Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json)
Hash identifier: fy0NivAHvrH/BKDO2aNBzc53q81qgbk6YibOZ5Rt4ik=
Subject key identifier: 11:58:F4:E4:98:90:4B:17:06:36:49:1B:BC:25:90:78:03:69:DE:48
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C94257F897586EB79822A94970E911EF33A0A49
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
Signing time: Tue 17 Jun 2025 00:40:18 +0000
ROA not before: Tue 17 Jun 2025 00:40:18 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:94:25:7f:89:75:86:eb:79:82:2a:94:97:0e:91:1e:f3:3a:0a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 17 00:40:18 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=3f02bd04a92d8288d40e7a7c6e67b221532cdca0b9ddd49f022110f58a42de20, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:1b:62:81:4b:b4:63:b3:01:f7:10:2e:fc:
b2:fd:3b:72:4e:1b:33:24:2a:62:74:9e:7d:e0:f8:
c3:7f:49:b0:e0:63:0d:4f:6c:07:f9:ee:70:4c:03:
06:af:45:5e:66:48:bb:63:e1:6f:bf:d5:71:e6:42:
00:eb:b2:93:02:6c:94:99:a6:41:56:d5:54:4c:a5:
a2:60:93:b3:80:93:75:8b:95:ca:ea:5d:0c:80:12:
04:6a:60:db:12:47:89:a3:48:b8:f3:f0:95:54:c9:
89:02:a6:7f:c9:65:71:b3:39:91:76:e7:42:0e:af:
2e:09:77:6f:cf:5d:b6:30:86:b8:d6:21:e5:56:82:
b4:58:cb:39:19:1f:02:d4:a9:9d:c8:10:d3:19:94:
11:ff:90:b9:30:73:e6:06:f9:70:7a:88:41:1e:fd:
b1:94:6f:f2:73:df:21:40:5e:61:74:ef:99:11:d1:
6f:c3:a3:17:4e:d1:81:a8:62:b9:cb:91:85:b6:b9:
b2:b9:87:d0:2b:8f:dd:01:a9:12:3b:e2:7f:f4:a1:
69:1f:33:d9:7d:0e:4f:5e:e7:8c:6e:d4:4c:99:b7:
92:21:c5:a7:26:3b:c9:94:12:7e:d9:54:00:4b:9a:
b1:5c:b9:f7:94:a7:b8:a2:8b:81:98:ab:03:32:84:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:F4:E4:98:90:4B:17:06:36:49:1B:BC:25:90:78:03:69:DE:48
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:f6:34:7c:b2:53:3e:2a:4a:68:b3:91:38:3f:f0:4f:b0:15:
98:98:34:35:cd:52:4d:0b:c1:2a:9c:a6:67:cb:59:ea:15:d5:
37:ef:f4:89:e7:45:2e:6b:7c:00:0a:c4:71:b6:bd:11:8f:3f:
6c:1a:0a:b1:a2:52:23:55:17:9f:96:26:3f:d6:b0:7a:b3:07:
31:03:e9:04:20:42:5d:45:2c:5b:7e:19:77:2d:9f:07:56:da:
4d:53:3b:cd:00:90:08:bd:1d:a4:3b:62:5e:57:81:7f:12:05:
f6:7e:a8:3b:73:17:ca:d8:a5:ae:6c:ce:6d:d8:1b:61:56:b2:
00:09:6d:0b:5f:1c:91:53:0b:db:8f:88:4f:de:d0:2d:fd:92:
c9:8f:a0:9b:b7:ae:fd:b4:9d:61:dc:f0:d5:b9:b2:78:1c:8a:
05:8d:d6:a6:42:97:a2:ac:11:d6:f2:30:56:5a:fa:7b:3a:69:
ae:1f:be:c2:d7:f2:f6:9b:d8:07:c4:a9:51:70:b1:7c:32:54:
c2:27:27:33:cd:c7:73:2c:db:8e:e8:bb:99:06:4a:75:c6:ba:
06:9b:f0:ab:01:69:b3:98:97:01:bb:1f:6f:17:b9:71:ed:10:
bd:5b:87:f8:06:ab:4b:3d:7c:45:83:a3:50:a0:54:af:db:12:
b7:c8:80:84
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUXJQlf4l1hut5giqUlw6RHvM6CkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTcwMDQwMThaFw0yNTA3MjIyMzU5NTlaMHoxSTBHBgNV
BAUTQDNmMDJiZDA0YTkyZDgyODhkNDBlN2E3YzZlNjdiMjIxNTMyY2RjYTBiOWRk
ZDQ5ZjAyMjExMGY1OGE0MmRlMjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIdnG2KBS7RjswH3EC78sv07ck4bMyQqYnSefeD4w39JsOBjDU9sB/nucEwD
Bq9FXmZIu2Phb7/VceZCAOuykwJslJmmQVbVVEylomCTs4CTdYuVyupdDIASBGpg
2xJHiaNIuPPwlVTJiQKmf8llcbM5kXbnQg6vLgl3b89dtjCGuNYh5VaCtFjLORkf
AtSpncgQ0xmUEf+QuTBz5gb5cHqIQR79sZRv8nPfIUBeYXTvmRHRb8OjF07Rgahi
ucuRhba5srmH0CuP3QGpEjvif/ShaR8z2X0OT17njG7UTJm3kiHFpyY7yZQSftlU
AEuasVy595SnuKKLgZirAzKEg3sCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQRWPTk
mJBLFwY2SRu8JZB4A2neSDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGNjMzBmY2MtZWMyMy00ZTI2LWJlMTYtMzdkYjgwZGJmM2EwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk99BDAN
BgkqhkiG9w0BAQsFAAOCAQEAj/Y0fLJTPipKaLOROD/wT7AVmJg0Nc1STQvBKpym
Z8tZ6hXVN+/0iedFLmt8AArEcba9EY8/bBoKsaJSI1UXn5YmP9awerMHMQPpBCBC
XUUsW34Zdy2fB1baTVM7zQCQCL0dpDtiXleBfxIF9n6oO3MXytilrmzObdgbYVay
AAltC18ckVML24+IT97QLf2SyY+gm7eu/bSdYdzw1bmyeByKBY3WpkKXoqwR1vIw
Vlr6ezpprh++wtfy9pvYB8SpUXCxfDJUwicnM83Hcyzbjui7mQZKdca6BpvwqwFp
s5iXAbsfbxe5ce0QvVuH+AarSz18RYOjUKBUr9sSt8iAhA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:53:42 2025 by rpki-client