Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26750169-59df-4208-bbd4-d751d66a7b35.roa
File: 26750169-59df-4208-bbd4-d751d66a7b35.roa (raw, json)
Hash identifier: N+P+amzgLmKHvnuBp7ss8RVEBGlstunKGp3Zb+bKXlU=
Subject key identifier: 49:19:FB:F9:1E:5C:54:FF:0B:E1:BC:D8:07:C5:76:6A:61:D3:F3:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D38DD03E52371BE68CA349EA46094A0F5C70217
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26750169-59df-4208-bbd4-d751d66a7b35.roa
Signing time: Tue 20 May 2025 19:21:12 +0000
ROA not before: Tue 20 May 2025 19:21:12 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:38:dd:03:e5:23:71:be:68:ca:34:9e:a4:60:94:a0:f5:c7:02:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:21:12 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=37dd2f247b1e2e1ed2d10b09d7b883900954d8cd75bba737ae43762f8aae9fc0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e3:fb:7f:45:43:fd:94:d5:ce:65:48:d2:99:
4b:6d:75:d9:73:f2:24:8e:70:3d:18:d2:c3:16:c4:
8b:bd:46:d0:93:fb:f1:2f:40:f4:a6:84:76:c9:7a:
10:92:c0:a8:db:76:4b:27:a5:01:a9:55:7b:b2:c0:
8e:52:71:89:f8:50:a5:37:15:38:45:8a:f5:f1:7e:
96:33:83:58:a7:7f:23:54:c7:82:df:ad:1a:c2:d2:
21:4d:3f:2c:a6:24:62:48:db:6d:b3:25:95:48:79:
50:04:d3:68:12:78:87:b6:f2:28:8b:04:e5:08:b8:
15:b7:5d:ac:9a:57:e2:d2:85:26:b5:78:18:91:de:
fd:ca:0b:1a:dc:7e:da:4c:53:74:71:54:cd:4f:6f:
f9:61:9d:73:d4:4c:f4:ec:6b:b7:db:53:6a:46:df:
75:92:14:63:2b:8a:57:fe:d7:d0:60:19:24:e5:11:
64:7c:95:3a:61:42:8b:7c:d1:83:a5:e0:a5:3c:21:
3e:c9:10:fe:84:f6:9f:75:c8:31:59:24:d6:bf:cf:
5d:34:31:77:b6:d4:85:69:8d:c4:2e:82:02:af:77:
39:31:5f:db:15:43:17:7e:e3:1c:88:e7:21:30:b5:
66:c7:ee:d7:7d:f0:ac:eb:02:c6:41:0b:9d:e7:96:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:FB:F9:1E:5C:54:FF:0B:E1:BC:D8:07:C5:76:6A:61:D3:F3:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/26750169-59df-4208-bbd4-d751d66a7b35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:8080::/46
Signature Algorithm: sha256WithRSAEncryption
48:eb:9d:7f:33:36:af:c3:8f:b7:b3:65:d7:31:29:3f:7c:aa:
c0:e6:8d:3f:eb:42:8a:85:09:12:19:02:06:08:6b:ce:15:a6:
ed:96:34:31:fa:79:b7:83:77:89:ba:5d:2c:6a:a0:11:6d:90:
19:4c:e2:28:8f:25:58:35:71:15:65:e9:1c:b6:f3:34:b6:17:
26:a6:25:47:9b:22:5e:7b:c5:2b:aa:72:d5:7e:c1:77:f1:ee:
43:33:27:6c:2b:ea:fd:3c:71:0d:bc:87:70:0f:60:ad:b3:02:
99:dd:44:0e:e2:89:b5:1c:d2:c2:ea:49:c8:b9:49:b8:14:4b:
67:b1:f7:bb:aa:8b:cb:f6:cd:1f:2c:a6:43:f8:7e:5e:0a:0b:
0a:2f:04:a9:f3:05:4b:d7:f9:00:d0:06:99:4c:54:37:e6:bb:
3e:3e:47:a8:d3:b3:79:ae:82:65:bf:d9:a4:b9:b1:79:06:48:
22:1f:f7:e9:f8:aa:9d:7d:51:d5:11:87:22:0f:01:bb:48:cc:
9e:27:68:b2:a7:a1:c6:9d:c6:71:b0:dd:b0:d6:85:0b:23:80:
16:86:fd:10:f0:3e:93:27:07:4d:a4:e9:25:53:27:b1:e6:8e:
59:6e:8f:eb:a3:fe:69:30:10:f1:ca:e8:c3:98:8e:ce:4c:6a:
0e:f3:1d:3c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIULTjdA+Ujcb5oyjSepGCUoPXHAhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTIxMTJaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDM3ZGQyZjI0N2IxZTJlMWVkMmQxMGIwOWQ3Yjg4MzkwMDk1NGQ4Y2Q3NWJi
YTczN2FlNDM3NjJmOGFhZTlmYzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN/j+39FQ/2U1c5lSNKZS2112XPyJI5wPRjSwxbEi71G0JP78S9A9KaEdsl6
EJLAqNt2SyelAalVe7LAjlJxifhQpTcVOEWK9fF+ljODWKd/I1THgt+tGsLSIU0/
LKYkYkjbbbMllUh5UATTaBJ4h7byKIsE5Qi4FbddrJpX4tKFJrV4GJHe/coLGtx+
2kxTdHFUzU9v+WGdc9RM9Oxrt9tTakbfdZIUYyuKV/7X0GAZJOURZHyVOmFCi3zR
g6XgpTwhPskQ/oT2n3XIMVkk1r/PXTQxd7bUhWmNxC6CAq93OTFf2xVDF37jHIjn
ITC1Zsfu133wrOsCxkELneeWuiUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRJGfv5
HlxU/wvhvNgHxXZqYdPzMzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjY3NTAxNjktNTlkZi00MjA4LWJiZDQtZDc1MWQ2NmE3YjM1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HeA
gDANBgkqhkiG9w0BAQsFAAOCAQEASOudfzM2r8OPt7Nl1zEpP3yqwOaNP+tCioUJ
EhkCBghrzhWm7ZY0Mfp5t4N3ibpdLGqgEW2QGUziKI8lWDVxFWXpHLbzNLYXJqYl
R5siXnvFK6py1X7Bd/HuQzMnbCvq/TxxDbyHcA9grbMCmd1EDuKJtRzSwupJyLlJ
uBRLZ7H3u6qLy/bNHyymQ/h+XgoLCi8EqfMFS9f5ANAGmUxUN+a7Pj5HqNOzea6C
Zb/ZpLmxeQZIIh/36fiqnX1R1RGHIg8Bu0jMnidosqehxp3GcbDdsNaFCyOAFob9
EPA+kycHTaTpJVMnseaOWW6P66P+aTAQ8crow5iOzkxqDvMdPA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:48 2025 by rpki-client