Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
File: c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa (raw, json)
Hash identifier: j/pzF7ODkSbWmP5xyWPFRUkXG3LjBSNOTHl+IAuwN1I=
Subject key identifier: E3:6D:19:A5:02:80:F3:50:C3:8D:57:CF:96:13:D4:93:79:6E:26:C9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7911C2EB375FBD7AFB910CA1013C25CF78B6C35A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
Signing time: Fri 25 Jul 2025 16:50:39 +0000
ROA not before: Fri 25 Jul 2025 16:50:39 +0000
ROA not after: Fri 29 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d059:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:11:c2:eb:37:5f:bd:7a:fb:91:0c:a1:01:3c:25:cf:78:b6:c3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 25 16:50:39 2025 GMT
Not After : Aug 29 23:59:59 2025 GMT
Subject: serialNumber=3e86f0a22840180d2ed2acd07ca924b34af0dc447cb38611a092423d80c0c06d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:7a:ea:e1:57:2c:7f:d9:2b:fb:40:f7:0c:
4e:e2:30:f3:85:36:b5:b4:c7:aa:a6:80:fd:48:07:
41:a4:1b:94:6d:15:0e:68:cb:77:fc:e8:f5:04:a9:
3a:61:c1:f1:f2:7e:b2:19:bf:28:ef:1b:3b:08:54:
f0:7f:a3:fc:b9:b9:d2:e6:fd:85:60:75:75:8c:ce:
3c:64:10:28:31:81:ba:2a:0f:62:c4:39:54:8c:b8:
30:3d:67:41:18:5c:9c:67:77:63:d2:ef:0d:c9:66:
fe:48:63:1b:cb:35:d8:c4:7f:f3:f2:e5:23:49:a1:
52:b6:d8:8a:d5:9e:19:b5:65:b1:9b:1d:a2:8e:7e:
e7:1e:58:d1:3c:1f:6d:10:90:9c:f6:e4:99:a5:80:
a6:05:73:38:fa:2f:de:be:6e:62:1e:4d:f7:45:30:
d5:46:ee:19:7b:ae:fb:fc:49:0f:82:15:a7:90:18:
ad:e1:45:48:a1:32:9c:66:7a:3f:07:e5:d2:2c:81:
64:cb:d9:81:89:cc:cb:e6:1f:0a:4e:a3:cb:06:dc:
d2:e0:e1:2a:dd:cc:dc:12:c7:96:81:b9:9f:ab:83:
a6:14:e3:1c:ea:60:ec:db:3b:a9:af:c4:0d:85:15:
34:db:00:6b:09:af:b6:47:4a:1d:52:e8:60:19:c7:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6D:19:A5:02:80:F3:50:C3:8D:57:CF:96:13:D4:93:79:6E:26:C9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4a89105-f1c3-44cd-b2bf-287ed68055e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:c000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:ff:3c:2a:5b:9a:0b:66:59:04:8e:9e:37:d8:f2:62:23:34:
bb:0b:fb:77:4f:08:5b:e4:6c:65:af:da:fd:d7:06:5d:58:56:
75:28:eb:7f:c1:1c:4f:22:d4:35:43:8e:6e:7e:fe:3c:88:c8:
c4:e3:88:a7:6e:cf:37:03:d6:b5:70:1d:9e:b7:cd:5c:c1:24:
53:f3:f2:1b:79:fe:ff:67:86:dc:24:8f:72:98:b3:60:05:46:
10:61:e1:7f:dd:b4:13:4c:5f:e9:3d:4a:ff:7d:5a:b5:ce:1a:
26:2b:25:ff:20:8b:3b:f1:7c:4f:40:4f:90:88:25:e4:61:ec:
1f:51:eb:f4:c9:ec:80:7b:1b:40:82:d2:c5:5e:29:3b:0f:90:
83:22:8c:e5:9a:ff:0c:3e:e4:59:aa:ca:ab:23:7d:51:78:86:
69:86:c8:2d:76:42:bd:b4:cb:7a:e5:21:c4:66:ce:61:c2:40:
82:21:68:02:5b:cf:f7:7f:73:5d:b3:45:2b:0e:fb:b4:12:69:
b6:af:6c:cd:11:df:b4:23:a8:bc:71:d3:2b:60:61:1f:0f:b1:
3a:d3:66:86:d5:33:ff:4f:23:3b:5b:8e:f1:4b:45:f0:f5:24:
18:16:ad:60:89:e1:b0:f5:19:37:1e:90:0b:10:d0:0e:fc:a1:
52:0f:ed:1b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeRHC6zdfvXr7kQyhATwlz3i2w1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MjUxNjUwMzlaFw0yNTA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDNlODZmMGEyMjg0MDE4MGQyZWQyYWNkMDdjYTkyNGIzNGFmMGRjNDQ3Y2Iz
ODYxMWEwOTI0MjNkODBjMGMwNmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCBeurhVyx/2Sv7QPcMTuIw84U2tbTHqqaA/UgHQaQblG0VDmjLd/zo9QSp
OmHB8fJ+shm/KO8bOwhU8H+j/Lm50ub9hWB1dYzOPGQQKDGBuioPYsQ5VIy4MD1n
QRhcnGd3Y9LvDclm/khjG8s12MR/8/LlI0mhUrbYitWeGbVlsZsdoo5+5x5Y0Twf
bRCQnPbkmaWApgVzOPov3r5uYh5N90Uw1UbuGXuu+/xJD4IVp5AYreFFSKEynGZ6
Pwfl0iyBZMvZgYnMy+YfCk6jywbc0uDhKt3M3BLHloG5n6uDphTjHOpg7Ns7qa/E
DYUVNNsAawmvtkdKHVLoYBnHB0cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTjbRml
AoDzUMONV8+WE9STeW4myTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzRhODkxMDUtZjFjMy00NGNkLWIyYmYtMjg3ZWQ2ODA1NWU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FnA
MA0GCSqGSIb3DQEBCwUAA4IBAQAN/zwqW5oLZlkEjp432PJiIzS7C/t3Twhb5Gxl
r9r91wZdWFZ1KOt/wRxPItQ1Q45ufv48iMjE44inbs83A9a1cB2et81cwSRT8/Ib
ef7/Z4bcJI9ymLNgBUYQYeF/3bQTTF/pPUr/fVq1zhomKyX/IIs78XxPQE+QiCXk
YewfUev0yeyAextAgtLFXik7D5CDIozlmv8MPuRZqsqrI31ReIZphsgtdkK9tMt6
5SHEZs5hwkCCIWgCW8/3f3Nds0UrDvu0Emm2r2zNEd+0I6i8cdMrYGEfD7E602aG
1TP/TyM7W47xS0Xw9SQYFq1gieGw9Rk3HpALENAO/KFSD+0b
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:49 2025 by rpki-client