Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/230141cf-8fb9-4d99-822f-f358fb907650.roa
File: 230141cf-8fb9-4d99-822f-f358fb907650.roa (raw, json)
Hash identifier: 1Ne3OlBlzp5Gtgzbqa4thnEw1sMvFPKPXa8MMoGU1ig=
Subject key identifier: 20:3A:E3:26:0B:90:50:5A:2D:2D:0B:C8:CC:7C:54:37:E8:9E:85:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0832FF1DF9FCB6BE4A86AF233F636C0053CEFC3D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/230141cf-8fb9-4d99-822f-f358fb907650.roa
Signing time: Tue 20 May 2025 19:51:58 +0000
ROA not before: Tue 20 May 2025 19:51:58 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:32:ff:1d:f9:fc:b6:be:4a:86:af:23:3f:63:6c:00:53:ce:fc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:51:58 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=63c8b00d0a739eebd4927058572d37a024b29456811e76bccc7ed212924ab081, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:a3:da:a7:61:fb:06:06:be:a0:76:c6:6c:
1b:12:58:9b:af:14:ea:3d:31:71:38:28:5c:6c:6a:
c7:01:a8:c3:b3:e8:02:8f:a6:ba:e1:e2:de:34:96:
ef:ab:eb:b8:9b:82:c3:4b:60:da:39:60:85:52:66:
ef:6b:d5:de:dd:c7:2a:da:76:f4:f0:74:88:6d:9c:
39:60:66:54:e8:38:03:51:ec:11:b2:59:18:b8:76:
49:0c:3a:2b:4a:83:07:d1:81:d6:cb:db:5c:da:dd:
c2:5d:94:39:bd:55:50:4b:d9:93:cc:36:a1:6c:e7:
e6:f2:7d:91:c3:b1:90:ee:20:70:42:99:31:19:99:
d9:15:3f:5d:57:c2:95:37:55:a3:f1:8c:21:33:bd:
2c:69:ca:93:1e:e6:85:69:c4:c9:bc:d9:9c:d0:ec:
91:f3:97:65:ab:ef:ed:61:f9:b7:ed:1f:af:9f:a0:
77:a5:e1:0c:99:4b:95:32:8a:be:e9:70:5b:9e:73:
cc:28:fd:af:78:79:69:2f:7d:19:a7:b6:f5:ee:8b:
66:dd:0c:35:e6:2b:40:32:f4:61:f7:72:08:ab:13:
94:8b:83:80:3e:93:81:ed:ec:5f:47:95:fd:58:5c:
cc:83:e7:b0:5a:00:86:2d:49:49:11:ba:ea:5b:70:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3A:E3:26:0B:90:50:5A:2D:2D:0B:C8:CC:7C:54:37:E8:9E:85:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/230141cf-8fb9-4d99-822f-f358fb907650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:6080::/46
Signature Algorithm: sha256WithRSAEncryption
b9:7d:4c:dd:c6:eb:50:64:dc:38:b6:b3:1d:2f:9b:b2:76:6a:
8f:1a:1f:63:b6:20:82:26:4f:86:2a:9f:ba:bf:38:c8:3a:06:
3a:ab:1c:5c:27:52:7e:e5:22:8d:6d:08:9b:24:d3:4b:9c:1d:
ab:b1:56:7f:f3:eb:2c:4a:16:bd:4c:bc:34:23:00:2d:aa:72:
06:fc:ad:e7:09:68:b4:34:8f:e7:b2:c4:be:b1:09:59:86:c0:
5c:a5:ba:d9:ec:ea:73:3c:5b:67:8b:19:be:4b:2a:05:a4:6a:
b1:8d:ee:23:61:28:bb:7a:8e:6c:ab:4f:02:bc:d0:09:86:9c:
33:c3:cc:6c:70:a4:d9:5b:f7:e6:ce:98:d1:f6:bf:ee:9b:14:
9a:57:0d:ed:47:e1:e5:24:b9:00:f7:ac:6e:ff:8d:5e:c6:e5:
75:bf:73:c9:29:cf:82:5f:cc:e0:d0:9d:8b:8c:6d:dd:b9:8d:
d3:cd:4a:2b:6f:e4:f1:35:70:7e:aa:57:1e:98:1e:94:98:ce:
c8:50:75:e7:de:ad:29:89:d2:84:4e:c3:93:00:9c:46:0b:e9:
76:d8:9b:d0:90:9e:89:02:fe:d5:7c:69:a4:7e:93:24:68:c3:
e6:64:63:81:95:96:d4:07:a8:36:91:d3:53:ad:2b:f7:47:db:
d1:da:c7:d3
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUCDL/Hfn8tr5Khq8jP2NsAFPO/D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTUxNThaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDYzYzhiMDBkMGE3MzllZWJkNDkyNzA1ODU3MmQzN2EwMjRiMjk0NTY4MTFl
NzZiY2NjN2VkMjEyOTI0YWIwODExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKuko9qnYfsGBr6gdsZsGxJYm68U6j0xcTgoXGxqxwGow7PoAo+muuHi3jSW
76vruJuCw0tg2jlghVJm72vV3t3HKtp29PB0iG2cOWBmVOg4A1HsEbJZGLh2SQw6
K0qDB9GB1svbXNrdwl2UOb1VUEvZk8w2oWzn5vJ9kcOxkO4gcEKZMRmZ2RU/XVfC
lTdVo/GMITO9LGnKkx7mhWnEybzZnNDskfOXZavv7WH5t+0fr5+gd6XhDJlLlTKK
vulwW55zzCj9r3h5aS99Gae29e6LZt0MNeYrQDL0YfdyCKsTlIuDgD6Tge3sX0eV
/VhczIPnsFoAhi1JSRG66ltwaAECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQgOuMm
C5BQWi0tC8jMfFQ36J6F+DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjMwMTQxY2YtOGZiOS00ZDk5LTgyMmYtZjM1OGZiOTA3NjUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Hdg
gDANBgkqhkiG9w0BAQsFAAOCAQEAuX1M3cbrUGTcOLazHS+bsnZqjxofY7YggiZP
hiqfur84yDoGOqscXCdSfuUijW0ImyTTS5wdq7FWf/PrLEoWvUy8NCMALapyBvyt
5wlotDSP57LEvrEJWYbAXKW62ezqczxbZ4sZvksqBaRqsY3uI2Eou3qObKtPArzQ
CYacM8PMbHCk2Vv35s6Y0fa/7psUmlcN7Ufh5SS5APesbv+NXsbldb9zySnPgl/M
4NCdi4xt3bmN081KK2/k8TVwfqpXHpgelJjOyFB1596tKYnShE7DkwCcRgvpdtib
0JCeiQL+1XxppH6TJGjD5mRjgZWW1AeoNpHTU60r90fb0drH0w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:28 2025 by rpki-client