Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
File: 7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa (raw, json)
Hash identifier: 4ToQGubAlVulo0jDpprvUXhi8OPMxGhQyCf7G6q3kWU=
Subject key identifier: C9:CA:F2:4D:9A:27:95:B0:4A:98:67:18:DE:B8:E0:F1:79:D0:9C:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C235101EE8B12F50F69283B6B13017815DD8D52
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
Signing time: Wed 06 Aug 2025 00:51:24 +0000
ROA not before: Wed 06 Aug 2025 00:51:24 +0000
ROA not after: Wed 10 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:23:51:01:ee:8b:12:f5:0f:69:28:3b:6b:13:01:78:15:dd:8d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 6 00:51:24 2025 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: serialNumber=eb37458d54823723f4ba524055687a28b9cc22a5bf4084d9deb4d73bbc1311a2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:22:5e:4a:28:f4:58:52:32:ed:05:c1:1b:
81:02:e5:e4:ad:9c:f3:04:69:07:06:9d:ad:48:fb:
bf:7b:40:13:d5:a0:75:8c:20:bb:ff:fc:66:0f:be:
e0:d4:ce:04:5f:54:61:ca:5a:4c:c3:83:e8:e1:d3:
84:71:89:a9:a1:2b:9f:0f:da:31:45:8b:de:05:e3:
4b:74:d0:ea:6b:91:a1:84:09:b5:bf:95:82:1f:ad:
1d:16:1f:52:63:2c:fc:d0:01:e7:d1:e7:bb:44:d3:
6e:0b:10:82:ab:fb:a5:cb:cb:fb:5f:28:bf:26:82:
05:5e:d5:59:a2:6f:97:a9:41:26:c1:02:12:54:30:
0d:46:13:b4:41:49:4e:21:ec:c5:e9:e1:81:71:89:
36:48:c8:74:00:3a:f9:d4:44:04:25:58:5b:fb:14:
41:ef:4f:3a:a3:2c:dc:f3:00:11:c0:27:f3:57:7b:
6d:13:ef:df:28:42:a7:07:b1:5e:15:e6:d2:56:d8:
73:a9:27:af:8f:c0:7d:2e:12:87:74:c1:80:79:59:
b5:0f:c3:ba:07:3a:21:d4:1c:25:96:fd:e4:a0:a4:
1d:0d:3e:68:10:07:aa:71:c2:2a:f2:87:0f:8f:5a:
1c:c3:a7:d2:58:8b:ae:5b:1d:51:71:05:ad:ab:71:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:F2:4D:9A:27:95:B0:4A:98:67:18:DE:B8:E0:F1:79:D0:9C:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038::/32
Signature Algorithm: sha256WithRSAEncryption
a7:bd:da:7f:a6:7a:50:30:b8:49:ed:e9:d0:cf:b2:d5:32:d6:
6d:3c:ee:91:a7:da:29:b0:f2:36:5a:2c:14:f5:01:96:2b:90:
26:83:bf:cf:5a:96:94:eb:47:84:bf:67:f1:43:96:17:39:4d:
01:90:8d:5b:8e:6c:4a:98:b8:a3:ad:ed:0e:d9:12:b1:8a:66:
ff:5c:91:e7:b7:8a:0b:81:ea:87:02:a6:d0:f5:10:3c:7c:f8:
78:e8:ae:e9:74:f5:6e:f5:88:a2:55:9e:20:48:ab:c2:87:b5:
9d:f6:01:b4:81:c6:9f:c3:26:94:74:86:f0:73:8c:13:d9:fd:
96:93:30:93:b3:76:b9:30:6d:be:7b:29:9f:f8:f8:82:8f:9b:
ee:b0:67:76:13:e3:16:f5:45:9a:2a:19:6f:50:a7:73:48:c1:
ad:9a:34:3b:59:31:74:4c:b5:1d:0f:c1:56:94:b6:1f:c6:52:
c0:02:c3:22:30:1b:33:7d:ff:90:fc:48:5c:ba:05:af:9a:7b:
26:75:a8:51:29:d7:78:58:a5:15:77:da:c1:b6:83:aa:4b:9b:
63:75:da:fd:01:33:a6:b3:1e:f9:f2:54:c7:11:02:75:60:8f:
41:b0:d7:c7:28:f2:3f:85:0f:ed:63:3b:86:54:19:21:da:82:
19:92:c0:e2
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUfCNRAe6LEvUPaSg7axMBeBXdjVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDYwMDUxMjRaFw0yNTA5MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGViMzc0NThkNTQ4MjM3MjNmNGJhNTI0MDU1Njg3YTI4YjljYzIyYTViZjQw
ODRkOWRlYjRkNzNiYmMxMzExYTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJVZIl5KKPRYUjLtBcEbgQLl5K2c8wRpBwadrUj7v3tAE9WgdYwgu//8Zg++
4NTOBF9UYcpaTMOD6OHThHGJqaErnw/aMUWL3gXjS3TQ6muRoYQJtb+Vgh+tHRYf
UmMs/NAB59Hnu0TTbgsQgqv7pcvL+18ovyaCBV7VWaJvl6lBJsECElQwDUYTtEFJ
TiHsxenhgXGJNkjIdAA6+dREBCVYW/sUQe9POqMs3PMAEcAn81d7bRPv3yhCpwex
XhXm0lbYc6knr4/AfS4Sh3TBgHlZtQ/Dugc6IdQcJZb95KCkHQ0+aBAHqnHCKvKH
D49aHMOn0liLrlsdUXEFratxUzMCAwEAAaOCAiIwggIeMB0GA1UdDgQWBBTJyvJN
mieVsEqYZxjeuODxedCcPTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2RjZjAxNGYtYWY4OC00YWI5LTk5NzYtNzQ2ZWQ4ZGVjMWE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Dgw
DQYJKoZIhvcNAQELBQADggEBAKe92n+melAwuEnt6dDPstUy1m087pGn2imw8jZa
LBT1AZYrkCaDv89alpTrR4S/Z/FDlhc5TQGQjVuObEqYuKOt7Q7ZErGKZv9ckee3
iguB6ocCptD1EDx8+Hjorul09W71iKJVniBIq8KHtZ32AbSBxp/DJpR0hvBzjBPZ
/ZaTMJOzdrkwbb57KZ/4+IKPm+6wZ3YT4xb1RZoqGW9Qp3NIwa2aNDtZMXRMtR0P
wVaUth/GUsACwyIwGzN9/5D8SFy6Ba+aeyZ1qFEp13hYpRV32sG2g6pLm2N12v0B
M6azHvnyVMcRAnVgj0Gw18co8j+FD+1jO4ZUGSHaghmSwOI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:57:10 2025 by rpki-client