Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
File: 7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa (raw, json)
Hash identifier: BudcFuSnV4iVgpCA8QDt/iJItYmL1NNXDLw22yHl6Mo=
Subject key identifier: 67:8F:B0:62:14:F3:01:7C:CD:A9:E6:74:E2:C3:B9:29:50:CD:F5:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 156580B1C25112DD8AD06730FC445F7E02DA0AC2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
Signing time: Mon 13 Oct 2025 18:00:07 +0000
ROA not before: Mon 13 Oct 2025 18:00:07 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:65:80:b1:c2:51:12:dd:8a:d0:67:30:fc:44:5f:7e:02:da:0a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 13 18:00:07 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=db39d50d26eddc518a1e97cc71f7d40cb87688fdd70272abcf719a0694a0940d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:04:d6:a4:61:8a:74:ef:92:35:b1:eb:48:
45:b0:21:97:cc:e3:b4:e0:25:c1:f7:fc:98:ab:18:
6c:de:b5:c9:9a:62:3a:5a:b6:c7:63:a3:9a:47:16:
0b:27:48:c1:92:1e:60:0e:09:4a:10:30:68:65:e7:
20:67:f4:f6:49:f4:13:a0:33:d1:02:ae:9f:08:2e:
e2:02:d5:dd:0b:b0:dd:3f:2f:44:f8:39:43:95:de:
f1:81:a3:83:76:e0:04:7c:4d:6a:c7:15:d1:b1:2c:
f5:ba:a6:ea:f0:8a:b1:5d:30:23:25:b2:d8:13:fe:
bb:58:06:02:a9:d6:f9:ae:9c:6f:93:07:a4:20:cd:
79:44:7e:f8:d6:8e:a4:29:63:45:f9:7e:34:0b:a7:
c1:5d:18:17:11:ed:79:d8:6b:aa:78:62:3d:12:3b:
56:d8:9c:50:d9:35:51:97:ff:83:92:ad:2a:98:07:
00:06:c9:8a:4d:d1:1d:08:07:23:a5:eb:49:10:7f:
d8:fd:73:65:32:0c:54:65:48:04:37:00:89:34:72:
df:4f:1f:12:e2:ed:3f:cc:9e:a9:11:0b:e3:19:15:
b7:15:ca:4a:76:97:c4:7c:3e:5b:3b:76:22:5d:54:
fd:06:40:80:1f:a3:8e:88:ca:a5:3f:fb:e6:65:b6:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:B0:62:14:F3:01:7C:CD:A9:E6:74:E2:C3:B9:29:50:CD:F5:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a1ea1f2-685a-4073-b22a-0a37f133b9dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:5000::/40
Signature Algorithm: sha256WithRSAEncryption
a1:c6:5c:01:f0:5b:53:14:9f:b0:e4:28:92:a0:54:bd:09:63:
ca:1d:1d:1c:30:b0:eb:5a:da:c7:a7:68:18:c8:71:5e:54:45:
da:cf:cf:b6:41:46:8e:ac:4b:c5:74:63:0c:d3:13:89:c4:3f:
a9:dd:f6:1c:5b:0f:77:3e:31:b2:fc:21:9b:f0:b8:65:ac:0d:
0a:6a:16:91:84:71:3d:43:92:16:79:22:20:25:ee:38:98:f2:
df:79:e2:9c:0c:fb:37:9e:57:fb:32:4f:93:d0:7a:2d:7f:20:
57:85:9d:2d:ae:32:84:f2:e1:08:e4:7b:37:62:df:97:e2:b5:
cc:7d:96:fb:a7:9b:f4:1e:0f:99:43:4a:7b:ba:ae:a6:29:8f:
cf:8a:07:43:83:0e:41:7d:13:54:e9:bb:41:2b:03:b2:7d:f0:
80:42:10:87:ec:69:53:f1:c2:ae:be:c2:60:8c:09:a5:da:69:
be:31:25:4f:aa:94:91:c8:17:da:2d:06:a7:ee:87:10:49:99:
00:8f:a3:4e:63:f4:a5:8a:f4:cc:69:76:41:0a:18:7f:d8:70:
46:43:2a:b6:fe:67:30:7b:56:fd:86:34:21:f2:c0:6f:09:33:
95:a2:f5:db:1c:38:1e:b1:95:a9:3d:0c:3a:f2:40:a6:c9:be:
b5:ee:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:31 2025 by rpki-client