Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
File: 42b92c19-37c5-4b41-b1df-818a1569d759.roa (raw, json)
Hash identifier: L/NMRs/yZyb8zBbvxDOQgm5b3yNxcBLKcHX7MPQ+ocw=
Subject key identifier: 55:D0:5F:3D:72:4A:9B:79:E0:DA:FF:DE:78:97:BD:38:D9:02:14:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28D3BEF98A1D9D96E43D666A6E3E4799CB4613F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
Signing time: Fri 11 Jul 2025 19:41:39 +0000
ROA not before: Fri 11 Jul 2025 19:41:39 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d3:be:f9:8a:1d:9d:96:e4:3d:66:6a:6e:3e:47:99:cb:46:13:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:41:39 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=b98e244d277efdf5bcbc46754410b7e72dc25d5e60e1879ce249fd0e15d2c40a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:04:50:89:75:68:d2:66:41:c8:ed:37:70:
e1:7e:47:1e:ae:11:ad:99:c1:25:e0:2b:f0:74:f9:
a3:e1:8e:7f:e8:7f:0a:ad:82:18:ca:40:40:47:26:
07:90:e9:98:c4:f4:b4:a4:b5:2b:80:fb:d7:9a:b1:
dd:14:12:da:14:2d:7f:86:3c:23:0b:70:95:2c:ff:
1b:d3:b8:0d:58:3a:6b:5d:71:ed:d7:e3:d2:7e:88:
fd:ef:fc:2d:98:9a:84:c7:a3:11:75:a3:1a:6e:85:
74:5b:b1:f1:bb:3c:2e:f1:2d:65:e8:e5:a3:79:80:
58:b7:4a:ae:98:a5:79:1e:80:86:12:d1:f2:94:bb:
84:d2:bc:9c:8a:38:f3:1d:93:de:04:99:0f:6e:b7:
11:0c:c9:60:b3:fd:7d:90:c1:10:71:bd:05:af:33:
01:de:e8:c6:0c:a0:0d:a5:1a:fa:16:f6:13:7c:81:
60:4f:5f:98:07:d2:c3:ff:93:ce:f4:77:15:05:b1:
e6:21:fe:a6:b0:a3:25:9d:0e:3f:36:c4:fe:d1:04:
88:42:10:6c:70:8a:b6:97:6f:1c:9c:93:da:05:34:
a4:2d:40:9e:fb:d3:7f:c0:91:3f:5f:db:bb:d9:20:
70:7c:fe:c3:b0:2b:d6:ee:c5:c4:c0:f4:1a:a0:67:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:5F:3D:72:4A:9B:79:E0:DA:FF:DE:78:97:BD:38:D9:02:14:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2080::/46
Signature Algorithm: sha256WithRSAEncryption
a1:c8:a8:b4:45:d8:07:66:b7:e2:de:51:02:59:f6:37:53:b1:
82:52:f3:97:7c:d1:19:da:ad:a5:1e:df:ed:ad:52:80:60:7d:
40:02:41:53:c4:7a:d4:42:2c:77:1f:4a:c9:39:ac:36:3a:8a:
75:14:37:5b:bd:3c:3b:df:a4:a9:85:be:cd:98:05:05:76:b9:
dd:bf:7b:4f:e2:4e:9d:86:cb:e3:7c:b1:c3:48:ee:9c:9e:6a:
30:bd:15:05:cf:43:4f:93:ea:09:3a:2f:ba:45:b5:0f:33:5e:
4d:94:df:d0:da:f6:06:f0:b2:23:e5:0f:e9:e4:ad:27:7a:ce:
47:b5:b7:69:95:92:19:1e:42:01:91:9f:af:2a:41:87:d4:92:
75:4d:c3:be:7a:c4:71:e3:54:bb:38:37:7d:25:43:91:9d:c3:
c6:ca:36:67:cf:11:33:6e:49:79:15:f7:b4:69:47:5a:b0:8b:
68:a7:63:35:fd:b6:ca:10:ae:f6:4e:c1:0e:e3:aa:b4:f7:53:
02:cc:f6:b0:67:ad:a1:01:a7:73:61:5d:21:1d:9c:d7:62:06:
83:16:1c:3d:00:a2:6a:96:ee:74:1b:b1:81:45:9e:bf:b4:34:
48:f1:12:f0:95:ca:32:e0:67:1f:e8:60:e4:e4:77:f6:0f:1e:
05:ff:57:54
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKNO++YodnZbkPWZqbj5HmctGE/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTExOTQxMzlaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGI5OGUyNDRkMjc3ZWZkZjViY2JjNDY3NTQ0MTBiN2U3MmRjMjVkNWU2MGUx
ODc5Y2UyNDlmZDBlMTVkMmM0MGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvvBFCJdWjSZkHI7Tdw4X5HHq4RrZnBJeAr8HT5o+GOf+h/Cq2CGMpAQEcm
B5DpmMT0tKS1K4D715qx3RQS2hQtf4Y8IwtwlSz/G9O4DVg6a11x7dfj0n6I/e/8
LZiahMejEXWjGm6FdFux8bs8LvEtZejlo3mAWLdKrpileR6AhhLR8pS7hNK8nIo4
8x2T3gSZD263EQzJYLP9fZDBEHG9Ba8zAd7oxgygDaUa+hb2E3yBYE9fmAfSw/+T
zvR3FQWx5iH+prCjJZ0OPzbE/tEEiEIQbHCKtpdvHJyT2gU0pC1AnvvTf8CRP1/b
u9kgcHz+w7Ar1u7FxMD0GqBnL8cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRV0F89
ckqbeeDa/954l7042QIUsjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDJiOTJjMTktMzdjNS00YjQxLWIxZGYtODE4YTE1NjlkNzU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Hsg
gDANBgkqhkiG9w0BAQsFAAOCAQEAociotEXYB2a34t5RAln2N1OxglLzl3zRGdqt
pR7f7a1SgGB9QAJBU8R61EIsdx9KyTmsNjqKdRQ3W708O9+kqYW+zZgFBXa53b97
T+JOnYbL43yxw0junJ5qML0VBc9DT5PqCTovukW1DzNeTZTf0Nr2BvCyI+UP6eSt
J3rOR7W3aZWSGR5CAZGfrypBh9SSdU3DvnrEceNUuzg3fSVDkZ3Dxso2Z88RM25J
eRX3tGlHWrCLaKdjNf22yhCu9k7BDuOqtPdTAsz2sGetoQGnc2FdIR2c12IGgxYc
PQCiapbudBuxgUWev7Q0SPES8JXKMuBnH+hg5OR39g8eBf9XVA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:47 2025 by rpki-client