Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
File: d7bd85bf-2af2-46a0-91d6-f945e7063231.roa (raw, json)
Hash identifier: KXYzx03PytxTFTyRecCnZblU+sWlChZGrLKq1cWHrys=
Subject key identifier: 73:35:B9:2E:28:25:06:A3:30:F9:E4:77:47:40:5D:BE:EC:4C:ED:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 416DF7DD80AAFD011F7C542148BFD7B89B9C0ABD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
Signing time: Tue 05 Aug 2025 19:21:02 +0000
ROA not before: Tue 05 Aug 2025 19:21:02 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6d:f7:dd:80:aa:fd:01:1f:7c:54:21:48:bf:d7:b8:9b:9c:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:21:02 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=fc2a6cf46fee4d7a536c6584e09bc6bf33af72ef30cff019d7d8685d718ef1b9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:f2:22:87:23:06:0c:4d:e6:ce:87:7f:50:
dd:28:6f:16:0a:d2:74:c5:89:93:7c:d8:1c:ff:51:
58:d9:dd:04:6c:77:91:d0:88:d4:97:7b:a3:cd:db:
48:c2:61:8c:94:5b:e9:c5:a4:4c:22:92:31:85:05:
4f:b9:93:19:01:94:d7:52:68:16:06:ef:ff:9d:93:
a3:06:25:8a:5d:14:5d:35:45:f1:06:b0:c3:de:f6:
72:b4:ce:cf:03:b7:8f:de:03:30:94:fe:75:0c:e9:
ed:23:76:ed:66:b1:47:e5:76:21:49:ca:4e:19:b7:
12:ff:dd:d8:d1:22:b1:57:03:fe:0e:41:8c:e8:0e:
a3:7c:55:7a:73:06:8a:95:46:c2:d6:11:6d:d3:89:
e5:b6:4a:99:1e:7b:c5:ba:70:2f:71:43:82:5b:3d:
69:1b:ee:6d:54:92:ec:bb:1c:3b:13:e8:c7:34:0c:
ea:da:69:68:3c:6a:71:2f:c9:8e:8b:fc:09:a5:42:
2d:ab:fa:26:f1:38:42:f4:9c:41:49:d0:db:c4:10:
5b:d0:e4:83:fe:44:97:2a:4f:ca:82:3a:88:6c:31:
b8:f3:5e:ac:e7:46:b9:5f:32:6e:a4:8a:45:7d:ab:
23:c6:c9:f0:d0:3c:67:12:3c:ef:b8:c2:87:56:77:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:B9:2E:28:25:06:A3:30:F9:E4:77:47:40:5D:BE:EC:4C:ED:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:c080::/48
Signature Algorithm: sha256WithRSAEncryption
bd:12:8b:e1:cf:2a:55:cd:ee:b9:16:8c:05:d8:bb:4e:c5:37:
74:c2:69:28:b1:c8:78:aa:37:c1:bd:5c:cd:44:94:db:04:22:
b3:36:a6:2e:5a:91:11:cd:66:82:ef:83:f2:6d:7d:7c:72:3c:
cb:8c:4d:27:3e:a4:db:55:30:0f:a3:3b:7d:c1:a4:c2:8b:57:
e9:06:81:f8:37:bb:11:18:79:8d:81:76:95:61:00:fc:14:05:
ba:78:0c:36:6b:21:ad:9b:74:7e:b2:e0:b1:f2:84:01:a7:3d:
2f:46:03:76:90:42:23:3a:fd:f0:98:8b:36:2c:bc:be:08:ce:
e6:d7:a0:37:5a:85:df:77:79:ac:4c:d4:a1:be:e2:f6:ee:76:
d4:a5:48:ae:57:cb:43:10:d0:43:23:f9:bc:7f:3b:12:b4:4c:
d3:63:ba:cc:59:4d:6b:32:f8:ca:5c:38:59:25:65:51:30:e5:
4c:3f:6e:c2:c7:b6:3d:71:f3:f3:37:ae:d4:15:16:f6:6a:ca:
15:66:c1:ce:a8:f1:b2:4f:52:44:b2:71:ce:33:30:46:72:2f:
0e:4a:04:38:88:da:5b:7b:e1:bb:a8:15:53:7c:37:d9:cc:fa:
df:94:b6:3d:bf:21:c5:ca:79:f5:62:38:d2:1a:d9:81:46:2b:
fc:80:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:35:28 2025 by rpki-client