Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
File: 786da755-a3b1-48c5-b605-b8cfe294d18b.roa (raw, json)
Hash identifier: H6drhMJqVS3duSi6l1eUQUL13qS6WjP3kKI6XrsPaew=
Subject key identifier: 70:4F:94:66:52:35:6E:0A:20:24:63:4E:65:ED:E8:45:79:78:13:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46386C2FD015945616F9D59CA7FD566E7295BB2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
Signing time: Mon 06 Oct 2025 18:10:07 +0000
ROA not before: Mon 06 Oct 2025 18:10:07 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:38:6c:2f:d0:15:94:56:16:f9:d5:9c:a7:fd:56:6e:72:95:bb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:10:07 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=8db366884ad8c25e580f47f8c5295800b0529119a3b9ae78985cf86cfb7b15b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:7d:ff:08:12:8e:9d:cf:06:84:c3:f4:66:
57:91:41:a4:ad:22:63:58:88:8a:78:cb:c7:b8:22:
32:93:0b:4e:f1:90:05:3a:d9:b7:6c:67:58:77:4b:
6b:32:6a:49:26:af:bb:dc:09:1d:ae:63:db:21:fe:
fc:37:0c:cc:5d:b9:02:20:e3:b7:3e:2c:31:5a:ea:
a9:9e:e6:be:ad:aa:1f:62:4b:93:4a:8f:00:fe:f6:
03:7f:45:66:bb:62:df:e2:79:4c:8a:ee:e4:5a:18:
f4:54:bb:e4:83:6b:01:11:30:b8:4a:8d:20:89:87:
1c:76:0c:35:c5:82:3d:70:c4:35:47:f2:11:ce:e7:
5b:73:c8:53:43:bf:64:d9:e7:d8:e6:bf:63:ac:3e:
9d:88:3d:1c:0d:a7:b2:72:ce:02:00:0a:4d:da:03:
0e:e8:a8:89:6c:ee:26:bf:6e:f2:0f:5a:7b:b4:c5:
c7:49:54:d8:98:52:7b:e9:01:28:27:2b:2e:b1:9e:
ef:b1:b5:2f:f6:b6:e8:00:4f:2c:01:48:a9:98:43:
3f:d1:12:d1:e1:1c:d4:1f:f3:b9:0e:c7:50:90:13:
3b:60:40:2b:08:ee:1c:70:88:9d:03:b6:7e:54:b6:
86:79:9a:52:37:88:d7:9b:89:a7:38:d3:7d:c2:86:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:94:66:52:35:6E:0A:20:24:63:4E:65:ED:E8:45:79:78:13:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/786da755-a3b1-48c5-b605-b8cfe294d18b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040::/32
Signature Algorithm: sha256WithRSAEncryption
49:85:28:44:09:7f:43:c8:71:7e:d0:35:9f:25:4b:57:7b:2c:
db:33:b4:82:0f:2f:81:57:e6:90:97:8a:50:72:b7:c3:ff:8f:
7e:18:ed:ed:2c:45:78:b9:82:41:f7:96:43:1a:de:4d:06:3a:
39:72:a5:58:c7:ff:50:f5:8d:fa:15:4b:b7:29:da:cc:db:f9:
75:ff:85:ae:99:36:8b:5d:0c:c6:a1:33:02:79:63:f0:e8:37:
85:06:a2:c7:5f:89:a5:04:bd:14:da:93:a9:c2:30:5b:0e:43:
e9:38:b0:89:28:41:9a:fb:eb:bf:b6:cb:61:b4:c8:30:6e:74:
9b:09:99:b0:30:f4:15:c8:2b:22:7e:fc:55:6e:fd:7b:f2:b8:
a2:8d:32:fa:7e:17:ac:d1:50:2d:8b:79:71:ca:fd:74:75:1e:
3f:66:17:1c:fa:07:ec:10:cb:e0:54:d1:65:ee:14:d0:5e:47:
0c:f9:f7:12:b8:0c:59:75:fa:f1:6a:10:3b:64:ab:c8:c1:65:
44:07:ff:b1:63:b9:93:6d:48:54:9b:e1:2f:b8:61:48:d5:16:
5f:46:2f:e8:72:bb:a6:58:d2:9f:e4:d7:0b:de:26:97:c2:2e:
40:89:61:f2:c1:14:ca:ab:eb:45:56:32:47:0b:70:a7:15:2b:
07:bd:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:03 2025 by rpki-client