Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
File: 33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa (raw, json)
Hash identifier: E3eYWIwY9PJ4gIulWzLmnhw3M+taS9M3+Xrnr64ZOqc=
Subject key identifier: C6:37:FA:18:3F:93:DF:00:13:6E:27:97:D7:91:CF:1B:79:3C:8A:55
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4FAEF83BBA8101CE002BCB42A297F06320570B99
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
Signing time: Mon 16 Jun 2025 21:40:48 +0000
ROA not before: Mon 16 Jun 2025 21:40:48 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ae:f8:3b:ba:81:01:ce:00:2b:cb:42:a2:97:f0:63:20:57:0b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:40:48 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=e4325c0119922a1f61fb89ca4b9448c7e9b1814c81cc3700576665579a418069, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:d5:9b:40:d9:30:fc:f1:d0:b5:bf:59:e2:
27:2e:f9:43:90:ce:89:4f:54:a6:ec:23:d8:57:1e:
31:a0:5d:cf:ea:80:c8:ce:17:e8:da:2c:bd:99:88:
a7:e9:06:74:22:52:a6:39:64:bb:17:5a:2b:d6:fa:
da:f6:b7:55:96:6f:3b:ef:0c:42:68:55:92:cd:0d:
f7:c3:3d:84:45:c2:60:fc:72:1b:7c:f7:7e:03:fe:
a2:cc:5d:61:7d:75:ec:35:d8:2b:e0:52:2b:71:0c:
fe:a4:b0:19:54:40:f7:fc:57:66:f7:e9:2e:14:82:
f6:37:7b:a3:17:c5:87:99:c8:8e:e7:58:63:0f:6f:
67:a2:72:95:f6:4c:b0:98:6f:81:e6:e7:3f:bd:80:
91:1b:b3:69:25:30:cd:7a:cd:18:39:3e:ac:51:25:
29:28:cc:0a:e0:00:1c:1e:3c:6d:1a:67:16:f7:8a:
5f:4a:51:b4:08:20:dd:87:6f:99:97:98:1a:eb:e5:
41:f2:88:f7:cc:94:ff:24:2e:41:94:b1:d7:32:31:
7d:c3:f4:9a:d2:b0:80:5c:46:b2:df:f3:2f:ba:78:
0b:4f:c4:38:ca:52:31:6d:d4:5c:8a:32:45:63:6b:
50:82:40:08:47:c3:35:f0:18:cb:a2:e9:6f:8a:f9:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:FA:18:3F:93:DF:00:13:6E:27:97:D7:91:CF:1B:79:3C:8A:55
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:800::/38
Signature Algorithm: sha256WithRSAEncryption
aa:83:4d:37:3b:d5:92:7c:7b:54:13:28:3a:bb:fb:f6:bf:d0:
68:30:54:d9:cb:1f:5c:15:fa:fa:1b:4b:17:56:78:42:ed:9c:
6f:c0:91:6a:0c:1b:a7:b9:48:8b:9f:0e:25:92:9e:7c:9a:2a:
71:65:c8:36:cd:d4:af:a9:67:29:5d:bd:90:ac:24:7e:b8:08:
cb:48:da:d7:70:f1:49:20:95:ed:35:5c:c0:5c:47:80:58:c2:
0e:97:68:02:0f:27:17:10:c6:dd:21:c5:59:e7:7b:e0:90:e9:
c7:9a:48:73:c2:8b:7d:40:58:33:43:77:34:2f:26:43:95:e4:
e7:05:45:df:0a:c9:00:f1:68:59:0d:8a:8b:69:56:bd:60:e2:
0c:a1:91:59:e6:da:c7:18:d3:13:35:8d:28:bb:19:3d:30:19:
90:de:24:04:20:8d:74:f1:33:59:fd:9e:1c:37:f7:a5:c1:5f:
56:6f:46:e7:c7:45:4b:e7:de:61:78:ad:25:65:a1:f4:ec:2a:
98:0f:7e:d1:08:5e:12:24:35:f2:91:27:d0:ae:8f:90:3c:44:
c6:04:b0:02:70:c1:22:c1:08:1b:48:6e:55:4c:1f:b2:50:37:
47:fb:fe:53:70:80:a0:8b:f1:46:19:7b:19:1e:fd:21:e8:97:
8e:90:b0:73
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUT674O7qBAc4AK8tCopfwYyBXC5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMTQwNDhaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGU0MzI1YzAxMTk5MjJhMWY2MWZiODljYTRiOTQ0OGM3ZTliMTgxNGM4MWNj
MzcwMDU3NjY2NTU3OWE0MTgwNjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANN71ZtA2TD88dC1v1niJy75Q5DOiU9Upuwj2FceMaBdz+qAyM4X6NosvZmI
p+kGdCJSpjlkuxdaK9b62va3VZZvO+8MQmhVks0N98M9hEXCYPxyG3z3fgP+osxd
YX117DXYK+BSK3EM/qSwGVRA9/xXZvfpLhSC9jd7oxfFh5nIjudYYw9vZ6JylfZM
sJhvgebnP72AkRuzaSUwzXrNGDk+rFElKSjMCuAAHB48bRpnFveKX0pRtAgg3Ydv
mZeYGuvlQfKI98yU/yQuQZSx1zIxfcP0mtKwgFxGst/zL7p4C0/EOMpSMW3UXIoy
RWNrUIJACEfDNfAYy6Lpb4r5qg0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTGN/oY
P5PfABNuJ5fXkc8beTyKVTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzNkMjdkMzAtYWM1Yy00MTViLThiOTYtYmRmM2ZhMmRhM2U1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYI
MA0GCSqGSIb3DQEBCwUAA4IBAQCqg003O9WSfHtUEyg6u/v2v9BoMFTZyx9cFfr6
G0sXVnhC7ZxvwJFqDBunuUiLnw4lkp58mipxZcg2zdSvqWcpXb2QrCR+uAjLSNrX
cPFJIJXtNVzAXEeAWMIOl2gCDycXEMbdIcVZ53vgkOnHmkhzwot9QFgzQ3c0LyZD
leTnBUXfCskA8WhZDYqLaVa9YOIMoZFZ5trHGNMTNY0ouxk9MBmQ3iQEII108TNZ
/Z4cN/elwV9Wb0bnx0VL595heK0lZaH07CqYD37RCF4SJDXykSfQro+QPETGBLAC
cMEiwQgbSG5VTB+yUDdH+/5TcICgi/FGGXsZHv0h6JeOkLBz
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:50:09 2025 by rpki-client