Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
File: ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa (raw, json)
Hash identifier: YW6XfO8nZ8RCW/Vy6PMVBKVzmsh4AgebaE4KrvpZ9dM=
Subject key identifier: C3:A0:B5:69:17:5E:DC:07:40:85:48:FC:63:18:A0:A0:3A:FE:26:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C451421A333D756C9740EC0B8DF6B9C27DAC4C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
Signing time: Mon 16 Jun 2025 20:41:09 +0000
ROA not before: Mon 16 Jun 2025 20:41:09 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:45:14:21:a3:33:d7:56:c9:74:0e:c0:b8:df:6b:9c:27:da:c4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:41:09 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=437628e46bf6480efbea70665b8d87bfc1a3f111109506324f63bf23e52ccd12, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:bc:c6:d8:ae:5b:1c:ec:98:13:f4:89:89:
30:9a:90:d9:f8:87:7b:87:cb:0b:88:e2:bf:44:ba:
24:0c:9e:d4:78:53:53:41:dd:9a:d7:88:24:0c:75:
b5:d0:50:c9:54:cd:65:46:22:40:0f:e3:0c:96:9a:
fb:85:e3:d9:2f:1a:6d:b8:bf:24:47:ab:cd:5c:71:
f8:ea:c9:d6:60:6a:a8:f8:2b:16:5e:7b:f1:ec:84:
86:a4:74:69:38:b5:37:a7:ab:10:b4:0b:8e:71:46:
83:61:bb:54:e3:56:4e:2b:6f:53:ef:c9:6d:37:0f:
29:74:43:9b:b7:57:43:87:c0:60:ae:e1:d7:21:ce:
5f:01:cd:93:4f:9e:00:bc:df:97:31:59:46:a4:53:
30:c0:c2:7f:a9:06:ed:66:55:8f:97:ae:0a:01:73:
00:c8:ef:2f:96:4e:c6:08:2a:5f:64:56:15:97:81:
ca:51:2c:38:9f:29:28:cc:a1:86:1b:e4:07:99:03:
e3:1c:6f:be:d8:d2:d4:37:ff:01:44:a7:b3:00:d5:
0b:80:5c:65:97:0c:48:fc:eb:61:32:6a:6b:83:48:
f8:63:4a:0c:80:0c:14:0a:3d:85:96:16:9e:20:62:
b8:51:db:b6:1e:76:a4:a0:87:ba:f1:b6:ff:eb:1e:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:B5:69:17:5E:DC:07:40:85:48:FC:63:18:A0:A0:3A:FE:26:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4080::/46
Signature Algorithm: sha256WithRSAEncryption
66:1f:82:c6:b7:50:51:f4:00:ce:5f:4b:49:02:96:b7:a8:6a:
ad:1c:ae:35:71:25:8f:c4:38:fa:53:c2:29:73:f3:c7:9e:97:
38:3d:3f:8f:68:31:5f:00:c9:d7:16:12:52:67:89:68:e8:50:
30:9e:8f:f5:96:8f:f1:21:e8:f0:91:41:ad:41:56:17:21:39:
3c:94:40:74:53:f3:17:99:89:2b:e3:87:f1:fd:ce:a4:5a:02:
dc:75:3a:b8:6e:45:d6:94:55:f7:a7:bd:91:1e:48:7a:5f:1e:
51:be:9b:37:a6:b8:9a:66:1b:c2:f6:d1:bf:b9:35:5d:89:2a:
8c:78:bb:80:4c:be:69:7a:d0:d3:87:77:85:72:23:25:60:73:
b3:dd:47:bf:31:85:71:e8:10:8d:cf:ed:59:82:7e:89:c4:52:
06:e0:43:53:0d:e0:21:fe:e3:37:d4:e6:04:d2:77:94:13:8e:
7d:b9:53:d8:15:c6:e0:c1:bb:7e:9f:68:8f:c3:ff:70:ef:5f:
19:7b:81:22:23:a9:21:63:48:bc:b9:fd:5c:a0:45:a8:92:1c:
1e:ab:59:6e:5f:40:13:52:ea:cd:d9:ae:cf:b7:a9:9f:b5:7f:
ea:eb:39:a5:c6:6b:69:c1:fc:ba:53:66:24:ee:d9:8d:02:61:
f1:f5:df:19
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULEUUIaMz11bJdA7AuN9rnCfaxMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMDQxMDlaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDQzNzYyOGU0NmJmNjQ4MGVmYmVhNzA2NjViOGQ4N2JmYzFhM2YxMTExMDk1
MDYzMjRmNjNiZjIzZTUyY2NkMTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiYvMbYrlsc7JgT9ImJMJqQ2fiHe4fLC4jiv0S6JAye1HhTU0HdmteIJAx1
tdBQyVTNZUYiQA/jDJaa+4Xj2S8abbi/JEerzVxx+OrJ1mBqqPgrFl578eyEhqR0
aTi1N6erELQLjnFGg2G7VONWTitvU+/JbTcPKXRDm7dXQ4fAYK7h1yHOXwHNk0+e
ALzflzFZRqRTMMDCf6kG7WZVj5euCgFzAMjvL5ZOxggqX2RWFZeBylEsOJ8pKMyh
hhvkB5kD4xxvvtjS1Df/AUSnswDVC4BcZZcMSPzrYTJqa4NI+GNKDIAMFAo9hZYW
niBiuFHbth52pKCHuvG2/+seOQsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTDoLVp
F17cB0CFSPxjGKCgOv4mWDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGRjZDI5MzEtMWNiNi00OWM1LWFmNWEtMDE5OTlhM2NmZjNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HtA
gDANBgkqhkiG9w0BAQsFAAOCAQEAZh+CxrdQUfQAzl9LSQKWt6hqrRyuNXElj8Q4
+lPCKXPzx56XOD0/j2gxXwDJ1xYSUmeJaOhQMJ6P9ZaP8SHo8JFBrUFWFyE5PJRA
dFPzF5mJK+OH8f3OpFoC3HU6uG5F1pRV96e9kR5Iel8eUb6bN6a4mmYbwvbRv7k1
XYkqjHi7gEy+aXrQ04d3hXIjJWBzs91HvzGFcegQjc/tWYJ+icRSBuBDUw3gIf7j
N9TmBNJ3lBOOfblT2BXG4MG7fp9oj8P/cO9fGXuBIiOpIWNIvLn9XKBFqJIcHqtZ
bl9AE1Lqzdmuz7epn7V/6us5pcZracH8ulNmJO7ZjQJh8fXfGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:20 2025 by rpki-client