Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
File: 56c31249-f32b-4fc4-a69f-07420913a101.roa (raw, json)
Hash identifier: B0a5Ko5pY7/FnZe4Iihl1ZbsabxaX7xAJkmoU9XhDSI=
Subject key identifier: B2:2E:28:F6:17:48:08:D2:63:06:7F:55:E7:45:E3:7B:20:0A:D5:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79A8A3E6D33651BC9D71D986C54944617E0F2B7E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
Signing time: Fri 15 Aug 2025 15:40:54 +0000
ROA not before: Fri 15 Aug 2025 15:40:54 +0000
ROA not after: Fri 19 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a8:a3:e6:d3:36:51:bc:9d:71:d9:86:c5:49:44:61:7e:0f:2b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 15 15:40:54 2025 GMT
Not After : Sep 19 23:59:59 2025 GMT
Subject: serialNumber=76d47e33ff615b0c4126a75b063ec2e516204d9e92b451887c12d98794911e6a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:49:e4:f5:51:52:5b:8f:f0:83:b8:3b:c7:
9a:91:e8:d1:6e:a9:14:d0:0a:7f:a0:0f:71:9d:dc:
0e:bf:fa:29:99:d6:6c:11:51:cb:92:2b:3b:99:de:
37:c3:9b:8c:01:fc:4b:6c:ca:e5:a8:87:80:3a:27:
0f:db:5f:d2:ee:74:e7:2e:50:04:ab:0d:ec:7d:b3:
00:6b:d5:27:7e:1f:c7:7e:cb:91:a6:0a:73:50:44:
51:fa:fc:e6:36:31:66:63:4b:40:39:3c:ae:ab:a2:
e3:4a:11:db:bc:e2:0e:de:8f:e4:f1:87:23:bc:3e:
66:49:bc:6b:51:6c:01:3e:71:a1:23:29:88:59:7d:
bf:8a:c6:a8:0a:61:08:78:2f:11:fe:8b:5a:6c:e1:
5c:74:a8:f1:33:bd:d9:21:83:11:e0:ab:92:ca:b3:
66:42:2d:f6:ee:27:a0:fe:6a:0b:ea:6a:2d:6f:9d:
ae:48:a9:f4:64:48:64:0f:41:d6:9c:c7:ed:82:50:
07:05:f8:0c:0a:bc:37:cd:24:5e:de:e4:a3:d4:68:
5e:97:04:32:0f:17:e2:6d:19:cd:d3:9e:17:fa:6b:
d2:7d:19:df:17:d7:ab:5f:d1:f6:e7:b8:bb:7e:4d:
d1:ab:03:ef:51:87:f0:e4:c0:d3:a4:0f:7c:27:43:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:28:F6:17:48:08:D2:63:06:7F:55:E7:45:E3:7B:20:0A:D5:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4000::/40
Signature Algorithm: sha256WithRSAEncryption
24:c0:db:2a:ae:e7:fc:b7:0f:0c:7f:ad:f3:01:2f:58:05:b1:
98:ad:d6:5a:05:3b:79:3b:b0:83:fb:12:7d:dc:5c:ad:c8:bb:
4d:1a:66:c0:fc:0a:85:e8:52:1d:1d:f9:46:99:6b:ca:12:46:
08:82:4b:67:8a:e8:f4:14:9c:f4:99:08:54:10:14:e0:e1:9e:
94:a6:86:78:88:0b:a6:ee:e8:64:47:36:2c:c1:70:20:c5:64:
28:96:8e:e9:39:b0:3c:f0:d2:15:4f:2e:f5:0c:b1:a1:37:76:
5f:af:bd:5f:81:c9:78:7a:29:56:3c:c9:b8:2c:4d:26:32:48:
a8:b4:6b:5d:05:2a:6c:cf:ec:6f:5d:24:87:a0:28:4d:35:d2:
bf:f2:51:77:87:22:9c:2a:db:aa:dc:b4:24:4b:b6:9f:65:69:
ce:40:da:fe:4e:3f:38:32:40:e0:9d:37:df:b6:90:4b:90:95:
51:ac:a5:9b:dc:1e:a3:a2:5a:e5:35:7d:1a:19:90:36:00:78:
67:e2:e0:33:11:2d:39:43:40:11:6a:76:af:2b:4e:e4:44:2d:
6a:14:28:21:63:21:fd:e1:46:ca:b8:09:7e:e7:2d:92:44:fc:
9f:0b:80:f8:97:80:48:66:a3:59:65:af:98:31:51:cc:0d:d1:
2f:88:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:46:57 2025 by rpki-client