Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
File: caf40866-a0b4-4882-b28e-32602ae3e0df.roa (raw, json)
Hash identifier: 2te1N/SM4hqrNvJ/lDGrfTekNvWG+DemAHmT+9Ituk0=
Subject key identifier: A4:8A:45:68:0E:B7:A4:01:82:C6:22:27:E3:A3:C5:16:08:2A:C1:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1906B508838554F45AEAAFEB63DD897174446E71
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
Signing time: Tue 05 Aug 2025 19:40:38 +0000
ROA not before: Tue 05 Aug 2025 19:40:38 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:06:b5:08:83:85:54:f4:5a:ea:af:eb:63:dd:89:71:74:44:6e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:40:38 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=d810a1724de7a4a66b8d91dc96789eb89f5fc2c31a5800cc19e3c28bcede1afc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:e1:11:29:6e:59:3c:32:42:00:a5:cd:2f:
05:7d:35:10:4e:36:32:e6:5a:0a:66:6d:e2:0d:62:
d7:7f:63:a3:2d:25:8e:6e:04:c3:60:76:5c:48:2f:
72:32:30:ff:9a:80:a4:f9:6d:13:ca:51:80:a9:e7:
25:f6:ba:c3:3b:57:90:ce:f8:23:0e:ec:2d:0d:b0:
6e:92:c4:a0:4c:f5:de:97:29:9c:58:c2:5d:a5:bd:
8d:ed:44:97:f2:d4:81:40:ce:a1:f3:9e:e0:47:fd:
26:bb:e1:a7:00:f9:5a:cd:07:e9:eb:f5:f6:d2:58:
0e:d3:9a:dc:8d:5c:df:ed:8a:25:0e:b5:0b:3e:d6:
e8:f3:34:62:2c:63:a4:6a:f2:b8:76:52:6e:e9:69:
67:96:3a:47:0b:e9:3b:c5:30:7a:3f:20:95:ee:26:
f0:00:23:22:ca:21:cf:88:a6:00:76:41:e0:45:02:
aa:83:02:a5:1d:5e:fe:b5:98:81:d8:b9:b8:90:e9:
75:bb:5b:1b:88:15:23:5f:56:b6:d4:4f:34:0b:0f:
5a:72:fd:95:3f:83:f8:03:df:3b:e7:95:2b:b1:e4:
b4:88:bb:16:ec:58:4b:cf:87:21:cf:91:7c:e9:02:
e0:c1:cf:c8:8f:e4:e6:54:46:1c:d6:91:ba:85:8d:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:45:68:0E:B7:A4:01:82:C6:22:27:E3:A3:C5:16:08:2A:C1:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/caf40866-a0b4-4882-b28e-32602ae3e0df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:a000::/40
Signature Algorithm: sha256WithRSAEncryption
62:2e:f7:70:6b:7c:bd:01:c6:bd:5f:e5:b0:cf:a7:71:45:5c:
6f:21:7b:a4:33:31:1b:9a:92:af:89:dd:a6:81:c4:02:5b:47:
61:e4:66:fb:3b:51:78:fd:f4:53:29:7f:45:38:77:95:93:6d:
aa:0b:d4:05:f1:e5:fa:bc:86:5c:94:ff:31:cf:13:28:9c:6b:
22:88:ea:ad:64:75:84:27:2f:0f:40:1a:07:2b:30:52:01:b2:
b1:62:a2:95:09:17:a6:37:1d:54:32:0f:7b:ff:44:4c:c3:ae:
18:0e:42:a9:79:e8:02:94:a6:33:23:bd:0e:a0:1e:b6:90:de:
ac:f2:b6:8f:e5:fb:21:7a:ba:61:6e:db:3b:f3:62:09:7c:cc:
c1:64:ef:e9:6b:a9:da:9e:49:ce:4f:8b:c6:e2:5f:37:aa:4c:
b4:f6:1a:4c:82:a9:f6:75:a9:ed:9b:ed:09:12:4d:a2:a5:60:
23:0f:e1:b9:ac:b9:d0:b5:37:4e:94:12:d3:7f:1f:89:c7:a4:
63:89:14:e0:38:dd:09:1f:09:cf:6b:23:6c:2c:11:25:da:85:
98:7f:83:e2:dc:c2:ec:92:5a:b2:82:2e:00:14:f2:9a:b1:34:
b6:64:36:89:d4:6f:06:d5:63:17:0d:d1:46:32:e9:13:76:c9:
79:b3:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:57:04 2025 by rpki-client