Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54335259-1d3a-48d5-b7d5-0f8626b7a321.roa
File: 54335259-1d3a-48d5-b7d5-0f8626b7a321.roa (raw, json)
Hash identifier: SV1vFJwSfWWAFG6eYbz/wqDfCG2ReI9odKMywKrhRaM=
Subject key identifier: 85:CB:A7:E1:4E:73:C2:A1:5D:38:8F:9D:F7:13:33:89:A9:38:E5:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D4297ADD461E5581CBE575846585C4D0095A8A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54335259-1d3a-48d5-b7d5-0f8626b7a321.roa
Signing time: Mon 06 Oct 2025 17:50:07 +0000
ROA not before: Mon 06 Oct 2025 17:50:07 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07d:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:42:97:ad:d4:61:e5:58:1c:be:57:58:46:58:5c:4d:00:95:a8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 17:50:07 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=a6ca6186c00689d92dfc00851d508bf2b380d8e1d25acd474077187b89e8aeb1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:cb:ee:52:d2:6e:e2:a1:02:04:f9:49:80:
28:ca:21:5a:18:b7:af:43:98:16:90:17:5a:70:64:
9c:25:d9:93:c5:f8:58:48:82:02:42:70:ff:3f:ad:
25:b5:cb:1f:46:50:9e:21:25:eb:30:c0:19:67:44:
e2:fd:88:25:9a:f6:e1:05:1f:20:08:c3:8e:49:b3:
f7:be:6c:21:f9:df:3a:af:85:2b:3b:35:27:fb:09:
36:ed:a2:58:b0:ff:66:7e:9a:c1:92:f3:d1:d2:f9:
8d:e5:1d:1c:95:4c:58:1d:59:7e:3e:23:ef:da:ac:
51:36:08:dc:ed:a7:70:1d:9d:81:ad:51:84:1b:7e:
2b:7b:5c:70:b2:82:18:ae:ff:7a:92:77:4a:90:72:
dd:b4:dd:fc:6b:45:fe:29:20:ef:08:fc:c6:15:8e:
73:cd:c2:98:df:62:61:a9:76:97:d6:ca:4a:67:8f:
a5:c8:62:8f:3b:a6:1f:7f:fc:ba:12:01:8c:ec:01:
1f:6f:8d:cc:c0:09:8b:ab:75:80:21:91:8f:0a:93:
f2:d8:f9:72:8c:c6:e5:47:43:61:ca:f7:85:23:d3:
56:6f:a1:0f:d3:43:ea:52:1a:3d:80:66:9d:2d:e4:
d0:e0:ca:bb:c8:4a:8b:96:5f:0a:7e:7e:17:26:2b:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:A7:E1:4E:73:C2:A1:5D:38:8F:9D:F7:13:33:89:A9:38:E5:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/54335259-1d3a-48d5-b7d5-0f8626b7a321.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07d:c040::/48
Signature Algorithm: sha256WithRSAEncryption
2b:9a:e0:1f:9b:d1:a1:61:72:89:ab:4f:c8:ad:ea:29:1f:6c:
12:1f:f0:bf:e9:83:a6:0f:4c:14:1d:e5:cf:d0:b2:87:b1:8b:
3d:34:d0:b2:f4:11:d4:65:6b:91:eb:24:63:96:e5:14:60:61:
e4:0e:16:2b:c4:e5:ea:f7:22:c3:5f:6a:1d:26:0a:92:88:2d:
df:5a:0f:2b:9d:37:3d:48:02:6a:d2:8e:14:1b:2c:fb:64:fd:
86:15:05:30:cd:73:bf:65:00:14:58:3d:44:69:f4:b9:72:55:
63:0d:b9:81:5d:80:a1:90:5e:15:1b:53:da:17:ac:4d:8a:d3:
21:5e:57:37:69:ab:8e:7b:2b:42:f7:fc:a1:6b:db:9a:53:2a:
9e:69:81:72:61:0b:5d:a8:1b:c4:bb:2c:e8:de:c7:85:f0:4b:
a5:cf:a1:34:f4:cd:29:fe:de:9e:e3:5f:30:e8:81:7d:c7:71:
ca:0e:02:c4:ee:25:6b:36:e8:c4:90:38:40:b3:6f:f0:03:af:
50:29:e9:3e:38:ba:57:1a:00:8a:db:24:78:0b:78:d0:52:a8:
0a:d1:ee:13:d4:6f:9d:4b:5c:f8:78:da:5a:0f:16:69:b4:03:
b8:13:e8:e4:f4:6c:d1:79:97:ad:b9:c7:f4:96:52:8d:46:48:
4d:e1:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:10 2025 by rpki-client