Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
File: 82baa148-3f1e-4e5f-a19f-3be140c60d34.roa (raw, json)
Hash identifier: 0C+ZNiZujboSRu7K8TBLZDAdmA3EBTWU8dKxjwJEltU=
Subject key identifier: 05:CB:CC:EC:B8:72:68:90:99:8B:CC:62:57:BA:97:DC:F7:88:93:E3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B78C21C60080E768E15825A61469222B0C7A654
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
Signing time: Fri 22 Aug 2025 15:11:19 +0000
ROA not before: Fri 22 Aug 2025 15:11:19 +0000
ROA not after: Fri 26 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:78:c2:1c:60:08:0e:76:8e:15:82:5a:61:46:92:22:b0:c7:a6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 22 15:11:19 2025 GMT
Not After : Sep 26 23:59:59 2025 GMT
Subject: serialNumber=9731afb30d05c6a28fa4c942e473cf5174ffac12ecae9f5d279d6db57d44469b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:e6:7c:ae:a4:e6:01:30:9b:65:37:64:13:
6b:fa:3e:87:1e:88:b4:1e:b4:fc:f1:4b:3e:9a:07:
49:fa:3b:16:0e:8e:51:46:04:ae:0b:0c:39:25:01:
b4:1e:71:31:15:b8:3a:f4:f7:df:4c:65:e5:4a:e9:
01:7b:62:23:5c:a1:79:85:70:4e:7b:23:0e:b0:04:
4b:92:16:ac:ca:1d:8b:f2:e7:0d:2d:7a:53:31:86:
81:d9:f4:60:48:3a:61:b9:05:50:44:4a:52:b0:85:
33:99:30:38:63:87:32:fe:51:58:82:b5:2d:d0:d9:
cd:22:ee:cc:54:76:cd:6e:31:1b:f0:00:a8:5c:28:
cd:34:e5:e1:29:ab:33:a2:da:9c:77:fe:c0:96:fb:
41:84:c3:35:af:e5:0e:91:08:40:0f:60:3c:db:16:
52:39:aa:9d:38:7b:d4:e7:75:89:a2:f3:e5:d1:73:
26:50:4d:79:57:0d:12:7e:16:cc:71:63:60:52:cb:
27:59:a8:92:26:9a:a6:1a:a7:63:39:ef:73:12:b7:
d9:ec:87:13:f4:ad:f8:18:a1:45:5a:00:4e:56:25:
e5:00:57:5a:64:d7:16:7d:8e:92:0e:81:ee:3e:f5:
92:b4:bb:99:bf:7b:83:bf:91:b3:4f:02:f3:59:e2:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:CC:EC:B8:72:68:90:99:8B:CC:62:57:BA:97:DC:F7:88:93:E3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:4000::/40
Signature Algorithm: sha256WithRSAEncryption
89:0b:70:55:44:04:ae:a3:f4:3a:45:23:49:28:ec:9b:b9:12:
f8:ba:94:92:03:96:1d:f9:c5:85:86:64:14:63:54:24:43:4b:
4c:b7:90:2a:b7:13:48:fa:ab:75:ab:52:20:7d:cd:48:f9:70:
31:0e:f7:4d:9b:ee:18:87:10:88:84:06:40:21:4a:3d:55:54:
d7:ca:cf:1c:0b:5f:f7:15:c6:63:da:71:f2:08:4f:73:95:11:
eb:33:a5:39:93:ce:f5:8b:65:4c:d2:d7:7e:bb:cd:60:ce:4b:
d9:ed:df:39:0c:34:f6:68:96:6c:a8:83:54:eb:c2:29:d7:61:
69:7c:d2:49:fa:f9:ef:9e:a7:b4:97:2f:de:68:e4:f9:4c:a0:
d5:aa:59:b3:bf:79:54:1a:2a:cd:1d:09:11:84:db:89:c4:69:
46:33:98:fd:b0:c6:2a:06:9c:01:7a:c1:44:22:97:bc:52:fd:
72:f2:6e:d0:1c:04:c6:eb:bf:2e:b2:52:cd:0e:ab:ec:a7:6d:
9a:e8:45:df:44:4e:b8:0d:70:41:11:f5:90:4d:71:9e:0c:7f:
b6:bb:0e:a9:3b:03:34:4d:0a:84:57:b7:dd:52:cf:9d:01:ac:
dc:2b:00:99:86:19:6b:f9:0f:95:8b:e5:53:71:d1:68:46:fe:
1b:4c:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:46:08 2025 by rpki-client