Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
File: d3564159-9d8d-43eb-bf55-66a4445d2727.roa (raw, json)
Hash identifier: mVkLEd90vcNhtlJyqLUXsTNCSEA3p034NKycVMp0tUg=
Subject key identifier: 0B:A9:28:0E:37:0C:49:03:F9:85:86:8F:B4:D5:F4:82:1A:F7:52:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A183C26EC84DC87C388F75E787123508B7FC4DD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
Signing time: Tue 05 Aug 2025 19:51:38 +0000
ROA not before: Tue 05 Aug 2025 19:51:38 +0000
ROA not after: Tue 09 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:18:3c:26:ec:84:dc:87:c3:88:f7:5e:78:71:23:50:8b:7f:c4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 5 19:51:38 2025 GMT
Not After : Sep 9 23:59:59 2025 GMT
Subject: serialNumber=237c58a42e27904bea744a729b9af4139f431d3d8d55f74cb18502d6ac8abc45, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:91:80:00:2a:44:bc:71:88:af:07:95:ed:
a7:41:15:4c:68:a7:ad:8d:95:60:71:10:d2:f4:7a:
d8:00:30:43:84:ad:0a:62:34:32:f2:b8:49:43:02:
c9:8b:cb:2c:32:f6:3c:35:70:52:19:a3:61:05:24:
3f:18:fc:8f:5e:52:fd:a4:b5:3a:83:7f:58:56:41:
d2:b0:fa:71:2e:0d:2e:c7:9e:54:0b:8b:12:62:d8:
a4:46:65:a6:cb:e9:23:d6:36:5b:49:9d:38:38:a0:
9e:9f:27:68:9a:f7:d1:97:cd:e8:c6:76:e4:a7:47:
09:7f:d5:37:36:89:a1:44:af:d4:27:27:19:b3:2d:
5e:6d:52:c2:3e:25:7a:84:08:d4:23:1f:f9:47:58:
ec:7d:a7:22:b7:13:ea:81:4d:7d:ed:25:67:13:a4:
92:78:b5:f1:29:08:23:42:45:38:16:94:57:e9:f0:
3e:3d:cc:e5:c2:62:18:8e:50:e2:12:ba:00:19:89:
d4:06:0f:02:e5:80:a0:a5:a4:60:a4:ba:cd:b5:08:
16:16:ec:ed:b5:79:7f:48:f5:56:2c:f9:03:c4:2d:
96:cb:73:9a:72:02:ff:72:82:54:3c:5a:c5:7c:c2:
5d:ff:4a:1a:f9:87:19:b9:27:f2:5c:21:41:01:a6:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A9:28:0E:37:0C:49:03:F9:85:86:8F:B4:D5:F4:82:1A:F7:52:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3564159-9d8d-43eb-bf55-66a4445d2727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:b000::/40
Signature Algorithm: sha256WithRSAEncryption
5b:c2:60:2d:63:84:7b:c6:60:e1:51:9f:79:ac:23:d8:75:c4:
ce:a7:33:c1:87:a7:38:1c:6e:24:cd:12:ef:47:1d:97:d1:cf:
8a:3f:36:5b:da:31:2c:a0:c7:e4:74:74:2c:a8:38:9a:56:df:
61:b2:6f:af:68:4a:83:83:3f:9e:fc:2d:c1:d1:d4:7f:cc:68:
e1:65:6b:56:e8:3a:dc:9e:98:21:2f:07:6a:20:32:a9:b8:4c:
a7:95:c0:cd:42:18:36:5a:e7:1d:d7:5d:5a:a7:9d:33:4a:6c:
fa:93:b9:eb:e5:43:b6:50:d8:bd:3a:66:41:23:b0:8c:b5:98:
0e:ef:e3:47:cc:f3:89:a5:1d:07:2c:60:c2:75:ea:b6:2c:3b:
15:11:1d:45:fd:a8:41:15:7e:27:20:1f:e8:78:2d:8f:d9:f8:
c1:76:27:14:ef:f9:9f:46:64:e4:50:b4:20:e7:14:32:2c:e6:
5c:d8:fa:a3:8a:da:d3:80:2a:bb:13:58:97:fd:9b:99:f6:18:
5d:72:e4:4c:b9:ee:1a:a9:4b:cb:f9:ac:ed:ac:84:f9:cb:05:
7e:b5:32:61:65:58:53:99:a0:fa:b4:3f:1b:5d:1d:32:8d:28:
ba:b4:94:a8:7d:00:5f:be:d6:df:6d:f2:e5:98:bf:c5:f5:2c:
be:64:78:e4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUShg8JuyE3IfDiPdeeHEjUIt/xN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDUxOTUxMzhaFw0yNTA5MDkyMzU5NTlaMHoxSTBHBgNV
BAUTQDIzN2M1OGE0MmUyNzkwNGJlYTc0NGE3MjliOWFmNDEzOWY0MzFkM2Q4ZDU1
Zjc0Y2IxODUwMmQ2YWM4YWJjNDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALF6kYAAKkS8cYivB5Xtp0EVTGinrY2VYHEQ0vR62AAwQ4StCmI0MvK4SUMC
yYvLLDL2PDVwUhmjYQUkPxj8j15S/aS1OoN/WFZB0rD6cS4NLseeVAuLEmLYpEZl
psvpI9Y2W0mdODignp8naJr30ZfN6MZ25KdHCX/VNzaJoUSv1CcnGbMtXm1Swj4l
eoQI1CMf+UdY7H2nIrcT6oFNfe0lZxOkkni18SkII0JFOBaUV+nwPj3M5cJiGI5Q
4hK6ABmJ1AYPAuWAoKWkYKS6zbUIFhbs7bV5f0j1Viz5A8QtlstzmnIC/3KCVDxa
xXzCXf9KGvmHGbkn8lwhQQGm52UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQLqSgO
NwxJA/mFho+01fSCGvdSMjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDM1NjQxNTktOWQ4ZC00M2ViLWJmNTUtNjZhNDQ0NWQyNzI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Haw
MA0GCSqGSIb3DQEBCwUAA4IBAQBbwmAtY4R7xmDhUZ95rCPYdcTOpzPBh6c4HG4k
zRLvRx2X0c+KPzZb2jEsoMfkdHQsqDiaVt9hsm+vaEqDgz+e/C3B0dR/zGjhZWtW
6DrcnpghLwdqIDKpuEynlcDNQhg2Wucd111ap50zSmz6k7nr5UO2UNi9OmZBI7CM
tZgO7+NHzPOJpR0HLGDCdeq2LDsVER1F/ahBFX4nIB/oeC2P2fjBdicU7/mfRmTk
ULQg5xQyLOZc2PqjitrTgCq7E1iX/ZuZ9hhdcuRMue4aqUvL+aztrIT5ywV+tTJh
ZVhTmaD6tD8bXR0yjSi6tJSofQBfvtbfbfLlmL/F9Sy+ZHjk
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:04:21 2025 by rpki-client