Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
File: 7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa (raw, json)
Hash identifier: NDwMBljEEyu8vBC1MJsd+LQlG7zgeC4oWnwFicceMto=
Subject key identifier: B0:D4:F9:DF:78:A3:50:A8:29:A9:73:30:B3:7C:C7:CB:6C:F2:BC:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A86EFA4BB19C90211023840579B4721FB34FFCD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
Signing time: Tue 17 Jun 2025 00:41:09 +0000
ROA not before: Tue 17 Jun 2025 00:41:09 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:86:ef:a4:bb:19:c9:02:11:02:38:40:57:9b:47:21:fb:34:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 17 00:41:09 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=d50b3d1d69a955b80d659f6fea2e4cb0748d5dc190c9d5a2a8fa6c06e76c638c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:13:89:eb:14:e3:3f:7b:bf:f4:8d:98:ac:
e1:a7:11:77:fa:f5:64:a5:3b:d8:cc:f5:5c:51:ba:
f2:4b:e1:5e:1a:18:eb:67:f6:fd:db:9d:e4:a4:97:
68:ad:54:33:ba:35:98:c1:2f:72:3f:24:a9:fe:05:
97:b9:3f:9b:91:52:d3:f1:59:ed:30:87:5a:02:01:
71:7d:22:5b:ea:7b:75:f9:f8:c7:fb:5d:72:fb:64:
7a:49:13:7f:3e:c9:86:1e:45:23:f6:6b:23:0f:5d:
e7:30:db:49:13:8f:df:84:c2:17:97:43:e2:1b:97:
3c:bc:b0:d3:4f:7e:eb:ec:b9:2e:b4:6f:96:77:dc:
37:34:19:78:27:32:78:4f:65:50:20:b8:04:c0:86:
70:8b:f9:82:05:63:61:e0:9e:d1:16:a5:55:14:09:
82:a7:d8:f2:c0:a7:b6:ff:9c:6a:c7:a1:9c:51:70:
86:f2:16:a6:dd:f9:47:86:c1:10:c3:bf:34:1c:aa:
03:a1:35:4c:23:0f:3a:b2:f4:3d:50:09:4f:8b:bf:
9b:d1:6c:6c:3b:c3:b2:67:68:e0:7c:80:c7:90:30:
e8:95:f6:b4:3e:6b:52:ab:65:48:c6:35:02:7c:ad:
a2:92:d2:05:b5:41:25:ba:5f:50:96:21:ee:41:4d:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:F9:DF:78:A3:50:A8:29:A9:73:30:B3:7C:C7:CB:6C:F2:BC:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7dcf014f-af88-4ab9-9976-746ed8dec1a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038::/32
Signature Algorithm: sha256WithRSAEncryption
0a:8e:4a:84:6a:29:03:c4:1b:8f:23:45:46:63:dd:8b:01:74:
cf:58:09:2c:2d:0b:11:90:bc:bf:05:d8:03:b3:11:7a:76:89:
9b:e1:0a:ec:38:18:d4:d4:e8:27:b9:1a:b8:15:94:86:24:39:
c6:e4:4f:78:6a:5a:d0:c9:d7:a5:27:4f:3b:e9:f8:18:bf:3b:
53:84:56:d4:62:b6:2a:bf:cd:fc:be:21:c1:06:1d:90:24:d3:
aa:6a:38:53:9e:34:85:b8:55:40:3b:d9:81:3a:d2:43:5a:cc:
e9:7e:66:25:2b:83:aa:d5:6b:21:2b:2e:f9:d0:ae:7f:01:8b:
16:4f:51:f0:29:a4:e6:c9:ba:fa:5e:42:2e:5b:21:53:38:24:
39:b9:cf:c0:02:25:ce:8f:d6:a4:de:13:dc:dd:36:65:13:5b:
f1:45:93:4c:bc:f1:02:1d:f5:9e:8d:84:8f:c2:9f:08:6f:be:
25:d5:9f:1f:53:10:95:5a:7a:8d:65:4c:bd:84:ae:50:98:fe:
f7:09:06:92:8c:2c:9d:3f:fc:61:64:db:9b:65:8e:18:fa:e3:
07:25:aa:fc:35:ab:0e:a6:b6:f3:67:ae:65:4b:8d:92:39:10:
c6:b6:fa:7e:67:e4:27:32:f9:a3:71:07:13:c9:23:3b:65:1c:
6c:5b:6c:8c
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUeobvpLsZyQIRAjhAV5tHIfs0/80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTcwMDQxMDlaFw0yNTA3MjIyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1MGIzZDFkNjlhOTU1YjgwZDY1OWY2ZmVhMmU0Y2IwNzQ4ZDVkYzE5MGM5
ZDVhMmE4ZmE2YzA2ZTc2YzYzOGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALflE4nrFOM/e7/0jZis4acRd/r1ZKU72Mz1XFG68kvhXhoY62f2/dud5KSX
aK1UM7o1mMEvcj8kqf4Fl7k/m5FS0/FZ7TCHWgIBcX0iW+p7dfn4x/tdcvtkekkT
fz7Jhh5FI/ZrIw9d5zDbSROP34TCF5dD4huXPLyw009+6+y5LrRvlnfcNzQZeCcy
eE9lUCC4BMCGcIv5ggVjYeCe0RalVRQJgqfY8sCntv+casehnFFwhvIWpt35R4bB
EMO/NByqA6E1TCMPOrL0PVAJT4u/m9FsbDvDsmdo4HyAx5Aw6JX2tD5rUqtlSMY1
AnytopLSBbVBJbpfUJYh7kFNUk0CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBSw1Pnf
eKNQqCmpczCzfMfLbPK8ljAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2RjZjAxNGYtYWY4OC00YWI5LTk5NzYtNzQ2ZWQ4ZGVjMWE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0Dgw
DQYJKoZIhvcNAQELBQADggEBAAqOSoRqKQPEG48jRUZj3YsBdM9YCSwtCxGQvL8F
2AOzEXp2iZvhCuw4GNTU6Ce5GrgVlIYkOcbkT3hqWtDJ16UnTzvp+Bi/O1OEVtRi
tiq/zfy+IcEGHZAk06pqOFOeNIW4VUA72YE60kNazOl+ZiUrg6rVayErLvnQrn8B
ixZPUfAppObJuvpeQi5bIVM4JDm5z8ACJc6P1qTeE9zdNmUTW/FFk0y88QId9Z6N
hI/CnwhvviXVnx9TEJVaeo1lTL2ErlCY/vcJBpKMLJ0//GFk25tljhj64wclqvw1
qw6mtvNnrmVLjZI5EMa2+n5n5Ccy+aNxBxPJIztlHGxbbIw=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:55:27 2025 by rpki-client