Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80a87408-515b-45b1-aa62-7e6516358bb6.roa
File: 80a87408-515b-45b1-aa62-7e6516358bb6.roa (raw, json)
Hash identifier: ET2+X2GtsFjL/3CencygUZVIWyYxJFRSXj9DONvy2/E=
Subject key identifier: 31:64:4C:F6:47:AC:A1:22:AD:23:14:A5:FF:C6:04:09:85:DD:C3:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DCDCBC732E7093ECCBD4CC94D8EE0E68D38F2BB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80a87408-515b-45b1-aa62-7e6516358bb6.roa
Signing time: Mon 16 Jun 2025 20:41:28 +0000
ROA not before: Mon 16 Jun 2025 20:41:28 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:10c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:cd:cb:c7:32:e7:09:3e:cc:bd:4c:c9:4d:8e:e0:e6:8d:38:f2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:41:28 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=61452b55d0641822d90fdd893f070f1e785f557bbf00c634f36b3a1390313231, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4d:b2:f3:7a:d7:58:a5:99:cc:30:eb:42:3b:
cd:a3:76:05:00:f9:fc:51:0a:ed:74:e9:6b:22:35:
eb:2a:96:d8:b5:21:c4:a9:65:d7:e8:50:1e:d7:99:
c5:e0:40:78:f4:65:03:86:46:f6:e0:4a:f9:8c:23:
b1:f4:fd:ee:41:31:19:c8:8d:c8:ed:92:84:18:99:
6c:00:53:ff:41:48:1d:6c:1b:8b:a6:b0:8a:a2:83:
1f:cf:f4:1f:37:8c:61:06:de:ed:c8:e0:a5:00:26:
9d:6b:98:be:49:54:4e:cb:36:0e:38:25:5b:29:91:
dd:e5:e9:07:e5:c3:8e:83:71:93:71:f4:c9:9e:76:
f5:27:2a:43:1a:53:a2:13:0d:74:7e:3c:a7:3f:cd:
1f:d9:fd:a8:1d:92:2a:2c:f8:20:d1:f9:9f:18:9c:
fe:f3:4c:51:bf:20:07:9d:8a:ec:c2:39:35:1c:a9:
54:15:56:ef:50:f9:af:d2:26:a8:c9:94:2b:d2:1a:
38:b7:62:ee:07:14:28:cd:74:7c:1c:ce:9d:bb:c4:
4e:12:b7:45:46:6e:ec:7c:c1:a9:db:f3:3b:5b:f7:
3d:d0:be:c6:c6:0a:59:86:fe:c6:d1:2f:7e:eb:a1:
e0:20:e4:fe:b3:83:2c:86:a3:87:05:7f:fe:73:23:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:64:4C:F6:47:AC:A1:22:AD:23:14:A5:FF:C6:04:09:85:DD:C3:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/80a87408-515b-45b1-aa62-7e6516358bb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:10c0::/46
Signature Algorithm: sha256WithRSAEncryption
26:1a:6e:da:9c:10:8d:17:3d:a4:10:a1:1a:ce:a2:cc:84:f8:
06:15:fc:ec:bf:c1:4e:89:71:83:05:33:b7:48:80:32:e9:e9:
f1:0e:74:d2:b1:3b:be:6a:70:86:66:0d:9a:74:bc:b0:c9:c1:
7e:9c:03:fd:06:6c:d5:34:04:23:60:5f:4e:d1:06:ce:ed:70:
53:9b:f5:8f:b3:78:e8:5f:d5:5c:eb:db:b5:c7:a2:db:b9:16:
f6:0e:1c:4f:92:ea:6c:c3:a0:9c:b1:c4:f8:72:fb:ab:1c:40:
92:7e:c6:7e:85:6f:a7:c3:76:5a:07:12:c6:7b:6f:39:cc:b0:
f3:90:fa:24:e8:64:69:7e:52:47:9f:d2:42:50:31:80:d2:34:
e2:0f:2f:5b:b4:38:90:8a:51:e8:bd:44:66:1c:61:28:50:3a:
ef:a9:c6:e7:42:12:0f:9a:86:0c:3b:02:2e:70:0e:77:a0:bc:
56:f3:c7:a4:03:f8:46:bd:5a:0e:e8:35:aa:c0:db:4a:c9:a4:
9c:f4:ca:5b:e9:91:37:cb:90:14:6b:c2:2e:aa:9d:ea:bc:00:
33:a3:50:ce:63:db:6d:c6:0a:fa:91:39:ef:7d:64:d3:bf:88:
bd:cf:07:30:ef:bf:e4:f3:03:b1:d9:21:27:eb:12:d9:27:eb:
80:cf:13:6d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTc3LxzLnCT7MvUzJTY7g5o048rswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMDQxMjhaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDYxNDUyYjU1ZDA2NDE4MjJkOTBmZGQ4OTNmMDcwZjFlNzg1ZjU1N2JiZjAw
YzYzNGYzNmIzYTEzOTAzMTMyMzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPNNsvN611ilmcww60I7zaN2BQD5/FEK7XTpayI16yqW2LUhxKll1+hQHteZ
xeBAePRlA4ZG9uBK+YwjsfT97kExGciNyO2ShBiZbABT/0FIHWwbi6awiqKDH8/0
HzeMYQbe7cjgpQAmnWuYvklUTss2DjglWymR3eXpB+XDjoNxk3H0yZ529ScqQxpT
ohMNdH48pz/NH9n9qB2SKiz4INH5nxic/vNMUb8gB52K7MI5NRypVBVW71D5r9Im
qMmUK9IaOLdi7gcUKM10fBzOnbvEThK3RUZu7HzBqdvzO1v3PdC+xsYKWYb+xtEv
fuuh4CDk/rODLIajhwV//nMjlOMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQxZEz2
R6yhIq0jFKX/xgQJhd3DdTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODBhODc0MDgtNTE1Yi00NWIxLWFhNjItN2U2NTE2MzU4YmI2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HsQ
wDANBgkqhkiG9w0BAQsFAAOCAQEAJhpu2pwQjRc9pBChGs6izIT4BhX87L/BTolx
gwUzt0iAMunp8Q500rE7vmpwhmYNmnS8sMnBfpwD/QZs1TQEI2BfTtEGzu1wU5v1
j7N46F/VXOvbtcei27kW9g4cT5LqbMOgnLHE+HL7qxxAkn7GfoVvp8N2WgcSxntv
Ocyw85D6JOhkaX5SR5/SQlAxgNI04g8vW7Q4kIpR6L1EZhxhKFA676nG50ISD5qG
DDsCLnAOd6C8VvPHpAP4Rr1aDug1qsDbSsmknPTKW+mRN8uQFGvCLqqd6rwAM6NQ
zmPbbcYK+pE5731k07+Ivc8HMO+/5PMDsdkhJ+sS2SfrgM8TbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:18:33 2025 by rpki-client