Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa
File: 04503b16-d14e-46c1-93ab-4dafd21d6078.roa (raw, json)
Hash identifier: T6bpbwLpzYsx736JtXlTH2Fa3V/gLgKn7F4w/9ZgdVo=
Subject key identifier: 12:33:16:C1:01:CF:08:D1:F3:23:95:7F:C6:ED:1D:B6:F5:FD:66:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2223AF7C5A856F3190A5F349CD1A5A3DCD2D651B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa
Signing time: Thu 26 Jun 2025 19:38:51 +0000
ROA not before: Thu 26 Jun 2025 19:38:51 +0000
ROA not after: Thu 31 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:a040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:23:af:7c:5a:85:6f:31:90:a5:f3:49:cd:1a:5a:3d:cd:2d:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 26 19:38:51 2025 GMT
Not After : Jul 31 23:59:59 2025 GMT
Subject: serialNumber=bcea40b906d8df681b9e1c169a9ff5993b81eedeb7a6c1e4a25076062ac1942b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:e9:45:07:56:ff:b2:06:31:1d:47:69:9c:
6f:ab:39:23:4f:fc:da:b2:e3:e1:8e:c7:ae:01:a4:
a4:a9:e3:30:ea:ac:7b:84:b6:ea:55:c4:09:1e:17:
07:9d:17:17:dd:86:a9:74:f1:26:79:f5:08:ec:f6:
4d:66:bd:1a:c7:c2:c9:3f:a7:42:7b:bf:5b:1a:40:
37:6e:bc:d0:f1:d8:90:cc:01:38:8a:a5:9d:d7:5d:
b3:06:4a:21:90:cc:cc:30:98:2b:40:7d:79:cb:9f:
bb:c0:36:97:ed:dd:88:f5:dc:76:90:f2:91:77:0b:
4d:6d:33:2a:df:10:fd:7c:07:a2:17:fb:2c:0d:82:
38:46:16:ca:4b:b8:5f:9a:8f:de:8e:d8:4d:61:95:
25:d4:d8:61:b0:d5:05:b4:73:3c:82:56:2a:3a:b3:
ac:aa:3e:d5:6d:1a:93:71:77:e8:3d:2a:e4:ce:6b:
cc:b4:b2:cd:9d:37:c8:b0:ae:3a:29:72:ec:83:8a:
db:95:cf:2f:04:0d:a8:93:5c:41:fa:38:ab:b0:29:
3d:45:1f:e8:53:2d:a0:ee:9e:fd:4b:44:3a:15:44:
68:58:68:c8:31:7a:4a:64:15:0f:ed:6f:b2:62:1c:
47:c7:2d:e4:84:4b:d8:2c:7b:0b:ae:11:b3:4e:ff:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:16:C1:01:CF:08:D1:F3:23:95:7F:C6:ED:1D:B6:F5:FD:66:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/04503b16-d14e-46c1-93ab-4dafd21d6078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:a040::/46
Signature Algorithm: sha256WithRSAEncryption
b7:9b:c4:e5:12:d9:17:d3:27:bd:9f:2f:63:4f:f5:20:50:3d:
3e:a2:89:2e:01:d5:f8:98:81:a9:4f:fe:d5:d4:e1:15:0c:ee:
52:85:3e:44:28:0f:df:61:fd:82:00:45:58:77:75:45:87:76:
d4:79:ca:c2:26:b7:7f:34:97:bd:de:aa:fe:00:3f:43:b4:e6:
0d:cb:b9:a3:50:ad:92:f2:16:e5:2c:37:f8:08:31:67:2f:c0:
58:f1:cd:ab:74:1c:c1:b5:b6:9d:e5:83:a1:bd:aa:75:a3:b1:
13:02:f0:4e:82:d6:24:7c:4a:d0:6b:0f:48:5d:18:ef:d1:57:
14:77:39:7e:84:8f:eb:9a:7f:c9:6f:cf:73:79:9a:ab:39:b0:
16:e3:c0:d2:e3:43:51:d5:5e:3e:7a:7b:49:4e:57:5a:4b:63:
4d:68:af:92:40:32:03:0b:c7:56:8b:2b:f7:a3:74:9d:cc:40:
a1:8a:01:83:bd:90:5f:23:90:42:0f:a6:20:4c:03:ca:ca:2f:
1a:cd:78:e6:31:73:96:ed:7f:8e:92:84:1e:37:06:99:ef:ec:
6a:25:da:5f:fa:ea:38:e4:33:5a:88:dc:dc:ec:5a:d0:58:af:
7f:ab:b5:a3:e8:d3:a9:f0:54:cb:f9:8f:db:08:46:d1:e2:6e:
ae:07:ac:53
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUIiOvfFqFbzGQpfNJzRpaPc0tZRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MjYxOTM4NTFaFw0yNTA3MzEyMzU5NTlaMHoxSTBHBgNV
BAUTQGJjZWE0MGI5MDZkOGRmNjgxYjllMWMxNjlhOWZmNTk5M2I4MWVlZGViN2E2
YzFlNGEyNTA3NjA2MmFjMTk0MmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOUc6UUHVv+yBjEdR2mcb6s5I0/82rLj4Y7HrgGkpKnjMOqse4S26lXECR4X
B50XF92GqXTxJnn1COz2TWa9GsfCyT+nQnu/WxpAN2680PHYkMwBOIqlndddswZK
IZDMzDCYK0B9ecufu8A2l+3diPXcdpDykXcLTW0zKt8Q/XwHohf7LA2COEYWyku4
X5qP3o7YTWGVJdTYYbDVBbRzPIJWKjqzrKo+1W0ak3F36D0q5M5rzLSyzZ03yLCu
Oily7IOK25XPLwQNqJNcQfo4q7ApPUUf6FMtoO6e/UtEOhVEaFhoyDF6SmQVD+1v
smIcR8ct5IRL2Cx7C64Rs07/cusCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQSMxbB
Ac8I0fMjlX/G7R229f1mxjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDQ1MDNiMTYtZDE0ZS00NmMxLTkzYWItNGRhZmQyMWQ2MDc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HOg
QDANBgkqhkiG9w0BAQsFAAOCAQEAt5vE5RLZF9MnvZ8vY0/1IFA9PqKJLgHV+JiB
qU/+1dThFQzuUoU+RCgP32H9ggBFWHd1RYd21HnKwia3fzSXvd6q/gA/Q7TmDcu5
o1CtkvIW5Sw3+AgxZy/AWPHNq3QcwbW2neWDob2qdaOxEwLwToLWJHxK0GsPSF0Y
79FXFHc5foSP65p/yW/Pc3maqzmwFuPA0uNDUdVePnp7SU5XWktjTWivkkAyAwvH
Vosr96N0ncxAoYoBg72QXyOQQg+mIEwDysovGs145jFzlu1/jpKEHjcGme/saiXa
X/rqOOQzWojc3Oxa0Fivf6u1o+jTqfBUy/mP2whG0eJurgesUw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:04:45 2025 by rpki-client