Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
File: 7a5c899e-1564-4329-8939-7004d7b754c8.roa (raw, json)
Hash identifier: OhRV4uWIJySiW7+T/UWdTZk+kAt0d/mQuB4ayBq2DEI=
Subject key identifier: 37:AA:6E:79:9C:00:7A:D2:A1:EF:54:DD:7D:68:19:D9:C9:2F:60:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 38DB7D75BB9820732F4CF9BC8ED151EEC4599623
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
Signing time: Tue 05 Aug 2025 20:01:20 +0000
ROA not before: Tue 05 Aug 2025 20:01:20 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:db:7d:75:bb:98:20:73:2f:4c:f9:bc:8e:d1:51:ee:c4:59:96:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 20:01:20 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=1f17d2ef621180779aa480c06ebd45c78fd5d9ee2ec1fe661c1b0bbcf44e9818, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:8c:7a:95:9b:06:65:3b:46:fe:11:7f:28:
4b:62:ea:23:99:89:de:3e:ac:af:63:ed:75:5d:22:
06:c5:67:ad:f6:b3:5e:9d:c4:ed:83:ea:fa:e6:89:
9e:a1:e9:36:d8:a1:69:fb:0e:d0:62:89:e0:fd:db:
50:a3:23:9b:f4:7a:69:ad:c4:c7:f5:fd:90:5e:df:
9e:96:e0:a6:6e:87:be:89:ec:92:d6:ef:df:9d:6b:
b0:2a:90:d7:8b:9e:ad:7b:58:8d:b9:5a:f0:f9:de:
68:9e:7a:38:73:13:f8:7d:16:4f:5a:f4:ed:06:ac:
af:3a:b7:6c:34:cf:bf:fd:c3:f1:e8:d7:de:b7:63:
cf:00:3a:83:7f:df:48:0f:c9:49:3e:9d:1c:69:30:
22:32:e7:99:ea:82:a7:ff:4e:3f:ca:16:ed:94:59:
38:1e:4e:3f:25:12:d1:65:43:91:e1:80:d7:e0:5c:
d2:26:2f:94:c0:6a:1d:94:c2:44:5d:ea:03:ff:f0:
77:39:ce:af:4f:29:7c:ec:11:00:b1:87:97:fa:1a:
b5:5a:00:bc:a3:62:21:11:76:93:0c:e5:26:5d:1e:
41:30:5c:40:32:d0:af:1f:57:e3:44:08:65:18:c4:
d7:1d:7b:b5:8b:98:fa:da:b5:11:e0:38:50:03:a3:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AA:6E:79:9C:00:7A:D2:A1:EF:54:DD:7D:68:19:D9:C9:2F:60:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a5c899e-1564-4329-8939-7004d7b754c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:9000::/40
Signature Algorithm: sha256WithRSAEncryption
b7:b3:2a:bf:bf:9f:c7:b0:cf:67:a5:a6:15:21:c4:af:20:0c:
2a:fd:77:cc:31:c3:0a:ec:e6:37:1a:6f:a8:58:cc:f1:e9:b3:
84:d2:12:83:cd:af:bb:e4:15:1d:df:47:6f:b1:7e:a8:93:88:
82:a5:d1:9c:1d:63:c4:07:30:fa:15:6f:a4:b5:ca:0f:88:b0:
5c:3e:bd:60:08:a2:7c:39:7c:5a:f9:da:59:02:ed:73:02:53:
66:92:5d:d8:14:e1:98:0c:d5:21:f2:7c:3f:c6:18:eb:4d:ff:
6e:91:68:45:94:7e:cb:52:d6:96:0b:3b:b1:9d:87:ba:a8:69:
53:9e:83:43:db:a6:e7:92:ad:21:11:30:a9:f4:3f:4a:37:b8:
e6:29:48:9b:da:a6:cd:3c:b9:59:55:b8:10:5e:a0:34:7d:95:
13:8d:90:1f:38:5c:e6:ab:f9:a1:4c:bc:ec:bf:f4:ba:b7:a4:
62:0d:bb:01:b6:a6:5e:55:b1:5d:9e:7e:98:c0:86:4c:bf:5b:
b2:cd:df:3a:a8:73:61:ce:bb:db:ea:86:ce:1a:e4:c9:05:58:
b3:ca:ec:40:4c:0d:ce:ce:e0:50:5e:c1:64:ec:36:a0:0c:0c:
24:38:39:04:ad:fe:9b:d4:77:e3:b5:7f:82:34:7a:11:0a:cd:
6e:75:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:27 2025 by rpki-client