Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
File: dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa (raw, json)
Hash identifier: vPNT1XnZlZtVetpOtejNckXIHaBSOzQ0VCTuez2ZzE4=
Subject key identifier: C6:4A:5F:88:E5:46:D3:A0:1D:E9:5F:BE:6A:F7:81:35:A7:12:CB:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B0BFD5C5DD1CC29C25682C3769B3DA14B1F1428
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
Signing time: Fri 11 Jul 2025 19:20:01 +0000
ROA not before: Fri 11 Jul 2025 19:20:01 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0b:fd:5c:5d:d1:cc:29:c2:56:82:c3:76:9b:3d:a1:4b:1f:14:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:20:01 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=22e89394bf9931dff14394569223d383ae9d4ff913e42fb4fe1f77f4924437c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:95:51:a9:cd:53:22:78:4d:06:24:6f:a8:
a1:56:76:18:4f:ee:fb:89:93:a4:97:b0:d2:d0:39:
e3:68:01:17:4e:ed:a5:88:f7:c3:82:96:cd:f6:58:
18:f9:a7:9c:63:61:4a:8f:c0:41:8d:78:cd:be:bf:
2c:02:98:14:9d:9e:36:09:87:de:bd:0d:78:f3:42:
af:bf:80:9d:33:8d:3d:99:d1:d3:9f:11:a4:4c:7c:
09:7f:14:e6:d2:d7:7a:9b:68:79:cd:a2:48:02:13:
ab:98:39:63:7f:c1:02:af:fb:06:58:ba:76:42:93:
38:68:ce:fe:d2:1f:6e:63:26:06:8d:b4:14:fb:a5:
fb:a3:ff:0c:16:99:82:8c:e4:89:8f:b3:eb:10:0d:
d8:a3:91:37:5e:1e:fc:92:cf:dd:1b:ff:73:04:e8:
0a:82:25:7e:eb:4a:97:17:a2:62:b9:c5:a5:17:a8:
d6:04:90:7f:30:ec:75:25:be:50:7b:fe:48:dd:03:
67:7b:52:c0:ec:0a:31:5a:60:a9:50:97:90:3e:78:
89:20:bf:36:86:a3:d8:76:87:fe:ae:2e:0a:ce:6f:
32:3f:ad:06:0d:4f:ed:9c:c3:3d:83:40:56:2f:ec:
62:6b:62:6d:69:6f:5a:6e:10:0d:50:3d:97:51:9d:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:5F:88:E5:46:D3:A0:1D:E9:5F:BE:6A:F7:81:35:A7:12:CB:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dc0aab4e-9dbc-4b68-938d-80202e3d0bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9040::/48
Signature Algorithm: sha256WithRSAEncryption
96:d1:7c:d2:63:ea:5a:ee:29:39:fb:98:0d:17:0f:a0:1e:84:
1d:1f:d6:10:59:41:1f:56:8e:a2:1c:1f:5a:bf:a9:44:e6:44:
08:90:ca:1c:7e:fd:84:9d:d9:57:21:bb:fd:24:56:81:21:db:
76:9d:a1:1e:5d:bc:fd:da:15:6c:b8:c3:96:fa:5a:db:fb:f5:
22:1f:23:1f:31:54:72:38:22:d2:9f:71:c4:92:dc:c1:5c:4f:
c3:01:42:32:b6:95:7d:a5:da:c1:3a:6e:e4:10:1b:b4:87:3c:
68:98:e5:fe:e4:8f:6a:d6:fd:40:2c:d0:a3:57:9a:04:66:36:
0d:de:fe:d3:3d:3c:18:e7:f4:8e:dc:02:4c:8f:7d:c5:18:55:
95:8e:88:50:70:9a:00:c7:9c:9f:0f:1f:1e:a8:22:22:dc:c6:
bd:94:f8:9a:ba:4e:2e:6b:87:2d:4b:26:fd:52:8d:63:f8:69:
63:46:44:30:83:66:66:2c:ee:5c:51:71:c6:09:50:73:70:90:
7b:23:b6:3c:8e:45:64:10:4c:e0:46:9e:f9:af:d8:fd:9d:b5:
43:2d:5a:8f:91:45:32:a1:ba:73:5e:1d:69:0e:12:4c:06:d6:
45:02:ea:92:44:a7:5f:d8:c9:35:71:54:ea:3b:d8:21:c2:39:
52:2e:7d:23
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUKwv9XF3RzCnCVoLDdps9oUsfFCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTExOTIwMDFaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDIyZTg5Mzk0YmY5OTMxZGZmMTQzOTQ1NjkyMjNkMzgzYWU5ZDRmZjkxM2U0
MmZiNGZlMWY3N2Y0OTI0NDM3YzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJTElVGpzVMieE0GJG+ooVZ2GE/u+4mTpJew0tA542gBF07tpYj3w4KWzfZY
GPmnnGNhSo/AQY14zb6/LAKYFJ2eNgmH3r0NePNCr7+AnTONPZnR058RpEx8CX8U
5tLXeptoec2iSAITq5g5Y3/BAq/7Bli6dkKTOGjO/tIfbmMmBo20FPul+6P/DBaZ
gozkiY+z6xAN2KORN14e/JLP3Rv/cwToCoIlfutKlxeiYrnFpReo1gSQfzDsdSW+
UHv+SN0DZ3tSwOwKMVpgqVCXkD54iSC/Noaj2HaH/q4uCs5vMj+tBg1P7ZzDPYNA
Vi/sYmtibWlvWm4QDVA9l1GdLs8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTGSl+I
5UbToB3pX75q94E1pxLLiDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGMwYWFiNGUtOWRiYy00YjY4LTkzOGQtODAyMDJlM2QwYmQwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+Q
QDANBgkqhkiG9w0BAQsFAAOCAQEAltF80mPqWu4pOfuYDRcPoB6EHR/WEFlBH1aO
ohwfWr+pROZECJDKHH79hJ3ZVyG7/SRWgSHbdp2hHl28/doVbLjDlvpa2/v1Ih8j
HzFUcjgi0p9xxJLcwVxPwwFCMraVfaXawTpu5BAbtIc8aJjl/uSPatb9QCzQo1ea
BGY2Dd7+0z08GOf0jtwCTI99xRhVlY6IUHCaAMecnw8fHqgiItzGvZT4mrpOLmuH
LUsm/VKNY/hpY0ZEMINmZizuXFFxxglQc3CQeyO2PI5FZBBM4Eae+a/Y/Z21Qy1a
j5FFMqG6c14daQ4STAbWRQLqkkSnX9jJNXFU6jvYIcI5Ui59Iw==
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:34:30 2025 by rpki-client