Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: 7SEy8KdnjKIYmH/qaWWtI1OLBDYFRwFC0O6nFI/xZ6E=
Subject key identifier: 7D:2A:B4:52:96:35:08:0B:AC:1F:76:D9:FF:D9:53:E5:22:D1:62:74
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6AE560BEE127B1CAD10018D3DB83FCB40C268861
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Fri 08 Aug 2025 00:31:06 +0000
ROA not before: Fri 08 Aug 2025 00:31:06 +0000
ROA not after: Fri 12 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e5:60:be:e1:27:b1:ca:d1:00:18:d3:db:83:fc:b4:0c:26:88:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 8 00:31:06 2025 GMT
Not After : Sep 12 23:59:59 2025 GMT
Subject: serialNumber=c8908a2200d588c301f069aeb121ff0b313a7792e8c9c28deeb6409d292cdf86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:c4:8a:15:f8:57:d2:40:fd:d6:3c:9e:6e:
b8:40:56:a7:29:f9:af:5e:53:44:39:61:61:5f:ed:
bd:4d:f3:0f:2c:1b:36:43:4d:b0:e0:74:bf:9f:de:
72:ea:f4:3e:cc:6e:65:b3:2e:3f:2b:a2:91:84:71:
b0:c8:03:69:05:11:6c:33:7c:7b:c4:8d:0e:67:a0:
de:f7:29:a9:b0:61:2a:9e:41:65:b3:2e:c3:62:b9:
5e:03:c0:ca:fb:2d:c9:51:d7:33:f4:fb:7e:ab:85:
89:49:c1:97:94:49:0b:fa:54:03:52:a8:5f:07:79:
7e:d2:0d:f4:c1:b7:e7:dc:15:b5:31:8b:f5:45:63:
b2:ce:c0:bf:30:98:50:57:fb:fb:b6:e5:13:60:c2:
56:82:9c:06:01:e7:3f:81:ca:6a:44:4b:8f:5e:51:
80:ad:e2:b8:8c:69:57:9e:96:30:d7:16:aa:f8:6b:
c0:46:00:46:55:21:11:2a:c2:e9:1c:f7:e2:b7:e0:
02:02:60:b8:71:2e:44:50:e7:df:32:3f:bf:ce:7b:
f9:d4:5f:c1:09:1b:51:41:92:4d:62:dd:8d:76:23:
fb:f2:fa:d4:f7:c7:c9:51:d3:44:b3:5d:b9:c5:72:
c4:76:ea:04:ba:ad:72:2a:8c:4c:0a:11:45:d5:f2:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2A:B4:52:96:35:08:0B:AC:1F:76:D9:FF:D9:53:E5:22:D1:62:74
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
63:f0:c4:28:fd:28:3c:d8:f7:b3:eb:1f:59:e7:d1:d4:9a:6a:
eb:30:3b:63:1d:cc:34:17:fc:7b:e4:e8:a6:29:69:77:09:72:
62:70:3b:67:c6:90:4a:ff:c6:73:2b:d4:cc:62:cf:b9:ef:4a:
4b:24:a6:7f:5c:85:e0:a2:53:90:1b:a8:67:63:6d:67:f9:84:
90:78:c2:c8:13:64:30:d2:2a:e6:e5:a5:88:77:b4:b5:aa:32:
ea:57:62:14:81:7d:e3:12:47:d2:18:6e:3c:2f:2a:89:4b:b0:
19:1d:46:0e:1d:cd:3b:47:12:f3:53:94:4f:70:79:54:e6:ae:
00:59:20:9f:ea:cb:f7:cd:2c:60:6c:2b:75:bc:74:4b:0d:73:
b7:f3:00:51:9d:11:de:7f:7e:59:68:17:24:e6:f8:3f:4e:b8:
0d:66:3b:99:93:85:b9:94:d6:95:70:1d:ff:b2:38:ee:fd:40:
fa:b0:be:62:25:e9:a7:dd:56:91:84:35:54:a6:f1:86:0d:95:
49:8c:5b:cd:98:ee:59:1a:44:38:58:b0:8b:78:77:ba:79:02:
9c:8d:1b:b8:2c:db:72:ca:47:c9:d9:b7:4d:18:5e:8c:14:b9:
a4:d6:3c:8b:7e:06:29:b5:02:3e:94:98:a7:30:6c:20:8d:db:
a8:2c:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:53:05 2025 by rpki-client