Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
File: 4ee4d823-9869-449e-9541-10a647125e4a.roa (raw, json)
Hash identifier: dDPxr9VENAmUHfQ528JJ3wDAoJOwI1hMrIQX4g67wHY=
Subject key identifier: 22:F3:07:82:07:1B:16:AC:65:A0:A2:CC:14:CC:4E:F7:19:99:12:4B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 37D9AEFEFCC754BDDDFAB56C5D01D61DF61C09F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
Signing time: Tue 05 Aug 2025 19:21:03 +0000
ROA not before: Tue 05 Aug 2025 19:21:03 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d9:ae:fe:fc:c7:54:bd:dd:fa:b5:6c:5d:01:d6:1d:f6:1c:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:21:03 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=3f4b09fc4b228e5f6eb5f07c47038c30e335ba701e2107a52f8b620d498c7d4b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:20:70:79:eb:8e:b7:83:d5:fa:98:5e:52:
16:61:5e:95:60:23:5f:20:11:1a:d8:2d:05:4d:0a:
13:dd:48:bf:c1:24:5f:fe:77:88:e2:c5:0b:ae:d4:
96:1c:69:9c:b2:e9:1e:02:81:a8:d1:7d:57:06:89:
9e:d9:c9:e6:c1:0a:99:4e:4d:32:e5:82:0f:52:b8:
77:aa:f6:1c:79:f5:b4:37:1d:98:59:82:2a:2e:ef:
b3:c0:20:f3:52:f8:48:9b:f3:50:53:cc:42:84:c5:
4b:cc:bb:0c:d0:12:e8:02:ac:aa:1d:8f:c2:65:60:
ad:cc:f6:83:c8:3c:93:79:93:1a:3f:7d:a7:ed:16:
2b:40:cc:79:f4:32:25:42:17:b0:e1:c1:7d:70:09:
15:cc:d6:2b:f4:a6:2d:61:8e:36:84:14:fb:6f:07:
be:73:9c:76:46:1f:1e:31:36:65:0f:ee:3d:5a:e0:
dd:c4:e7:c2:6c:2e:ca:4c:d5:71:59:8d:f0:d6:97:
a0:35:4d:50:7e:07:d9:64:22:37:3e:f6:b0:52:b7:
25:4c:4d:c8:e2:83:86:ba:95:58:7c:1f:3e:61:6f:
35:5c:05:07:18:b1:8b:38:bc:61:5e:83:91:06:da:
97:3d:23:12:c0:3b:a2:89:fb:b8:60:24:80:ad:d4:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:07:82:07:1B:16:AC:65:A0:A2:CC:14:CC:4E:F7:19:99:12:4B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ee4d823-9869-449e-9541-10a647125e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
17:4a:68:35:88:bc:07:84:4a:a8:97:42:56:c5:b6:19:5c:d6:
23:b4:ab:05:1a:20:96:1c:95:b6:be:24:26:f3:93:52:21:7a:
12:fa:28:b6:f2:63:f3:2e:89:c3:43:5b:e6:41:89:13:1d:b8:
d9:6c:ac:28:ff:29:eb:ed:59:5e:89:dc:b9:cf:09:2d:6f:07:
b1:c2:ef:85:c3:4f:51:a0:a1:3b:d8:2c:92:89:9b:f7:4f:15:
eb:d0:fd:40:79:ab:66:90:33:2e:1b:cc:a9:cd:5d:86:13:c5:
b5:7b:cb:aa:a6:dd:a0:55:70:8d:fd:a6:11:bc:56:e2:44:9d:
9c:9b:c8:86:e7:e9:8f:27:a4:08:ff:47:26:d5:9e:1c:38:04:
60:73:d0:34:fe:52:9c:67:65:86:c0:10:a5:2e:14:f3:b9:19:
f2:74:24:49:3b:3a:48:72:22:a2:87:49:4b:2f:27:5a:f1:ca:
9d:c5:60:fb:92:74:ab:cc:d5:99:7f:21:97:32:e7:2e:08:5b:
0c:4d:aa:48:db:3c:b1:78:78:76:92:93:b2:c7:57:23:f5:44:
ce:97:e1:f7:3d:bb:dd:b3:26:6c:f0:c5:28:41:d9:94:e8:54:
95:5b:61:88:34:83:36:1b:9d:7c:78:97:0a:9f:a4:21:e2:75:
ae:b7:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:04:08 2025 by rpki-client