Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
File: de62bd05-103b-4cce-91d7-016f4ab26aa8.roa (raw, json)
Hash identifier: nj777lAfF0MIiie2ofEOfv6hXHzS+anj2Cog/Evgr+c=
Subject key identifier: 2B:BD:0F:5D:00:64:64:7D:56:F4:3D:D2:CD:A5:66:3A:AD:D7:B2:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7ED23FFF28B722C64989C67BA79CF4DAB15DA55C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
Signing time: Mon 16 Jun 2025 21:01:31 +0000
ROA not before: Mon 16 Jun 2025 21:01:31 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d2:3f:ff:28:b7:22:c6:49:89:c6:7b:a7:9c:f4:da:b1:5d:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:01:31 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=04b7d0405f9d66528356b5484ecbf9c44f0520a9dda14fdb677e76fc42bf0555, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:f1:90:79:d3:d4:ef:14:c7:a0:4c:9e:e4:
91:83:a9:97:15:ac:9e:cf:ac:13:2b:3b:e0:53:6c:
e8:74:c1:83:d6:85:5b:03:7a:cc:9b:86:87:ae:e8:
28:1d:a8:98:68:07:b1:7b:e4:c2:f3:cc:12:98:16:
d5:d5:d2:fe:ff:8e:67:49:e9:5a:49:be:dc:ea:a1:
b4:09:a8:c3:9f:7c:e8:36:07:c8:00:67:1b:bf:55:
40:68:fc:14:77:4b:2b:25:64:a4:7e:13:2b:46:10:
90:3c:36:8a:59:6b:26:84:a8:5e:9d:44:b2:ad:a9:
86:7f:1e:97:57:43:04:d1:ad:cb:b8:23:bf:a5:82:
6c:7a:5f:b6:bf:58:2a:a2:f2:74:73:e0:d1:ad:69:
31:22:ab:36:ad:36:f8:55:92:0e:54:81:59:98:59:
4b:40:d4:bc:50:27:ba:1e:34:3a:6f:5e:ca:3e:8e:
f4:ad:13:f3:54:4f:1b:51:47:a2:45:d5:94:b0:10:
1e:f9:90:61:54:7a:14:d2:5c:86:c0:7e:60:bc:88:
6f:9e:f2:04:8c:0f:8e:58:80:d6:a8:72:c8:b2:76:
8d:60:79:83:6f:1f:3d:28:ca:29:b1:f1:ac:89:61:
22:ee:81:e2:3c:67:40:12:2d:cb:3a:54:16:cd:ed:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:0F:5D:00:64:64:7D:56:F4:3D:D2:CD:A5:66:3A:AD:D7:B2:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/de62bd05-103b-4cce-91d7-016f4ab26aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:1000::/40
Signature Algorithm: sha256WithRSAEncryption
58:7b:97:1f:c9:ac:d7:99:9a:5c:16:17:78:d7:94:3b:26:34:
32:f9:d8:04:4d:ef:6e:8a:91:ea:73:9a:02:29:5b:92:fd:e7:
1e:72:20:7e:f3:d8:24:7c:81:68:fc:7d:d5:2e:77:42:d9:d2:
34:d0:ea:ae:69:c5:ea:4a:d2:25:05:4f:43:c0:73:0d:88:a4:
46:ae:6d:c4:e6:ce:78:2a:dd:34:8c:3a:0d:fa:79:91:11:74:
11:a8:88:dc:a9:2a:8c:84:37:df:1f:08:2d:95:e0:59:6b:e9:
f8:87:4c:e7:12:4b:f0:04:7b:18:46:1e:46:33:d2:98:ca:c2:
c3:12:12:3b:c9:26:c1:e4:ea:af:ff:1e:b7:f5:fe:91:be:c8:
bf:7c:e4:dd:b9:b1:b0:51:f1:9d:6c:3b:5c:d9:c7:72:02:17:
50:5f:48:47:26:9b:8a:ab:28:65:7c:6c:ce:9f:e9:ec:db:6c:
6b:fc:6c:33:ac:28:19:18:e0:29:3c:a4:5a:69:d6:82:ab:85:
bf:a2:a8:5a:5e:72:d2:23:5f:23:6a:1b:0c:a8:99:f4:98:df:
67:fa:57:e1:7c:42:6e:af:74:fd:93:e6:df:1a:9c:d0:50:5d:
03:8c:91:7a:ea:65:33:78:66:a6:50:54:14:48:cd:d4:99:d2:
b8:f5:e9:bd
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUftI//yi3IsZJicZ7p5z02rFdpVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMTAxMzFaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDA0YjdkMDQwNWY5ZDY2NTI4MzU2YjU0ODRlY2JmOWM0NGYwNTIwYTlkZGEx
NGZkYjY3N2U3NmZjNDJiZjA1NTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALF68ZB509TvFMegTJ7kkYOplxWsns+sEys74FNs6HTBg9aFWwN6zJuGh67o
KB2omGgHsXvkwvPMEpgW1dXS/v+OZ0npWkm+3OqhtAmow5986DYHyABnG79VQGj8
FHdLKyVkpH4TK0YQkDw2illrJoSoXp1Esq2phn8el1dDBNGty7gjv6WCbHpftr9Y
KqLydHPg0a1pMSKrNq02+FWSDlSBWZhZS0DUvFAnuh40Om9eyj6O9K0T81RPG1FH
okXVlLAQHvmQYVR6FNJchsB+YLyIb57yBIwPjliA1qhyyLJ2jWB5g28fPSjKKbHx
rIlhIu6B4jxnQBItyzpUFs3t/eMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQrvQ9d
AGRkfVb0PdLNpWY6rdey/TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGU2MmJkMDUtMTAzYi00Y2NlLTkxZDctMDE2ZjRhYjI2YWE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HgQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBYe5cfyazXmZpcFhd415Q7JjQy+dgETe9uipHq
c5oCKVuS/ececiB+89gkfIFo/H3VLndC2dI00OquacXqStIlBU9DwHMNiKRGrm3E
5s54Kt00jDoN+nmREXQRqIjcqSqMhDffHwgtleBZa+n4h0znEkvwBHsYRh5GM9KY
ysLDEhI7ySbB5Oqv/x639f6Rvsi/fOTdubGwUfGdbDtc2cdyAhdQX0hHJpuKqyhl
fGzOn+ns22xr/GwzrCgZGOApPKRaadaCq4W/oqhaXnLSI18jahsMqJn0mN9n+lfh
fEJur3T9k+bfGpzQUF0DjJF66mUzeGamUFQUSM3UmdK49em9
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:26:24 2025 by rpki-client