Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
File: 19a2984e-942a-4280-ac0b-904c9860af2f.roa (raw, json)
Hash identifier: +6iF+Mf9SsveBnuH9EbZhq8EtuTjiOYSXRCZX0H9Uqg=
Subject key identifier: 23:37:A6:C3:57:56:E7:9A:02:86:10:10:8D:1C:DF:5B:7E:62:AE:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F0D96B2F13BBE54EE3F6E88CF5007BEE8418689
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
Signing time: Tue 20 May 2025 18:51:20 +0000
ROA not before: Tue 20 May 2025 18:51:20 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0d:96:b2:f1:3b:be:54:ee:3f:6e:88:cf:50:07:be:e8:41:86:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:51:20 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=65772d088a79929ef0eb6ff02da1c8504ebeac3167c342b5e72a601d4d4e9d3b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:49:26:32:3f:76:58:27:06:b9:c8:18:4c:
1e:46:f2:76:aa:ba:9c:1a:96:d5:10:94:29:21:13:
f8:d1:26:1c:73:d6:41:e0:68:70:d2:6e:e0:f9:52:
7a:e1:ec:11:61:6e:8c:65:b3:bd:2c:7c:93:69:a4:
18:ee:0d:b8:21:e2:63:43:f4:9d:bd:e7:b3:e0:1d:
ac:89:a5:e0:94:e6:70:1f:d1:f9:1a:26:3d:7f:5a:
91:86:93:52:5d:3d:a4:57:7d:20:34:c0:c7:83:b5:
d2:f3:fc:23:e6:7d:4e:0d:2b:da:54:91:77:cb:cc:
87:73:f8:71:27:29:62:5e:cb:d1:6b:87:57:66:ed:
b9:de:c8:76:84:0a:b1:5c:46:67:41:8c:72:16:4a:
b1:2e:ff:fa:63:84:ba:20:a4:66:da:ba:91:64:2f:
01:ce:4c:7c:34:a2:cf:72:c5:06:47:e1:ae:9e:4f:
41:b7:2f:1a:64:f0:cd:c0:6f:ce:14:7e:d4:83:71:
49:57:b2:f0:34:52:3a:64:d9:57:c4:d1:56:ca:c8:
49:c3:d3:0d:75:7e:ca:67:0c:35:f4:0e:ef:7e:0a:
ff:eb:14:a2:7f:29:18:ab:e0:a5:3d:36:23:3d:8a:
b1:f3:e5:df:5e:d7:bf:d0:a9:da:04:0a:ce:2a:ad:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:A6:C3:57:56:E7:9A:02:86:10:10:8D:1C:DF:5B:7E:62:AE:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19a2984e-942a-4280-ac0b-904c9860af2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8020::/48
Signature Algorithm: sha256WithRSAEncryption
29:46:a1:cd:ed:7b:c5:4b:ec:f1:8c:ea:07:13:3a:e1:d2:26:
61:82:dd:e8:fa:cc:86:79:c4:f5:d8:b3:fd:ca:3f:84:67:56:
28:90:a7:58:cc:bb:12:99:13:96:77:2d:54:a8:63:0c:d5:86:
60:02:64:a0:5d:b4:6f:50:3d:7f:c8:0e:f1:fa:2f:db:66:d4:
13:8e:7a:ba:de:a2:68:3f:be:cf:ec:07:9a:4b:11:43:8b:fb:
56:f9:d4:de:67:43:60:f1:47:50:27:8d:8e:d6:95:f7:ae:fc:
bf:a6:44:1b:ad:23:5a:a2:09:cc:11:05:3e:9c:f8:be:75:98:
a9:0e:56:b9:05:27:8b:43:8b:39:b5:3f:eb:28:a5:45:b2:a8:
ec:e4:b6:5f:de:71:f2:0e:c3:0a:a2:2f:b0:fc:08:12:01:1b:
a7:a8:57:c5:dd:8f:d5:1a:b8:2a:74:b2:45:61:cb:61:ed:68:
5c:3f:48:b1:db:12:dd:c4:d3:35:51:48:3a:bb:0e:03:7c:a1:
b0:3d:7b:45:2b:be:7c:c9:27:70:fd:3a:d3:06:d3:5e:ec:37:
01:9b:ff:61:9a:8a:4f:dd:58:be:ab:93:35:0c:b0:54:27:51:
87:90:2a:c2:4e:bc:2c:59:f6:86:b9:6c:40:c9:b8:62:4f:3d:
67:d8:7e:73
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTw2WsvE7vlTuP26Iz1AHvuhBhokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODUxMjBaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDY1NzcyZDA4OGE3OTkyOWVmMGViNmZmMDJkYTFjODUwNGViZWFjMzE2N2Mz
NDJiNWU3MmE2MDFkNGQ0ZTlkM2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN07SSYyP3ZYJwa5yBhMHkbydqq6nBqW1RCUKSET+NEmHHPWQeBocNJu4PlS
euHsEWFujGWzvSx8k2mkGO4NuCHiY0P0nb3ns+AdrIml4JTmcB/R+RomPX9akYaT
Ul09pFd9IDTAx4O10vP8I+Z9Tg0r2lSRd8vMh3P4cScpYl7L0WuHV2btud7IdoQK
sVxGZ0GMchZKsS7/+mOEuiCkZtq6kWQvAc5MfDSiz3LFBkfhrp5PQbcvGmTwzcBv
zhR+1INxSVey8DRSOmTZV8TRVsrIScPTDXV+ymcMNfQO734K/+sUon8pGKvgpT02
Iz2KsfPl317Xv9Cp2gQKziqt6vcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQjN6bD
V1bnmgKGEBCNHN9bfmKuXTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTlhMjk4NGUtOTQyYS00MjgwLWFjMGItOTA0Yzk4NjBhZjJmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKA
IDANBgkqhkiG9w0BAQsFAAOCAQEAKUahze17xUvs8YzqBxM64dImYYLd6PrMhnnE
9diz/co/hGdWKJCnWMy7EpkTlnctVKhjDNWGYAJkoF20b1A9f8gO8fov22bUE456
ut6iaD++z+wHmksRQ4v7VvnU3mdDYPFHUCeNjtaV9678v6ZEG60jWqIJzBEFPpz4
vnWYqQ5WuQUni0OLObU/6yilRbKo7OS2X95x8g7DCqIvsPwIEgEbp6hXxd2P1Rq4
KnSyRWHLYe1oXD9IsdsS3cTTNVFIOrsOA3yhsD17RSu+fMkncP060wbTXuw3AZv/
YZqKT91YvquTNQywVCdRh5Aqwk68LFn2hrlsQMm4Yk89Z9h+cw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:18 2025 by rpki-client