Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
File: 0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa (raw, json)
Hash identifier: h6ySCfCaWYALxzVAk8E/eCWgWrk3VDIGanePBwey37U=
Subject key identifier: 67:5A:B1:75:D0:BF:AE:15:26:08:20:5C:69:0B:03:C0:70:B8:DA:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28864852761BA1D06B924DD33337BC5EA1E6E005
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
Signing time: Wed 25 Jun 2025 00:50:03 +0000
ROA not before: Wed 25 Jun 2025 00:50:03 +0000
ROA not after: Wed 30 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 178.236.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:86:48:52:76:1b:a1:d0:6b:92:4d:d3:33:37:bc:5e:a1:e6:e0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 25 00:50:03 2025 GMT
Not After : Jul 30 23:59:59 2025 GMT
Subject: serialNumber=0a3a8d3f39797db82fb184950f4290455f833cc882e35874f64dd0d8105953c6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:bf:af:04:fa:6d:d1:a8:99:a7:9b:a7:04:
dc:5c:d4:e7:ee:5b:e1:d2:cc:35:20:c1:22:18:23:
f2:be:3b:90:0b:c7:0e:71:bf:03:fa:40:b9:ec:a7:
21:41:c0:e5:26:5c:c6:6a:54:fb:a3:fd:da:24:a0:
a6:46:99:46:b0:f2:5d:77:51:69:ff:04:e1:3c:9e:
5b:f3:99:76:a6:5b:bb:f5:bc:b1:2f:12:da:f1:18:
4c:a7:28:1d:98:b2:c9:80:b4:c4:30:9a:a5:62:d5:
62:c3:f1:ba:ad:de:f7:2a:be:65:24:68:8f:0b:08:
b8:c9:a8:a1:18:94:1e:bf:b8:8b:83:b0:98:cb:36:
88:79:1c:5c:c4:f0:52:d1:c7:d3:33:8b:7c:aa:1b:
b7:32:cc:76:6d:1d:8f:ac:d2:d5:81:ae:3b:64:f2:
dc:0e:65:f4:9a:5c:2b:e7:20:3f:b9:b7:08:42:60:
ea:dc:dc:19:59:91:36:c7:ed:cb:53:de:20:57:fa:
0d:40:be:1c:ab:f2:2d:b5:53:94:69:db:50:81:13:
9b:56:eb:75:c1:1a:84:b4:45:7e:c5:32:53:b7:81:
9e:f2:3b:0c:d8:cf:7d:0b:e5:c3:35:47:af:11:64:
67:2a:04:b4:1d:a2:d7:42:e3:4f:c0:3d:f4:e3:4f:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:B1:75:D0:BF:AE:15:26:08:20:5C:69:0B:03:C0:70:B8:DA:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:ce:f1:60:57:29:58:11:96:2e:9d:53:c8:15:0e:da:d1:8d:
04:e2:ca:9c:58:c6:f0:72:d4:08:fc:06:cd:8a:9b:0b:51:93:
63:ea:66:5d:38:fe:85:db:0b:c0:67:d2:0d:d4:49:31:5f:72:
a5:c7:e2:27:eb:cb:4e:fc:0a:5c:c0:84:4a:51:b8:b8:f3:9f:
43:8c:8d:43:de:03:17:d1:cd:cf:fe:8f:be:e2:39:4f:55:31:
37:5a:c6:65:3b:06:f1:8d:ab:a1:fe:59:15:3f:aa:e4:2e:80:
d2:2a:62:0c:b1:32:45:52:7c:fd:79:c0:8c:68:da:0a:7e:1a:
11:e7:6d:fe:ca:7a:a8:b7:93:94:2c:9b:1d:63:44:cc:32:f3:
80:3e:28:da:36:7f:7b:bf:72:ea:77:7e:f9:e5:07:b5:9f:08:
7a:b8:b8:12:90:26:a1:c4:e4:fb:37:cd:0c:5f:ef:b1:2b:b7:
16:e6:9f:a3:ff:39:9b:c0:f7:ac:2e:a8:8c:7e:8c:d0:ff:a6:
39:5e:3b:2e:f8:bb:1c:c4:10:40:84:bf:79:5e:10:d6:34:20:
5f:ab:89:6d:22:0a:45:2a:1c:6d:14:92:89:73:8f:3c:14:22:
86:d4:d2:39:c5:66:ed:7e:3a:e3:5a:55:7f:23:41:96:59:f8:
e7:0a:fb:a8
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKIZIUnYbodBrkk3TMze8XqHm4AUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MjUwMDUwMDNaFw0yNTA3MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDBhM2E4ZDNmMzk3OTdkYjgyZmIxODQ5NTBmNDI5MDQ1NWY4MzNjYzg4MmUz
NTg3NGY2NGRkMGQ4MTA1OTUzYzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANFEv68E+m3RqJmnm6cE3FzU5+5b4dLMNSDBIhgj8r47kAvHDnG/A/pAueyn
IUHA5SZcxmpU+6P92iSgpkaZRrDyXXdRaf8E4TyeW/OZdqZbu/W8sS8S2vEYTKco
HZiyyYC0xDCapWLVYsPxuq3e9yq+ZSRojwsIuMmooRiUHr+4i4OwmMs2iHkcXMTw
UtHH0zOLfKobtzLMdm0dj6zS1YGuO2Ty3A5l9JpcK+cgP7m3CEJg6tzcGVmRNsft
y1PeIFf6DUC+HKvyLbVTlGnbUIETm1brdcEahLRFfsUyU7eBnvI7DNjPfQvlwzVH
rxFkZyoEtB2i10LjT8A99ONP5HMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRnWrF1
0L+uFSYIIFxpCwPAcLjafjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDk5MmM4ZjMtOTFiOC00ODNlLTgyYTMtM2M1YzljMWE5ZTg0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLLsADAN
BgkqhkiG9w0BAQsFAAOCAQEAXM7xYFcpWBGWLp1TyBUO2tGNBOLKnFjG8HLUCPwG
zYqbC1GTY+pmXTj+hdsLwGfSDdRJMV9ypcfiJ+vLTvwKXMCESlG4uPOfQ4yNQ94D
F9HNz/6PvuI5T1UxN1rGZTsG8Y2rof5ZFT+q5C6A0ipiDLEyRVJ8/XnAjGjaCn4a
Eedt/sp6qLeTlCybHWNEzDLzgD4o2jZ/e79y6nd++eUHtZ8Ieri4EpAmocTk+zfN
DF/vsSu3Fuafo/85m8D3rC6ojH6M0P+mOV47Lvi7HMQQQIS/eV4Q1jQgX6uJbSIK
RSocbRSSiXOPPBQihtTSOcVm7X4641pVfyNBlln45wr7qA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:28:49 2025 by rpki-client