Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
File: 98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa (raw, json)
Hash identifier: 11oWK2feV3k/WJttCLFeXqO9oM8KFJw1QKwmFXFo2As=
Subject key identifier: 7A:06:74:C4:A3:26:95:C7:C0:9C:DD:7C:15:C6:F4:30:92:7A:35:64
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D1D9D64A9190CFFEC2D7AFB1580F57DDB5B9BF9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
Signing time: Fri 11 Jul 2025 20:41:22 +0000
ROA not before: Fri 11 Jul 2025 20:41:22 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d015::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1d:9d:64:a9:19:0c:ff:ec:2d:7a:fb:15:80:f5:7d:db:5b:9b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:41:22 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=2faf2de499b6f1935874ea23b9fafa7ef7531befaf8031a00cb28df6ab9d5417, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:4b:29:65:0e:19:df:7b:87:bc:29:dc:3e:
dd:3d:b2:14:b4:eb:40:25:e0:68:7a:f7:fc:5c:ae:
3e:77:20:89:9d:0a:15:5d:a5:1f:f0:49:50:05:a4:
45:91:59:7a:f2:22:2e:13:2e:09:c6:60:37:4a:fd:
8c:18:98:25:e7:03:9f:e4:a1:84:68:89:5b:b3:6c:
73:8d:c5:bb:9e:cf:60:7e:3e:91:fe:c6:8a:bc:a8:
71:91:02:89:54:e3:23:d8:9f:f9:6f:ae:79:ea:78:
03:5d:d1:bb:ad:96:8a:dc:18:44:34:33:ad:21:a5:
32:7b:bd:44:95:89:f2:16:17:db:76:19:00:ef:32:
4d:01:5e:9c:41:7b:c1:cc:a4:d4:8d:68:ff:8c:d6:
a8:8c:c4:39:73:fc:71:3b:24:d9:85:23:ff:a8:ce:
fd:e2:c2:10:96:7d:62:0d:ee:a1:b3:e6:ee:69:73:
60:a4:33:4c:1b:cc:65:b2:8d:90:06:e1:ae:aa:21:
00:0e:bf:fd:f0:17:45:0f:7e:97:da:cd:92:63:8c:
d2:d2:1b:a9:4a:5f:78:d9:06:04:a9:9e:25:75:ae:
e4:07:b4:8d:22:c7:92:0d:e6:ce:b1:76:26:27:55:
24:32:38:4c:b5:af:a3:30:2d:0d:dd:c9:9d:5d:f7:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:74:C4:A3:26:95:C7:C0:9C:DD:7C:15:C6:F4:30:92:7A:35:64
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/98cf55c5-bb4a-46a5-a667-901b1a2ffb4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d015::/36
Signature Algorithm: sha256WithRSAEncryption
30:a1:d3:a5:7a:4b:29:76:4c:d0:4d:4a:bb:58:84:df:9b:c2:
c8:06:f7:af:cb:4b:d9:82:73:33:fd:4d:55:26:d3:29:5b:5c:
34:aa:96:23:e6:fa:3b:a9:ce:6a:d9:fe:cb:c6:99:c1:58:53:
5f:ad:3c:d7:a8:b9:49:da:38:66:bd:78:5b:51:b3:6b:97:3f:
40:5e:f2:4a:d9:f9:d8:2b:fe:c7:02:9f:46:52:8c:77:fb:4b:
11:92:e3:9d:bd:4e:05:c0:42:ca:67:df:cc:15:4a:b6:e5:d4:
f8:02:11:11:6b:da:c9:c6:7b:31:c0:a7:f2:a4:22:44:2a:7d:
01:0e:7a:0c:60:e1:77:1e:9b:33:81:d3:81:9c:85:39:f5:28:
c1:6e:b4:c7:57:87:95:4f:7e:b6:87:28:2f:5c:0d:c3:2e:e5:
32:61:cb:46:88:c0:79:ad:a7:05:94:75:05:4c:e2:a3:60:85:
76:6c:16:e0:3c:0c:54:1d:1e:f6:b7:2a:ec:6a:5d:ff:96:1e:
93:55:97:4b:9a:bf:1e:11:76:02:47:b8:a4:04:11:63:8d:53:
07:2e:76:81:97:26:b9:6c:b1:ba:a3:1e:13:6a:23:05:51:f9:
0b:0c:51:92:b4:8d:af:40:5d:64:58:3f:20:c0:00:49:b9:92:
cc:d0:48:0c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbR2dZKkZDP/sLXr7FYD1fdtbm/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDQxMjJaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDJmYWYyZGU0OTliNmYxOTM1ODc0ZWEyM2I5ZmFmYTdlZjc1MzFiZWZhZjgw
MzFhMDBjYjI4ZGY2YWI5ZDU0MTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALJKSyllDhnfe4e8Kdw+3T2yFLTrQCXgaHr3/FyuPncgiZ0KFV2lH/BJUAWk
RZFZevIiLhMuCcZgN0r9jBiYJecDn+ShhGiJW7Nsc43Fu57PYH4+kf7GiryocZEC
iVTjI9if+W+ueep4A13Ru62WitwYRDQzrSGlMnu9RJWJ8hYX23YZAO8yTQFenEF7
wcyk1I1o/4zWqIzEOXP8cTsk2YUj/6jO/eLCEJZ9Yg3uobPm7mlzYKQzTBvMZbKN
kAbhrqohAA6//fAXRQ9+l9rNkmOM0tIbqUpfeNkGBKmeJXWu5Ae0jSLHkg3mzrF2
JidVJDI4TLWvozAtDd3JnV335MsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR6BnTE
oyaVx8Cc3XwVxvQwkno1ZDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OThjZjU1YzUtYmI0YS00NmE1LWE2NjctOTAxYjFhMmZmYjRmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BUA
MA0GCSqGSIb3DQEBCwUAA4IBAQAwodOlekspdkzQTUq7WITfm8LIBvevy0vZgnMz
/U1VJtMpW1w0qpYj5vo7qc5q2f7LxpnBWFNfrTzXqLlJ2jhmvXhbUbNrlz9AXvJK
2fnYK/7HAp9GUox3+0sRkuOdvU4FwELKZ9/MFUq25dT4AhERa9rJxnsxwKfypCJE
Kn0BDnoMYOF3HpszgdOBnIU59SjBbrTHV4eVT362hygvXA3DLuUyYctGiMB5racF
lHUFTOKjYIV2bBbgPAxUHR72tyrsal3/lh6TVZdLmr8eEXYCR7ikBBFjjVMHLnaB
lya5bLG6ox4TaiMFUfkLDFGStI2vQF1kWD8gwABJuZLM0EgM
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:33:21 2025 by rpki-client