Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
File: 36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa (raw, json)
Hash identifier: 1qcmD9K4n8GfBuP8pkNnsebUDT7/O1S0ROUhc0BZysU=
Subject key identifier: 51:8A:EB:6F:61:8E:A3:39:E0:71:58:5F:95:D9:B6:D2:C3:A2:D9:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D0E38A76464B36ECDB10FF66D399E0C44E02608
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
Signing time: Mon 01 Sep 2025 20:21:25 +0000
ROA not before: Mon 01 Sep 2025 20:21:25 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:a020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0e:38:a7:64:64:b3:6e:cd:b1:0f:f6:6d:39:9e:0c:44:e0:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:21:25 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=1ee11067ab039e103fda37540ba7ccdff52b0000a2e14082a39b70605c76d8d0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:64:f2:c0:cd:27:f0:bf:4e:79:42:c2:e0:
9e:22:81:83:c8:e3:dc:fc:dd:d8:4e:05:e9:86:72:
e5:18:eb:3c:37:9b:07:53:a1:ee:ef:2b:7b:e1:b5:
4a:97:e0:ce:45:0c:da:03:16:3d:2c:38:21:08:db:
7b:1a:b6:96:9e:cc:56:18:1d:4b:de:dc:eb:48:9b:
ae:47:75:94:fb:be:94:7c:af:2e:b5:05:3c:aa:8d:
86:a6:12:7c:88:93:c5:3d:56:04:7b:d6:f0:34:a5:
e2:69:a8:9f:ec:8d:70:f2:b9:80:7a:79:cd:82:7d:
c9:be:0f:93:fd:f9:28:f3:09:97:a5:41:43:7a:04:
f8:e1:e9:c1:30:16:95:91:ee:7c:f1:0c:c9:e6:74:
00:18:bc:2d:7a:db:04:1b:76:3a:7e:57:3f:ae:c3:
54:60:6a:10:5c:48:79:3e:f0:33:63:d8:4a:a7:a5:
53:7f:10:c1:f1:bf:89:b4:0d:3b:0f:a6:ed:bd:4d:
61:3e:b5:46:d7:71:c1:fc:a1:a1:86:82:29:2d:c3:
4f:ff:5e:04:82:59:7f:59:ec:72:07:c4:a5:0f:bd:
04:f3:d3:7d:ba:a2:66:f5:6b:c3:0e:c9:be:66:7c:
29:97:4b:4f:9d:00:d2:f3:a9:a7:e4:74:f2:3c:28:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:EB:6F:61:8E:A3:39:E0:71:58:5F:95:D9:B6:D2:C3:A2:D9:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:a020::/48
Signature Algorithm: sha256WithRSAEncryption
05:7d:a0:07:84:e7:6b:ea:a2:60:0e:8c:59:87:60:b0:f0:69:
6f:ec:68:49:fe:c5:5a:1d:b3:8a:f6:12:5c:b3:47:03:e6:39:
b9:19:e0:22:73:ab:d3:32:43:15:e5:e1:5d:30:3a:63:2b:28:
fd:8a:c7:42:53:5f:49:85:9f:cb:e5:3c:8f:05:f4:c1:33:5a:
b5:cd:5d:7b:e1:77:1b:51:12:f7:e8:a2:f4:c8:7a:1e:49:bf:
db:6f:cf:58:52:66:1d:31:60:01:13:ca:78:53:8d:25:a2:cb:
12:ac:2e:71:85:a9:ce:7b:a0:99:7b:4e:47:c2:8f:c2:b9:2e:
98:58:a1:04:d6:fe:fb:67:87:31:8f:6e:27:74:1b:c8:9d:d8:
d5:82:1e:5e:43:15:47:fc:9e:15:9e:d9:1a:00:5f:2c:68:5b:
36:71:cd:c2:9a:c5:e5:75:d7:91:fb:e7:1b:83:00:a3:1e:79:
9d:e2:c4:a8:a8:38:bb:5f:55:2a:28:7f:07:ac:88:43:97:91:
c5:fc:3c:95:c1:44:e8:88:b9:76:9c:d1:73:e7:1a:b3:db:0c:
d8:c9:40:a2:c4:7d:77:c5:bf:3b:b6:c3:a7:10:c5:b3:09:df:
3f:b7:09:88:24:42:74:24:f7:14:30:f0:38:26:10:a9:73:58:
5d:09:89:10
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfQ44p2Rks27NsQ/2bTmeDETgJggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA5MDEyMDIxMjVaFw0yNTEwMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDFlZTExMDY3YWIwMzllMTAzZmRhMzc1NDBiYTdjY2RmZjUyYjAwMDBhMmUx
NDA4MmEzOWI3MDYwNWM3NmQ4ZDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKetZPLAzSfwv055QsLgniKBg8jj3Pzd2E4F6YZy5RjrPDebB1Oh7u8re+G1
SpfgzkUM2gMWPSw4IQjbexq2lp7MVhgdS97c60ibrkd1lPu+lHyvLrUFPKqNhqYS
fIiTxT1WBHvW8DSl4mmon+yNcPK5gHp5zYJ9yb4Pk/35KPMJl6VBQ3oE+OHpwTAW
lZHufPEMyeZ0ABi8LXrbBBt2On5XP67DVGBqEFxIeT7wM2PYSqelU38QwfG/ibQN
Ow+m7b1NYT61RtdxwfyhoYaCKS3DT/9eBIJZf1nscgfEpQ+9BPPTfbqiZvVrww7J
vmZ8KZdLT50A0vOpp+R08jwoWz8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRRiutv
YY6jOeBxWF+V2bbSw6LZNDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzZmZGU0YzctMzA1Yy00ZTlkLThkMWYtYmE4NWMzNjUwMjc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACg
IDANBgkqhkiG9w0BAQsFAAOCAQEABX2gB4Tna+qiYA6MWYdgsPBpb+xoSf7FWh2z
ivYSXLNHA+Y5uRngInOr0zJDFeXhXTA6Yyso/YrHQlNfSYWfy+U8jwX0wTNatc1d
e+F3G1ES9+ii9Mh6Hkm/22/PWFJmHTFgARPKeFONJaLLEqwucYWpznugmXtOR8KP
wrkumFihBNb++2eHMY9uJ3QbyJ3Y1YIeXkMVR/yeFZ7ZGgBfLGhbNnHNwprF5XXX
kfvnG4MAox55neLEqKg4u19VKih/B6yIQ5eRxfw8lcFE6Ii5dpzRc+cas9sM2MlA
osR9d8W/O7bDpxDFswnfP7cJiCRCdCT3FDDwOCYQqXNYXQmJEA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 12:17:05 2025 by rpki-client