:bb:ad:
70:04:b9:73:2b:4f:c4:62:fb:5b:22:f5:a1:e7:f4:
00:16:bf:9a:3d:ea:d3:83:ea:23:14:3b:64:e1:dc:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0A:7A:39:80:A2:3E:F9:4C:D4:CB:7E:AF:3F:1A:B8:86:61:98:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4df3a9b8-4cdc-4366-a38e-16d2eab129b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:5b:a9:b2:be:6a:f8:08:94:b6:29:fe:81:13:93:81:8e:95:
0b:6c:22:2d:32:5f:fe:15:16:10:8f:bf:9e:f6:84:5b:a2:8f:
9e:27:00:bf:7f:a5:4f:58:3e:24:51:76:cb:c1:ec:15:6c:ad:
e8:07:ea:98:a7:fe:5f:e7:be:3e:42:fb:bb:fc:1a:bf:fa:88:
0a:9b:ef:f0:d0:e5:14:02:6f:4c:af:ad:c1:b2:a9:39:da:d0:
34:01:34:0f:3c:ab:13:9b:9c:46:84:9e:2e:2d:db:f8:92:8b:
70:15:d4:58:b9:2f:f3:79:57:e9:34:22:a7:22:1e:70:3b:35:
6e:5b:da:14:5c:03:05:f8:b1:05:f8:c1:8e:9e:fb:25:6d:d0:
d4:08:3b:b8:d2:ed:81:38:33:6d:d5:60:c6:85:a1:50:38:ba:
60:a1:62:d4:56:45:fc:61:16:5c:fc:fc:3e:5f:97:2f:b4:4e:
f7:89:01:b5:69:95:74:cd:4e:34:04:58:fe:6b:7a:9f:e8:67:
89:5d:eb:e7:56:09:40:2b:d8:26:7b:96:69:d8:f2:e7:db:01:
f3:34:6f:bb:89:26:65:1a:b7:7c:95:45:05:a0:8e:68:b4:ed:
dd:1c:6f:af:e2:77:02:64:ae:4c:45:ac:3e:8d:14:13:b1:c5:
b7:6d:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:47:19 2025 by rpki-client