Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
File: 593bb6f2-1ee0-4352-97de-e329502838f7.roa (raw, json)
Hash identifier: CEjqw17dv8jUs/e/O0jgbuU+UN4/RPBysdnh7jHWy5U=
Subject key identifier: AD:F4:88:76:CF:07:08:CB:52:C9:4C:EE:46:DE:3B:B8:E2:B2:1E:70
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0DE3CEE7A1D197010EABC3F2B5D69F0F9DF67C9F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
Signing time: Fri 01 Aug 2025 17:11:04 +0000
ROA not before: Fri 01 Aug 2025 17:11:04 +0000
ROA not after: Fri 05 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e3:ce:e7:a1:d1:97:01:0e:ab:c3:f2:b5:d6:9f:0f:9d:f6:7c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 1 17:11:04 2025 GMT
Not After : Sep 5 23:59:59 2025 GMT
Subject: serialNumber=16e018eb6459f320fb221f6d8a981224c5e52588a3a038322916f6cc9a9e93ca, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:4d:60:97:08:1a:4f:60:b0:18:4a:d6:79:
78:2d:f3:52:2c:bf:cc:af:92:e5:ed:8a:cf:7e:df:
87:0c:f1:83:e5:24:ae:ba:39:ac:7f:a4:2b:a7:79:
0d:1f:9a:5e:e6:9a:3f:9f:a1:cd:71:ef:77:31:80:
4e:52:38:ae:c1:fd:95:b2:f2:0e:16:ec:2d:44:26:
47:f6:85:db:57:4c:5e:6e:5d:5a:81:82:15:d0:0f:
46:d9:f4:8e:37:7f:22:81:18:2b:ea:9b:0a:ad:b1:
dc:c9:a6:da:55:3a:13:22:8b:73:03:6f:bc:1b:a3:
43:34:0a:94:c2:21:0b:8c:d6:d7:4e:3b:f5:fa:34:
da:eb:bd:ab:e5:3c:a8:6f:5b:ca:da:2d:64:99:d6:
7a:b5:f2:43:ad:57:20:2a:37:af:4f:37:61:60:91:
77:19:43:46:27:cf:5a:c4:6d:9a:1b:f4:4d:d6:30:
95:80:cc:01:0f:07:a4:87:1a:b0:56:d5:3b:ba:32:
2c:0b:33:ab:2d:dd:13:0a:73:ce:26:50:0d:ed:d0:
c1:7f:ff:00:b2:7b:cf:b9:f4:70:8f:36:01:89:53:
68:db:36:8c:28:e9:c9:42:b1:cb:06:8e:c2:ea:41:
bf:a2:e8:ce:8d:57:e4:47:38:31:a8:f2:df:ee:23:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F4:88:76:CF:07:08:CB:52:C9:4C:EE:46:DE:3B:B8:E2:B2:1E:70
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/593bb6f2-1ee0-4352-97de-e329502838f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:800::/40
Signature Algorithm: sha256WithRSAEncryption
2a:87:1b:e4:1a:5b:98:96:6f:79:79:91:e7:20:62:33:95:3d:
5e:87:fe:4f:ba:c3:5e:57:84:e8:d9:03:3b:45:7f:a0:30:3a:
3e:ab:0d:de:88:ac:33:54:31:75:34:75:b4:1b:54:f2:66:fc:
4d:a8:7d:7e:e4:20:04:a0:cd:4c:4f:f8:45:74:4d:6d:15:78:
ea:04:21:24:b5:9d:b3:50:e6:68:a1:65:35:3e:6c:62:b0:e8:
8d:ea:0a:8d:93:41:3b:78:e5:dd:fd:ed:01:c0:29:85:dc:28:
49:8a:19:e8:2b:00:51:44:19:13:c2:64:c7:8e:8f:d2:02:75:
4e:67:c6:5f:29:f3:46:c5:37:b2:be:20:b1:d7:24:54:1a:f6:
22:27:7f:d0:f2:30:d4:83:05:24:e8:e3:bc:68:0d:05:a0:9e:
0d:b6:5c:e4:28:8e:ae:84:fe:fd:14:48:64:f4:a3:3d:2c:6f:
62:18:7c:71:48:53:59:23:25:b6:38:db:04:0d:e6:d4:58:af:
9a:5a:b1:29:ca:8a:a7:65:f9:88:d4:08:a6:1e:d3:41:ea:53:
4d:7e:ab:41:d2:78:d3:87:39:32:d6:b6:90:1f:7f:53:6e:71:
34:fc:55:33:d7:fc:20:b4:b4:d1:df:46:ea:ec:e3:75:bd:5a:
5c:d9:03:76
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUDePO56HRlwEOq8PytdafD532fJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDExNzExMDRaFw0yNTA5MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDE2ZTAxOGViNjQ1OWYzMjBmYjIyMWY2ZDhhOTgxMjI0YzVlNTI1ODhhM2Ew
MzgzMjI5MTZmNmNjOWE5ZTkzY2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfbTWCXCBpPYLAYStZ5eC3zUiy/zK+S5e2Kz37fhwzxg+Ukrro5rH+kK6d5
DR+aXuaaP5+hzXHvdzGATlI4rsH9lbLyDhbsLUQmR/aF21dMXm5dWoGCFdAPRtn0
jjd/IoEYK+qbCq2x3Mmm2lU6EyKLcwNvvBujQzQKlMIhC4zW10479fo02uu9q+U8
qG9bytotZJnWerXyQ61XICo3r083YWCRdxlDRifPWsRtmhv0TdYwlYDMAQ8HpIca
sFbVO7oyLAszqy3dEwpzziZQDe3QwX//ALJ7z7n0cI82AYlTaNs2jCjpyUKxywaO
wupBv6Lozo1X5Ec4Majy3+4jvb8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSt9Ih2
zwcIy1LJTO5G3ju44rIecDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTkzYmI2ZjItMWVlMC00MzUyLTk3ZGUtZTMyOTUwMjgzOGY3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DQI
MA0GCSqGSIb3DQEBCwUAA4IBAQAqhxvkGluYlm95eZHnIGIzlT1eh/5PusNeV4To
2QM7RX+gMDo+qw3eiKwzVDF1NHW0G1TyZvxNqH1+5CAEoM1MT/hFdE1tFXjqBCEk
tZ2zUOZooWU1PmxisOiN6gqNk0E7eOXd/e0BwCmF3ChJihnoKwBRRBkTwmTHjo/S
AnVOZ8ZfKfNGxTeyviCx1yRUGvYiJ3/Q8jDUgwUk6OO8aA0FoJ4NtlzkKI6uhP79
FEhk9KM9LG9iGHxxSFNZIyW2ONsEDebUWK+aWrEpyoqnZfmI1AimHtNB6lNNfqtB
0njThzky1raQH39TbnE0/FUz1/wgtLTR30bq7ON1vVpc2QN2
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:27 2025 by rpki-client