Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
File: c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa (raw, json)
Hash identifier: /uOu65pOXm08exOsg7FaYkGqC9rScmG+IbKZSyRHTdw=
Subject key identifier: 6B:6C:33:79:EE:75:F3:2C:99:92:54:1E:DF:B2:62:ED:ED:F5:20:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4CFA30FFEB5BAC8DEF8903FDF0911757E8570F6D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
Signing time: Mon 06 Oct 2025 18:00:35 +0000
ROA not before: Mon 06 Oct 2025 18:00:35 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:40c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fa:30:ff:eb:5b:ac:8d:ef:89:03:fd:f0:91:17:57:e8:57:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 6 18:00:35 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=ed284d5dc463c0c22cc2683c7fa4fde8892644e37868286f60d5aeb08783bc2f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:cb:06:e5:44:59:74:42:69:09:9c:12:0f:
2b:82:cb:c4:75:42:74:df:57:85:95:49:0c:d8:dc:
d3:1f:94:e7:80:36:c3:01:e0:2a:7f:f5:f0:c6:3a:
a1:6a:a0:27:42:ca:cc:6c:4d:40:1d:92:0a:20:62:
b4:b4:d1:6b:68:f3:1b:b4:7a:4c:f5:b4:62:b4:7a:
24:f4:98:68:89:b5:88:7e:e6:88:b2:c2:09:af:eb:
6e:8f:09:3f:df:04:43:96:cc:f4:78:bf:d2:ad:79:
9e:49:d7:bf:bf:97:5a:96:16:76:8d:95:6d:15:93:
d8:b9:7f:02:b2:c5:ae:8f:d4:4f:13:fc:bc:c5:ca:
83:43:43:21:89:0b:51:a0:49:ee:18:d5:4e:60:5f:
4b:b7:fb:e7:50:e7:d3:47:e6:46:53:23:73:c4:12:
f3:f0:e2:6f:a9:e8:bd:46:80:38:62:7e:ce:46:8b:
33:ad:1f:73:bd:e5:71:8d:10:e6:51:92:5b:ae:38:
da:f1:fa:14:63:c2:68:0b:0c:79:67:6f:58:8e:e7:
89:ba:e8:4f:2a:fd:9e:94:e6:3d:d0:45:a7:81:0c:
f7:0d:10:d0:61:72:dc:03:ee:7c:8c:73:1a:e3:04:
10:0e:8b:a1:c6:f3:6b:9b:63:12:83:3e:9d:d2:37:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6C:33:79:EE:75:F3:2C:99:92:54:1E:DF:B2:62:ED:ED:F5:20:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c47d9bf7-3e9b-4ad5-958a-dde7cadfa89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
8f:e6:8d:9b:fa:00:54:7e:6f:81:05:b1:92:59:43:b6:13:9a:
56:8a:03:0c:62:7f:eb:a8:01:7a:e8:28:da:b2:63:ff:b7:5a:
8e:93:65:15:0c:64:df:a2:c9:e2:94:0e:aa:5e:66:7e:7f:a6:
4c:46:ba:7b:58:5e:f6:24:72:e8:cf:3a:58:69:b5:6a:73:1a:
0d:e9:6f:da:03:8b:2b:b5:80:23:19:c2:d3:e2:ff:e7:e3:1e:
28:dd:02:39:1d:99:94:4f:70:56:84:af:c9:88:00:3d:36:7c:
4c:69:75:18:5e:7a:72:f8:b9:2e:28:c0:89:93:f8:9a:63:a2:
1b:8b:54:ff:b5:22:ab:54:8d:12:e1:7d:72:08:ee:bd:df:66:
11:13:86:3d:54:53:31:f8:70:d2:0c:9d:ff:b6:d7:f6:9b:b9:
61:2a:18:9b:1f:2a:40:42:0a:9d:2a:41:1e:1c:a4:6d:29:ec:
e1:df:71:eb:11:d4:e6:08:db:aa:73:42:5b:3a:cf:2e:85:2a:
67:ef:75:cc:1d:a0:7c:89:ab:b7:89:d6:7b:da:e9:33:95:ea:
b8:11:76:2a:be:27:4b:51:9a:56:15:78:50:be:a1:8c:10:21:
c2:a5:f4:3b:b6:6f:66:f5:26:4e:05:49:4e:2c:71:b2:7f:b1:
4a:94:bc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:29:43 2025 by rpki-client