Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
File: 4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa (raw, json)
Hash identifier: qTcJRBvfYagv+jJwSeyoAdAyY/nAHBvWn4/UtwyNXtI=
Subject key identifier: B3:36:86:61:C4:C7:B6:8A:DB:E4:02:F4:86:FB:BE:B4:8C:4F:6A:E8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04C2018484D854E46D0B42B8931357AD6D9595E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
Signing time: Mon 16 Jun 2025 21:00:08 +0000
ROA not before: Mon 16 Jun 2025 21:00:08 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c2:01:84:84:d8:54:e4:6d:0b:42:b8:93:13:57:ad:6d:95:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:00:08 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=a1e140a0129d7ec1400188657b31ab627e97c3cf646ef549a02231ea25929f1f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:e4:0c:51:9e:52:54:31:2e:c5:8a:5e:e9:
cd:1f:6f:be:dc:8e:fb:4a:c8:37:01:29:6d:48:4c:
0c:35:4f:99:6a:33:ab:b2:d9:22:c9:24:0c:cd:15:
c2:4e:11:37:d3:02:cf:b3:5e:74:90:0e:6b:f6:07:
99:a3:7b:14:fc:0e:13:e3:fb:4e:ac:29:26:cb:c8:
10:db:7e:dc:18:39:ff:c3:a1:3c:15:e8:9e:a0:06:
c4:3c:07:0e:f0:9d:63:28:c6:1b:06:97:f9:a8:15:
43:bf:d6:86:2f:fb:d1:b4:74:f4:b2:bd:b7:e7:a3:
0f:0a:1e:a6:e6:5f:bd:54:85:61:ea:3b:f4:2a:53:
7a:a1:c0:30:37:a4:98:b8:91:99:05:10:7c:30:12:
f1:4b:87:56:47:ec:7b:d2:89:96:ab:54:4d:a5:73:
95:12:aa:c5:41:e5:d3:84:1b:b1:9e:76:32:ae:23:
aa:ba:23:c8:a4:e6:57:62:fb:73:22:dc:f1:af:1b:
be:57:3e:f4:99:ed:7e:60:c7:ce:44:9c:85:16:42:
91:fd:9f:cf:9a:dc:26:a3:29:9e:c5:13:a4:38:14:
0d:12:6a:be:38:85:03:91:8b:03:06:2f:94:a2:ff:
b2:99:6d:79:c3:df:f5:4c:f1:71:c7:5b:06:c5:50:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:86:61:C4:C7:B6:8A:DB:E4:02:F4:86:FB:BE:B4:8C:4F:6A:E8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c2cf7b6-3fbb-4d74-886d-21c58b347f58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:8000::/40
Signature Algorithm: sha256WithRSAEncryption
2e:8f:c4:9b:18:e1:58:0e:eb:5d:88:66:4f:ba:ca:11:fd:91:
57:7c:65:39:3b:b7:c8:f7:e0:83:63:7f:8d:91:80:e5:ea:5b:
87:33:42:5f:e9:11:e5:8a:76:d0:ea:2d:78:9b:91:f5:70:6a:
54:cf:48:0b:b8:22:37:38:b9:7f:5f:13:43:9a:50:73:ca:0a:
3e:34:3d:db:6c:0f:be:df:ef:4a:86:43:00:fe:02:31:32:a2:
08:f0:fd:95:91:a7:65:11:76:54:c5:a4:98:4c:09:2d:a0:5d:
e0:98:40:a1:e9:a7:f0:7e:8e:fa:3d:4d:2e:c4:4a:81:85:75:
f8:30:a6:7d:d2:1a:aa:3d:29:eb:9e:d7:69:4b:83:37:2e:a3:
08:50:ff:4f:e6:e6:7e:af:9c:2c:a8:f5:e0:fe:0c:7e:77:9a:
bf:56:c1:8b:c7:df:e5:95:92:45:4e:b7:56:82:ad:09:b6:f3:
53:73:44:69:23:ca:69:ef:45:45:a7:5d:89:a2:d5:41:f0:f2:
96:37:2c:3f:e6:7b:b0:1b:8f:e8:59:a4:8b:ca:bf:ff:ad:60:
d2:b0:c4:7f:b7:35:a9:7f:b9:04:14:96:08:e3:33:dc:83:6e:
c7:02:1e:76:f9:a8:50:8d:b4:6f:0a:85:2f:d0:7d:c0:ab:0b:
43:ba:33:45
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUBMIBhITYVORtC0K4kxNXrW2VleAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMTAwMDhaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGExZTE0MGEwMTI5ZDdlYzE0MDAxODg2NTdiMzFhYjYyN2U5N2MzY2Y2NDZl
ZjU0OWEwMjIzMWVhMjU5MjlmMWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMx65AxRnlJUMS7Fil7pzR9vvtyO+0rINwEpbUhMDDVPmWozq7LZIskkDM0V
wk4RN9MCz7NedJAOa/YHmaN7FPwOE+P7TqwpJsvIENt+3Bg5/8OhPBXonqAGxDwH
DvCdYyjGGwaX+agVQ7/Whi/70bR09LK9t+ejDwoepuZfvVSFYeo79CpTeqHAMDek
mLiRmQUQfDAS8UuHVkfse9KJlqtUTaVzlRKqxUHl04QbsZ52Mq4jqrojyKTmV2L7
cyLc8a8bvlc+9JntfmDHzkSchRZCkf2fz5rcJqMpnsUTpDgUDRJqvjiFA5GLAwYv
lKL/spltecPf9UzxccdbBsVQUN0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSzNoZh
xMe2itvkAvSG+760jE9q6DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGMyY2Y3YjYtM2ZiYi00ZDc0LTg4NmQtMjFjNThiMzQ3ZjU4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H6A
MA0GCSqGSIb3DQEBCwUAA4IBAQAuj8SbGOFYDutdiGZPusoR/ZFXfGU5O7fI9+CD
Y3+NkYDl6luHM0Jf6RHlinbQ6i14m5H1cGpUz0gLuCI3OLl/XxNDmlBzygo+ND3b
bA++3+9KhkMA/gIxMqII8P2VkadlEXZUxaSYTAktoF3gmECh6afwfo76PU0uxEqB
hXX4MKZ90hqqPSnrntdpS4M3LqMIUP9P5uZ+r5wsqPXg/gx+d5q/VsGLx9/llZJF
TrdWgq0JtvNTc0RpI8pp70VFp12JotVB8PKWNyw/5nuwG4/oWaSLyr//rWDSsMR/
tzWpf7kEFJYI4zPcg27HAh52+ahQjbRvCoUv0H3AqwtDujNF
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:26:45 2025 by rpki-client