Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
File: 8bc6184b-4b16-4844-96e2-71541ff10974.roa (raw, json)
Hash identifier: 7bUI/k/50cWddeeyLwVwOUbe8LSuLB3cH/nsv6ipB0A=
Subject key identifier: 8C:45:21:75:FE:EB:E9:D0:70:F7:44:19:62:62:5D:F9:43:3A:29:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 557C1E2091DE7748FD57E2E1799002AD0EC4C26E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
Signing time: Tue 19 Aug 2025 16:50:21 +0000
ROA not before: Tue 19 Aug 2025 16:50:21 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7c:1e:20:91:de:77:48:fd:57:e2:e1:79:90:02:ad:0e:c4:c2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 16:50:21 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=a21a4570a0ed52de5aa134544f80a1326831e86db816cad298afba5861e1ed31, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:b7:21:75:22:92:30:db:9f:bc:df:2b:b6:
b4:46:b4:d0:e0:a8:c3:aa:3c:4f:95:95:1a:8c:4d:
e1:bf:13:2f:c9:b9:2f:c3:a7:d5:d6:4f:6d:de:78:
3b:70:35:32:a7:2e:d0:f3:7b:ca:f1:56:cb:6d:05:
3f:59:a9:cd:63:db:8d:e8:3f:8a:98:e3:f7:42:af:
f0:a6:11:bd:11:86:e1:ff:bc:cf:d8:00:d4:78:18:
26:6a:6f:96:e6:d8:d9:47:36:52:84:fa:6f:2a:d3:
d7:da:1f:68:75:65:cb:fd:e7:42:06:22:e4:1f:13:
ee:40:36:ae:e2:bb:34:66:4e:0b:3e:68:52:b4:aa:
c3:82:de:06:10:1a:a9:c2:25:b1:82:7b:5f:96:46:
b3:80:2a:c5:af:9d:62:bc:51:01:90:96:5f:15:b3:
42:a9:ba:c8:f2:af:0a:1e:53:76:9f:5f:62:17:76:
dd:a0:9d:0e:f8:61:f7:dd:ab:46:75:b5:59:2e:4f:
01:40:23:aa:70:7b:2c:55:e1:53:96:d4:61:90:da:
fd:cc:e3:d3:88:cf:39:c1:04:43:7b:34:0a:29:0c:
94:be:4f:b0:ee:ee:c9:92:0e:ac:53:e2:d4:30:0a:
2f:3c:cb:a1:ad:7b:95:a6:bb:5a:4e:d1:a6:79:79:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:45:21:75:FE:EB:E9:D0:70:F7:44:19:62:62:5D:F9:43:3A:29:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8bc6184b-4b16-4844-96e2-71541ff10974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c000::/40
Signature Algorithm: sha256WithRSAEncryption
8f:ce:66:80:5d:7c:07:08:9a:d2:e9:c1:6f:89:e7:15:b5:2d:
a3:b8:6b:a4:0f:a0:de:87:d5:ee:17:ae:73:f6:d5:ef:ae:8b:
6e:35:df:ea:fa:dd:f4:60:e1:93:40:39:28:f6:b4:98:f8:c6:
e1:c9:bc:23:51:78:9c:bd:7e:1c:12:cd:cc:ec:86:3a:58:f4:
6f:9e:2c:e8:85:a5:c8:7f:26:ce:8f:16:59:92:51:b1:64:8f:
50:ee:64:43:c3:6d:cb:ee:64:6c:be:c0:45:f2:bb:a5:89:c6:
6f:dc:5e:23:c9:7d:ab:56:ba:57:de:00:0c:6f:bb:a7:e7:cb:
13:35:f0:94:4e:c0:2e:90:fa:8a:7c:4c:48:ff:5b:8d:21:f2:
e2:98:2c:ab:1a:30:16:e5:40:db:71:33:c4:73:8e:3c:1e:77:
c4:f3:22:61:a0:10:39:01:a4:3b:40:5e:5b:57:ec:da:c2:29:
a1:d4:22:b0:41:79:03:f7:8f:ac:50:8b:1f:2d:0a:6f:93:14:
42:ef:a2:21:71:9d:92:b0:3a:57:07:d8:3c:66:44:ec:4a:94:
33:84:e1:4c:ae:ef:11:21:0c:ca:a2:f0:5b:db:26:d1:62:d0:
3d:34:a0:45:52:71:be:68:5c:fa:3a:dc:c6:85:1c:6f:cb:ad:
44:e2:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:49 2025 by rpki-client