Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
File: b0fb422a-c1ce-4269-b503-2c8145fc798a.roa (raw, json)
Hash identifier: 6lDB6fS3N3cCmt/WwndUNesnlKJluxguq8m5LqdpqX4=
Subject key identifier: F1:76:CE:37:FF:6F:32:60:3A:20:F1:22:AF:F8:49:44:E9:86:8F:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06C44E23FBE5D7554C910E06A3DB323F22C54440
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
Signing time: Fri 11 Jul 2025 19:20:10 +0000
ROA not before: Fri 11 Jul 2025 19:20:10 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c4:4e:23:fb:e5:d7:55:4c:91:0e:06:a3:db:32:3f:22:c5:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:20:10 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=6060756f69085cef44b57767fa6124db1829d6f6476a628ad88643694ee1e400, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:b3:c6:a0:49:fd:c0:6d:85:22:8f:ae:2e:
d8:3e:29:8c:4c:ce:43:54:8f:57:31:bb:2d:8e:da:
c6:dd:94:53:61:6c:b6:dc:b9:33:1f:38:7a:8d:86:
fb:21:c9:a1:cf:ae:50:74:5b:31:66:6e:58:0d:10:
77:93:f3:1a:2d:c4:f6:f0:8f:d8:a1:90:b9:77:f7:
e2:29:38:72:3f:0a:80:84:03:1a:53:15:3b:2f:b1:
40:ee:d0:d0:4c:fc:ed:f2:87:bc:c5:1b:f2:b5:43:
d3:d3:e9:97:6b:ae:30:3e:f0:42:5a:e8:75:6e:40:
ba:bc:ac:09:2d:c8:bc:8c:84:86:19:c3:70:ef:de:
f1:2f:98:fd:bf:1d:f4:6b:23:29:2e:97:44:dd:e9:
cd:19:8c:df:a6:cc:0c:b1:a8:b8:9c:9c:5b:47:39:
f7:b7:57:c4:59:44:9e:4d:56:f9:8b:24:76:36:a8:
02:75:b2:c7:c4:3a:de:7f:ac:66:86:be:c7:be:1b:
eb:81:b9:b9:e6:3a:05:bd:f7:07:ac:80:b1:ae:75:
a3:2a:61:34:a6:50:23:17:22:5c:e8:58:c8:a1:aa:
05:e8:60:84:1f:ea:5c:d4:af:08:9e:fb:43:a3:be:
50:39:63:7a:3e:55:fc:d9:79:67:d9:ae:55:07:6c:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:76:CE:37:FF:6F:32:60:3A:20:F1:22:AF:F8:49:44:E9:86:8F:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b0fb422a-c1ce-4269-b503-2c8145fc798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a020::/48
Signature Algorithm: sha256WithRSAEncryption
51:f7:94:28:78:65:1b:e9:04:dd:48:ff:ba:80:fc:31:25:dd:
f0:e6:70:a2:b1:b6:8f:54:a5:25:ec:12:1d:e4:c4:64:64:e5:
51:14:72:4f:7a:3c:40:40:df:f1:e7:e8:a8:80:35:a4:79:4b:
46:37:c3:bb:0d:e2:be:0b:5f:4d:37:42:35:ed:6c:22:b7:ad:
7e:ae:ea:a2:a6:c0:63:af:5f:c5:69:16:57:6c:e9:73:02:c6:
6e:4e:5c:e8:f4:3b:af:fb:49:5e:13:62:0f:93:28:ff:b2:29:
4e:26:b8:5a:90:3b:4d:11:f9:ed:57:94:40:b9:b7:93:9c:c4:
30:0c:23:8d:e1:5d:d1:cc:43:d0:c3:48:e8:0b:d3:ce:15:a8:
32:61:8c:74:a7:f9:dc:66:5b:d1:08:11:bb:ba:51:d3:d1:57:
79:a5:18:6f:90:44:5b:65:39:04:8a:39:97:2f:41:96:b9:69:
1f:e1:8d:a7:04:a1:af:1f:d5:a9:c4:d2:ab:e1:19:8a:9e:ca:
bd:35:ca:2e:e6:81:d7:ea:96:31:93:c8:2e:e6:ea:9a:f2:5f:
32:43:d4:7c:61:3b:cf:62:8b:3d:97:25:b8:1e:39:50:30:a3:
54:fe:8c:a9:5b:88:a4:0d:f4:47:25:55:f3:42:b3:4f:fc:e6:
15:7a:75:fe
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUBsROI/vl11VMkQ4Go9syPyLFREAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTExOTIwMTBaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDYwNjA3NTZmNjkwODVjZWY0NGI1Nzc2N2ZhNjEyNGRiMTgyOWQ2ZjY0NzZh
NjI4YWQ4ODY0MzY5NGVlMWU0MDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCSs8agSf3AbYUij64u2D4pjEzOQ1SPVzG7LY7axt2UU2Fstty5Mx84eo2G
+yHJoc+uUHRbMWZuWA0Qd5PzGi3E9vCP2KGQuXf34ik4cj8KgIQDGlMVOy+xQO7Q
0Ez87fKHvMUb8rVD09Ppl2uuMD7wQlrodW5AurysCS3IvIyEhhnDcO/e8S+Y/b8d
9GsjKS6XRN3pzRmM36bMDLGouJycW0c597dXxFlEnk1W+YskdjaoAnWyx8Q63n+s
Zoa+x74b64G5ueY6Bb33B6yAsa51oyphNKZQIxciXOhYyKGqBehghB/qXNSvCJ77
Q6O+UDljej5V/Nl5Z9muVQdsBdcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTxds43
/28yYDog8SKv+ElE6YaP4DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjBmYjQyMmEtYzFjZS00MjY5LWI1MDMtMmM4MTQ1ZmM3OThhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+g
IDANBgkqhkiG9w0BAQsFAAOCAQEAUfeUKHhlG+kE3Uj/uoD8MSXd8OZworG2j1Sl
JewSHeTEZGTlURRyT3o8QEDf8efoqIA1pHlLRjfDuw3ivgtfTTdCNe1sIretfq7q
oqbAY69fxWkWV2zpcwLGbk5c6PQ7r/tJXhNiD5Mo/7IpTia4WpA7TRH57VeUQLm3
k5zEMAwjjeFd0cxD0MNI6AvTzhWoMmGMdKf53GZb0QgRu7pR09FXeaUYb5BEW2U5
BIo5ly9BlrlpH+GNpwShrx/VqcTSq+EZip7KvTXKLuaB1+qWMZPILubqmvJfMkPU
fGE7z2KLPZcluB45UDCjVP6MqVuIpA30RyVV80KzT/zmFXp1/g==
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:43:54 2025 by rpki-client