Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
File: 60b690d0-a362-4547-bf57-d14f49f40869.roa (raw, json)
Hash identifier: qvmsJ8kt7fFNOLHuMLkxD3xbHs3l13JOqtgdIUnidmw=
Subject key identifier: 83:AA:77:1F:E5:67:27:7A:23:C6:58:6C:C7:60:31:C1:80:32:42:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6FC0EF45BF2AA31530A241E60294AA544E5A7DFC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
Signing time: Tue 05 Aug 2025 20:01:09 +0000
ROA not before: Tue 05 Aug 2025 20:01:09 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c0:ef:45:bf:2a:a3:15:30:a2:41:e6:02:94:aa:54:4e:5a:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:01:09 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=8197a1ddce0ceff69690d589ac7232beeb99a214da5f426fc962941aa35defd1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:f7:c4:11:1c:7f:40:90:1c:56:25:0b:ea:
7e:d4:4b:42:45:ae:f8:54:f0:f0:51:f4:e8:a3:9b:
dd:4e:9c:35:01:81:69:49:85:57:60:28:48:6a:ba:
24:a6:71:58:59:5f:f2:c5:98:a3:3b:e0:1f:1d:8d:
36:08:b9:39:88:ba:3a:63:2d:c7:62:b7:fd:a9:11:
65:29:2e:5d:ae:30:44:fb:ae:11:c6:3a:24:8a:8e:
e3:df:7b:1f:2c:28:ec:22:64:3f:11:63:55:43:8a:
80:08:8f:a3:ba:b8:ff:a0:7e:3b:7c:5b:c1:ff:20:
dd:65:94:8e:cf:b3:46:80:5f:4e:41:2f:dd:47:7c:
05:0c:5c:c0:b8:34:60:04:03:6e:0a:5a:c0:fc:51:
b5:89:29:04:a2:4b:88:c7:ce:e3:c0:08:79:05:d8:
db:a3:f9:fe:98:dc:0b:cb:0d:d2:58:af:a4:f0:e1:
88:a7:8a:af:de:ae:5a:4a:88:46:f5:f9:3e:bf:ea:
eb:97:fc:68:fe:c9:24:af:3c:97:83:f7:7a:d8:5b:
51:51:b9:5c:b9:39:c9:74:54:b0:ea:dd:86:db:5e:
c0:79:0d:41:3f:7b:2a:32:1e:cb:71:7e:70:b2:94:
d8:d0:79:b1:89:47:98:8e:8f:ee:d1:04:da:45:f9:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:77:1F:E5:67:27:7A:23:C6:58:6C:C7:60:31:C1:80:32:42:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/60b690d0-a362-4547-bf57-d14f49f40869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018:400::/38
Signature Algorithm: sha256WithRSAEncryption
ac:33:5d:6a:ec:ca:ee:81:17:d8:2f:c6:32:10:88:fc:6e:5e:
08:d6:a7:5d:85:75:03:26:ae:3f:1b:70:4b:6a:f9:1b:21:1a:
ff:e4:b9:92:72:b9:77:79:ce:f5:1e:3d:cf:ac:bf:fc:f8:99:
f7:d8:4c:6f:8b:48:6d:4a:40:c7:e4:46:63:23:71:63:9a:50:
91:46:6c:86:38:7d:67:1a:2c:92:75:c7:ef:c9:3f:cd:ed:69:
30:dc:87:b5:90:a9:65:ad:35:c7:24:ad:e5:f8:28:8b:ed:f3:
d9:99:2c:a7:3b:88:c9:ad:4c:92:1e:2f:f7:d5:a5:a4:75:23:
08:35:89:6d:4d:d1:65:c8:0e:b2:e2:f2:5c:4d:b7:12:e7:b0:
31:ca:f7:8e:62:da:92:ce:b7:ea:d5:fd:42:9e:05:e9:53:d3:
5e:79:d3:32:d8:bf:2f:aa:c0:ee:a4:20:b3:75:77:64:32:1f:
ac:fe:e4:ad:6c:f4:fc:89:e0:18:a6:4f:6e:2e:1d:3c:0d:56:
bc:85:18:a6:42:57:8e:55:b8:9f:1e:c7:49:b6:7c:40:71:ba:
94:b4:17:50:f2:5f:bd:60:41:c6:8f:72:82:72:76:07:fd:a7:
72:7f:43:3c:05:ac:dc:a2:f8:bb:7b:3b:75:0e:fa:2b:7a:c6:
3a:95:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:55:23 2025 by rpki-client