Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
File: 6dd22553-f0bb-4053-b6a2-363adf7209b5.roa (raw, json)
Hash identifier: QQoaeXkj3wAqgUCvfJSGBtGDDYJiuNQG+qNxoGEcflQ=
Subject key identifier: 73:64:95:80:12:28:3B:10:EC:F8:FC:FD:2F:13:A8:AD:B0:8F:A8:BB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10ECB5B96D3C26E9A72AD9EBE8B9677293CE6ECD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
Signing time: Tue 20 May 2025 19:41:30 +0000
ROA not before: Tue 20 May 2025 19:41:30 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:5080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ec:b5:b9:6d:3c:26:e9:a7:2a:d9:eb:e8:b9:67:72:93:ce:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:41:30 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=3979691d716310f932f0cc1d1dbb9a2ea2b786a390e71741ac3700c0de595b69, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:09:96:ab:98:33:e4:f8:28:8b:59:f1:b1:
b1:f4:64:bb:23:a9:31:15:dd:b0:02:d7:17:b0:7f:
06:0d:80:8b:f9:10:df:90:23:66:ae:ff:38:9b:cd:
f0:9c:08:1a:f6:82:9e:8f:67:36:6f:2e:e4:f6:ce:
d1:f6:b7:42:41:75:28:b7:a5:04:bc:52:dc:08:c8:
fa:78:f0:7b:1c:74:02:a9:50:a5:67:c9:00:bc:33:
a1:35:71:e5:6e:4b:43:9f:87:ad:32:36:8d:16:13:
bc:c3:1a:33:e3:9e:67:02:53:a6:8e:48:7b:ec:7d:
ab:4a:0d:bf:80:b5:62:40:ee:51:62:26:7e:be:34:
5e:94:de:a1:39:4b:e6:20:23:a1:10:43:9f:5c:3c:
17:ac:74:26:1f:84:a5:d9:11:45:a2:dd:4c:ac:69:
14:20:1b:78:10:d8:f4:2d:77:30:38:a8:95:35:28:
94:12:f1:47:51:9c:bb:8f:90:b4:92:99:d7:98:ce:
1c:54:5f:de:65:19:62:50:5b:85:27:f6:a2:b5:46:
3a:8d:a9:0f:97:3f:07:26:64:b4:6a:d6:a8:4a:4d:
18:c7:79:65:e3:21:50:37:73:ca:96:e7:97:98:b2:
1a:23:fb:31:d5:64:79:52:bf:59:fa:a3:88:1a:81:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:95:80:12:28:3B:10:EC:F8:FC:FD:2F:13:A8:AD:B0:8F:A8:BB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6dd22553-f0bb-4053-b6a2-363adf7209b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:5080::/46
Signature Algorithm: sha256WithRSAEncryption
4a:95:37:da:b5:4a:d3:5d:22:1b:fc:48:6a:53:22:a8:fc:f4:
58:f9:93:f8:2d:77:9f:0f:f3:45:3a:71:8a:9b:82:4f:11:cb:
1d:a6:44:03:eb:89:55:62:42:eb:89:1a:ba:82:a2:cb:2c:8d:
d8:b1:f2:47:35:8a:56:85:f8:a3:36:61:e2:8e:0d:ed:fb:fe:
97:21:4b:a7:1f:7d:23:76:a8:9c:3c:9d:b0:6e:df:f7:ad:32:
82:25:dc:9d:18:a0:05:e3:56:d8:22:ae:fc:b9:0c:3f:82:5b:
e7:36:52:30:46:18:1c:84:a5:46:fb:0f:56:98:1a:90:4f:fc:
ee:f3:7c:c0:10:4f:09:55:50:4c:96:cb:6f:54:99:37:a1:66:
4e:a2:fd:17:39:79:fd:6c:e9:05:72:0b:67:37:31:0a:31:6d:
6a:3a:f4:05:a3:97:4e:37:84:1b:a0:01:92:9f:c9:37:d2:b1:
21:31:13:42:46:76:57:a0:cd:e9:73:1e:c7:5a:19:5d:b7:0f:
0c:9a:ea:c4:de:a2:a5:4c:f5:e4:1a:97:1a:74:5e:fe:e3:44:
a7:6c:6a:ed:61:56:f5:cf:2d:b6:10:a5:47:57:11:8a:d0:8a:
b6:18:04:d7:d3:db:f3:89:a7:5f:0e:a1:f6:4c:4f:e5:8f:59:
ba:9b:20:88
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUEOy1uW08JumnKtnr6LlncpPObs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTQxMzBaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDM5Nzk2OTFkNzE2MzEwZjkzMmYwY2MxZDFkYmI5YTJlYTJiNzg2YTM5MGU3
MTc0MWFjMzcwMGMwZGU1OTViNjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANE6CZarmDPk+CiLWfGxsfRkuyOpMRXdsALXF7B/Bg2Ai/kQ35AjZq7/OJvN
8JwIGvaCno9nNm8u5PbO0fa3QkF1KLelBLxS3AjI+njwexx0AqlQpWfJALwzoTVx
5W5LQ5+HrTI2jRYTvMMaM+OeZwJTpo5Ie+x9q0oNv4C1YkDuUWImfr40XpTeoTlL
5iAjoRBDn1w8F6x0Jh+EpdkRRaLdTKxpFCAbeBDY9C13MDiolTUolBLxR1Gcu4+Q
tJKZ15jOHFRf3mUZYlBbhSf2orVGOo2pD5c/ByZktGrWqEpNGMd5ZeMhUDdzypbn
l5iyGiP7MdVkeVK/WfqjiBqBp9MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRzZJWA
Eig7EOz4/P0vE6itsI+ouzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmRkMjI1NTMtZjBiYi00MDUzLWI2YTItMzYzYWRmNzIwOWI1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HdQ
gDANBgkqhkiG9w0BAQsFAAOCAQEASpU32rVK010iG/xIalMiqPz0WPmT+C13nw/z
RTpxipuCTxHLHaZEA+uJVWJC64kauoKiyyyN2LHyRzWKVoX4ozZh4o4N7fv+lyFL
px99I3aonDydsG7f960ygiXcnRigBeNW2CKu/LkMP4Jb5zZSMEYYHISlRvsPVpga
kE/87vN8wBBPCVVQTJbLb1SZN6FmTqL9Fzl5/WzpBXILZzcxCjFtajr0BaOXTjeE
G6ABkp/JN9KxITETQkZ2V6DN6XMex1oZXbcPDJrqxN6ipUz15BqXGnRe/uNEp2xq
7WFW9c8tthClR1cRitCKthgE19Pb84mnXw6h9kxP5Y9ZupsgiA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:46:38 2025 by rpki-client