Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
File: 975dfb4d-ef39-4371-9678-ff7909080d1e.roa (raw, json)
Hash identifier: v9A9cI4wwHfUzxhdr6i2G3ArFg4V7f/0PlimalAQi0E=
Subject key identifier: C7:AF:F1:0C:0D:A8:6A:B6:DC:97:66:90:E2:04:A5:C2:0F:06:5E:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1675CB2E7755F9D04CFA0E3BF07DF20510BE09C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
Signing time: Tue 05 Aug 2025 19:00:02 +0000
ROA not before: Tue 05 Aug 2025 19:00:02 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:75:cb:2e:77:55:f9:d0:4c:fa:0e:3b:f0:7d:f2:05:10:be:09:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:00:02 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=fcd5802ebd940071f9388f6c5d49d77e612eefbd9df4a09ad211006205981960, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:25:07:11:f7:a6:1e:61:8f:ba:64:97:d9:
09:8b:65:1f:dd:7f:d3:3e:d5:8b:92:90:f4:39:fd:
12:d1:6d:65:75:a8:d7:f7:d0:ed:98:a8:df:4c:14:
d3:b5:e0:a9:cd:88:ff:8f:ae:af:55:dc:fb:87:ab:
03:70:16:ba:e2:b5:4d:67:a5:85:75:33:72:d0:4d:
42:b7:cb:76:72:c7:4b:cd:bb:c7:06:ec:90:93:dc:
1a:16:5c:0f:4d:ab:5f:97:56:ce:47:6e:03:b8:a7:
05:49:39:5f:7c:1d:6b:64:e2:58:a3:0b:17:4b:64:
54:7f:2e:a7:ac:01:52:9f:c8:54:63:85:4f:2c:13:
ab:c6:da:88:ec:83:11:6c:6e:92:58:16:5e:8d:b5:
ea:87:d2:f9:ec:ce:55:99:9b:57:50:0c:6f:48:e9:
46:c0:08:10:ce:cc:6c:d1:83:6b:05:6a:cd:50:f3:
53:fe:ae:c9:6b:6a:16:68:84:38:0c:aa:63:eb:fb:
3c:4e:d0:1b:ab:0d:a9:95:d8:04:15:7b:19:52:71:
36:a1:21:74:fb:1c:42:86:7a:a9:c2:89:2e:61:a2:
0e:82:e7:a7:c0:74:60:2c:9f:8b:97:3a:58:30:38:
48:07:57:ef:89:4e:70:b5:b4:ac:d8:b2:56:e2:f7:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:F1:0C:0D:A8:6A:B6:DC:97:66:90:E2:04:A5:C2:0F:06:5E:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/975dfb4d-ef39-4371-9678-ff7909080d1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:b080::/48
Signature Algorithm: sha256WithRSAEncryption
52:72:a3:b6:7c:99:9c:21:11:95:44:d5:6e:fb:ce:1f:be:e6:
ef:cf:9d:ba:04:89:a6:27:b0:02:30:d9:18:80:b5:13:15:f0:
51:e0:72:ff:3a:ce:16:1f:be:9d:d3:62:20:46:09:98:ac:9e:
11:23:0a:27:5e:8a:ca:95:60:0b:d0:a3:76:95:2c:7d:75:a6:
22:31:98:b3:7e:14:e7:13:f0:32:a7:33:86:e7:7a:f6:8f:38:
dc:2e:c0:17:8e:f9:fe:c5:7f:ab:af:b7:27:39:1d:0f:e1:16:
58:bd:08:d0:5f:9d:c7:c5:e0:04:d4:2b:b1:b8:e3:94:c6:f1:
76:d8:3c:5a:7b:32:d0:d3:59:41:86:8b:1d:d5:78:15:7e:36:
0e:e0:0d:b6:2d:30:04:6b:5e:52:66:52:34:28:ad:94:ad:3e:
d4:45:a8:fb:22:a6:2f:08:bb:60:00:06:8a:f4:39:94:4a:74:
ca:73:d0:53:5b:70:2d:de:32:fa:17:22:6c:23:91:8f:3b:36:
0f:28:62:47:57:7a:48:af:53:6d:3b:90:41:46:ef:a4:0e:af:
16:4d:be:a2:f3:6e:d0:6c:13:15:f1:93:33:e6:be:a0:09:23:
3b:2c:e6:60:48:fa:84:4f:d7:42:10:f5:78:e8:5e:9c:56:e4:
f2:01:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:45:20 2025 by rpki-client