Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
File: d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa (raw, json)
Hash identifier: EXj+oXS+4Yv45Bx9nV0tBHE7KcsXGzrROmN5DU9yeho=
Subject key identifier: 4E:B9:94:C3:40:34:D3:4D:64:8F:25:AD:30:11:B6:2F:14:51:DB:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2810C7CA696B704F98292CBC20513744A51A812E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
Signing time: Fri 11 Jul 2025 20:50:56 +0000
ROA not before: Fri 11 Jul 2025 20:50:56 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d024::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:10:c7:ca:69:6b:70:4f:98:29:2c:bc:20:51:37:44:a5:1a:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:50:56 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=d09f897a4e0b0cb1794f26c304b64a2e59259a6646a9046bdcbf247bb0373af8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:f2:12:79:9e:cc:37:0a:90:9c:45:d9:58:
4f:0a:04:bf:c3:54:9b:bd:86:21:ec:c5:69:1e:58:
e4:7e:74:d6:ba:d6:da:30:f7:33:b2:e4:20:83:e1:
d2:b8:ce:5a:20:26:c5:c0:26:cc:e6:de:1e:97:ee:
23:42:71:23:32:f7:93:4e:bb:76:60:29:52:72:27:
9d:5a:13:8d:56:9d:45:cd:ae:e7:50:67:c0:28:2e:
b5:c3:22:ed:aa:0b:52:fb:2b:0a:08:79:93:4b:e4:
17:b3:94:f9:5b:5c:46:52:71:21:e1:2c:f0:8c:d5:
03:67:19:8a:97:aa:ce:e0:15:eb:6f:66:5d:d1:9e:
db:92:45:53:4d:ee:fe:ef:ce:a8:a1:1e:01:c2:2a:
8d:cb:2b:f5:c3:02:23:95:ef:49:43:24:45:e1:1b:
18:94:4d:04:14:e6:f0:11:a0:53:dd:36:43:5a:c9:
e7:67:20:03:1a:83:17:8e:2b:10:ff:f6:84:db:9a:
ae:d4:28:cc:59:08:e2:38:7e:ab:58:d9:44:60:98:
cf:71:27:c3:e6:77:83:2a:89:46:df:fa:6f:71:2b:
bb:12:7a:71:58:29:cb:79:1f:aa:9b:c4:ca:ad:56:
f1:a7:64:fb:54:5c:a1:fe:94:08:a2:32:70:71:20:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:94:C3:40:34:D3:4D:64:8F:25:AD:30:11:B6:2F:14:51:DB:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d024::/36
Signature Algorithm: sha256WithRSAEncryption
3e:f4:5d:6d:69:47:86:62:2c:72:31:7e:67:cc:05:81:b6:db:
4c:de:20:13:25:21:6a:2a:1c:0a:99:50:37:41:e0:2f:25:a1:
23:80:84:06:51:89:38:c5:e0:d4:b5:f8:6c:17:19:7a:03:ae:
97:8e:95:7a:d9:f9:c6:fd:95:bc:88:5c:f5:3b:19:48:71:91:
93:a2:08:32:76:79:d0:8f:2e:59:79:33:e5:ef:fb:51:17:95:
80:81:54:1a:ac:6d:c0:79:1d:e6:33:93:86:2b:08:d6:96:fe:
9b:53:79:a5:65:c0:da:ee:75:62:75:f7:58:9d:7d:f1:13:90:
70:2b:85:d8:fc:2e:a8:9e:29:a0:dd:54:50:fa:56:d2:05:43:
44:77:1b:a5:f3:47:61:17:6a:52:13:64:de:c0:0d:48:00:0e:
99:6f:53:73:10:2a:1b:74:ea:79:04:bc:b7:88:13:f3:22:28:
95:3e:2c:9a:ae:e7:38:a3:c7:94:4d:66:95:71:c0:dd:53:a1:
e9:88:88:4d:49:58:4b:5f:98:68:c3:3d:63:f4:dd:3b:b3:94:
74:ec:a7:ed:52:93:9f:4f:7e:1e:0b:9e:b4:aa:0e:56:06:7d:
d8:bb:5b:69:9f:ed:f6:1d:cd:04:cc:05:81:88:64:41:66:40:
57:99:12:3c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKBDHymlrcE+YKSy8IFE3RKUagS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDUwNTZaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGQwOWY4OTdhNGUwYjBjYjE3OTRmMjZjMzA0YjY0YTJlNTkyNTlhNjY0NmE5
MDQ2YmRjYmYyNDdiYjAzNzNhZjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKf/8hJ5nsw3CpCcRdlYTwoEv8NUm72GIezFaR5Y5H501rrW2jD3M7LkIIPh
0rjOWiAmxcAmzObeHpfuI0JxIzL3k067dmApUnInnVoTjVadRc2u51BnwCgutcMi
7aoLUvsrCgh5k0vkF7OU+VtcRlJxIeEs8IzVA2cZipeqzuAV629mXdGe25JFU03u
/u/OqKEeAcIqjcsr9cMCI5XvSUMkReEbGJRNBBTm8BGgU902Q1rJ52cgAxqDF44r
EP/2hNuartQozFkI4jh+q1jZRGCYz3Enw+Z3gyqJRt/6b3EruxJ6cVgpy3kfqpvE
yq1W8adk+1Rcof6UCKIycHEgAWUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBROuZTD
QDTTTWSPJa0wEbYvFFHbbzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDhmZjcwMTMtMDhiNi00ZTM2LWFiODgtYzRmOGJkM2U3YTA0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CQA
MA0GCSqGSIb3DQEBCwUAA4IBAQA+9F1taUeGYixyMX5nzAWBtttM3iATJSFqKhwK
mVA3QeAvJaEjgIQGUYk4xeDUtfhsFxl6A66XjpV62fnG/ZW8iFz1OxlIcZGToggy
dnnQjy5ZeTPl7/tRF5WAgVQarG3AeR3mM5OGKwjWlv6bU3mlZcDa7nVidfdYnX3x
E5BwK4XY/C6onimg3VRQ+lbSBUNEdxul80dhF2pSE2TewA1IAA6Zb1NzECobdOp5
BLy3iBPzIiiVPiyaruc4o8eUTWaVccDdU6HpiIhNSVhLX5howz1j9N07s5R07Kft
UpOfT34eC560qg5WBn3Yu1tpn+32Hc0EzAWBiGRBZkBXmRI8
-----END CERTIFICATE-----
Generated at Thu Jul 24 00:00:15 2025 by rpki-client