Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5246cdd9-6493-4560-b4c3-8d974de78b57.roa
File: 5246cdd9-6493-4560-b4c3-8d974de78b57.roa (raw, json)
Hash identifier: 4Y5sUzws9wSgeR4DuXkpWJI49DFfAJG3KAx/p+S7Vo8=
Subject key identifier: 18:1C:D1:45:48:AA:A4:99:46:CE:D0:00:0B:5F:CC:34:04:D0:5C:4F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76E9414C00C7521EDEE87F9C211384CD9633A281
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5246cdd9-6493-4560-b4c3-8d974de78b57.roa
Signing time: Sat 12 Jul 2025 00:50:46 +0000
ROA not before: Sat 12 Jul 2025 00:50:46 +0000
ROA not after: Sat 16 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e9:41:4c:00:c7:52:1e:de:e8:7f:9c:21:13:84:cd:96:33:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 12 00:50:46 2025 GMT
Not After : Aug 16 23:59:59 2025 GMT
Subject: serialNumber=4903b3ee35f75ff65737d8d5486f4d2aba2634508c099750da38f319bb22f7d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:b0:87:6d:0c:e5:77:b5:c8:5c:fc:ff:4a:
cb:0f:41:61:de:07:16:d1:5e:70:8c:de:4d:e8:31:
f9:0f:4f:49:f6:59:db:21:c7:3e:ce:a4:4a:2d:4c:
58:d7:1e:a3:3b:f4:3e:f9:c4:75:77:48:b6:a9:fb:
8e:a6:44:7b:05:cf:db:c4:0b:7a:25:96:14:2a:bc:
1f:93:2e:8a:71:aa:c6:1b:23:73:12:e6:64:8d:c8:
1e:bb:fb:64:e2:10:6e:aa:8f:f5:ea:5e:52:95:1f:
f1:0c:c3:ef:94:4f:49:d7:30:24:2d:bd:23:0f:d4:
3f:d5:c6:30:2d:98:0e:2b:07:20:87:91:9a:9b:e1:
8f:6b:3f:2b:de:24:87:fc:85:c9:dc:49:90:71:95:
a9:2d:e1:9f:41:84:3b:6f:a8:6e:f3:1d:fb:6f:fb:
44:8e:62:eb:be:67:f3:c1:ec:04:91:cd:e1:dd:02:
4a:f1:55:aa:73:cb:ac:c9:35:6f:6a:29:cc:ee:69:
29:d4:c6:f1:a2:29:d0:c0:ab:04:8a:26:0d:b5:15:
cc:34:82:95:2e:64:bb:ef:74:30:43:cb:2b:4b:74:
57:f1:35:16:ba:73:41:27:9f:08:5c:e4:4e:4b:07:
ff:41:40:be:cb:c9:a0:44:4e:dc:ff:fe:4f:c8:3b:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:D1:45:48:AA:A4:99:46:CE:D0:00:0B:5F:CC:34:04:D0:5C:4F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5246cdd9-6493-4560-b4c3-8d974de78b57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:c000::/40
Signature Algorithm: sha256WithRSAEncryption
9e:3e:b9:0b:c7:9b:d1:cb:82:63:17:ff:d3:7a:cc:fa:49:97:
b5:bf:16:0f:72:aa:e0:9c:bf:f1:6c:d7:2f:21:c1:15:83:0b:
12:eb:ca:ef:b5:9e:25:15:fa:bc:54:8f:8e:3c:56:85:5b:0e:
1d:67:53:3b:85:f2:65:a8:e6:06:d8:27:2d:74:c1:54:b4:59:
cf:78:c9:9d:68:3e:33:94:8a:18:38:50:37:e1:39:61:c1:44:
ed:2c:6d:c0:fd:bf:d1:fe:f9:00:76:3f:a8:0d:2a:18:57:73:
bf:f8:aa:85:00:88:d1:85:95:98:d2:30:b9:7b:5e:cd:22:03:
9b:39:11:bd:3d:b3:e4:8c:49:7d:be:94:26:99:e0:08:6a:9c:
1e:bd:0f:c4:40:30:9a:2d:42:44:92:5b:46:a6:e6:b1:43:20:
b8:0e:f0:37:d5:57:72:bd:42:8a:38:39:89:e2:fa:34:d5:ba:
d5:d5:5f:1b:6c:e2:a5:3b:0e:87:e5:d2:1c:66:42:2f:63:39:
14:e8:d4:19:9a:3c:2d:10:39:6c:8b:84:59:62:7f:82:0b:82:
46:ba:25:0e:11:7d:f9:f9:56:7f:6b:e3:92:f9:81:f6:76:22:
1b:ee:2c:93:2c:86:52:87:a7:3d:ee:4f:27:78:6a:1b:ce:a2:
bb:22:fe:8f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUdulBTADHUh7e6H+cIROEzZYzooEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTIwMDUwNDZaFw0yNTA4MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ5MDNiM2VlMzVmNzVmZjY1NzM3ZDhkNTQ4NmY0ZDJhYmEyNjM0NTA4YzA5
OTc1MGRhMzhmMzE5YmIyMmY3ZDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJnosIdtDOV3tchc/P9Kyw9BYd4HFtFecIzeTegx+Q9PSfZZ2yHHPs6kSi1M
WNceozv0PvnEdXdItqn7jqZEewXP28QLeiWWFCq8H5MuinGqxhsjcxLmZI3IHrv7
ZOIQbqqP9epeUpUf8QzD75RPSdcwJC29Iw/UP9XGMC2YDisHIIeRmpvhj2s/K94k
h/yFydxJkHGVqS3hn0GEO2+obvMd+2/7RI5i675n88HsBJHN4d0CSvFVqnPLrMk1
b2opzO5pKdTG8aIp0MCrBIomDbUVzDSClS5ku+90MEPLK0t0V/E1FrpzQSefCFzk
TksH/0FAvsvJoERO3P/+T8g7mFkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQYHNFF
SKqkmUbO0AALX8w0BNBcTzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTI0NmNkZDktNjQ5My00NTYwLWI0YzMtOGQ5NzRkZTc4YjU3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DjA
MA0GCSqGSIb3DQEBCwUAA4IBAQCePrkLx5vRy4JjF//Tesz6SZe1vxYPcqrgnL/x
bNcvIcEVgwsS68rvtZ4lFfq8VI+OPFaFWw4dZ1M7hfJlqOYG2CctdMFUtFnPeMmd
aD4zlIoYOFA34TlhwUTtLG3A/b/R/vkAdj+oDSoYV3O/+KqFAIjRhZWY0jC5e17N
IgObORG9PbPkjEl9vpQmmeAIapwevQ/EQDCaLUJEkltGpuaxQyC4DvA31VdyvUKK
ODmJ4vo01brV1V8bbOKlOw6H5dIcZkIvYzkU6NQZmjwtEDlsi4RZYn+CC4JGuiUO
EX35+VZ/a+OS+YH2diIb7iyTLIZSh6c97k8neGobzqK7Iv6P
-----END CERTIFICATE-----
Generated at Tue Jul 22 22:23:31 2025 by rpki-client