Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
File: 9430d5db-5a09-4461-b80a-b9d755d346a9.roa (raw, json)
Hash identifier: Slvml+8mGjB4NTSDIK8auVnskPFSbic1J1soLRHB4gI=
Subject key identifier: 8C:B0:B8:AB:A7:F7:FD:D9:94:76:6D:91:CB:27:2F:B2:46:21:B4:43
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71759E6E00579528D22288BD1257C37D11B4D048
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
Signing time: Mon 16 Jun 2025 21:41:28 +0000
ROA not before: Mon 16 Jun 2025 21:41:28 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:75:9e:6e:00:57:95:28:d2:22:88:bd:12:57:c3:7d:11:b4:d0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:41:28 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=29df0207179fba6b3f97a78c9ebbf1539110da0e9014e222c722babd30822244, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:32:cb:47:a8:11:c7:55:a6:d0:bb:6d:5c:
33:38:df:5a:fa:c2:a7:de:4e:9e:87:99:66:d1:2d:
92:50:10:16:1f:0a:a2:6f:07:e4:c1:a6:61:80:d9:
2e:a5:bd:29:46:26:95:fa:52:45:de:4f:13:79:61:
9b:9c:48:1c:82:15:19:c4:09:3f:c8:b7:0e:3e:3c:
58:00:79:08:17:1f:ed:36:1f:21:ca:c1:3c:97:4f:
0f:9c:25:e8:48:98:2c:14:8f:1e:ac:e8:01:a5:71:
5a:92:40:71:b8:82:e0:de:f1:26:98:e6:27:e1:fc:
6a:1b:91:c8:af:4d:6b:b8:af:d6:14:eb:24:74:ea:
54:e8:ea:4e:43:8d:a2:09:8b:0d:8d:24:30:93:d4:
27:90:63:0d:b2:4a:c3:7f:04:fd:b3:45:c4:44:a1:
af:9a:73:19:7a:6e:0e:53:b7:d3:27:16:21:6b:24:
1f:e0:d0:a5:0a:08:25:27:53:60:29:d1:ce:9b:5d:
29:45:31:ba:5c:c7:15:38:07:d9:44:cc:60:0b:37:
7d:38:90:b7:97:cd:5f:d9:7e:c4:c2:7d:f8:a6:9b:
7c:04:04:94:da:0f:1e:0e:cf:41:d2:40:2b:37:fb:
19:fc:09:52:d0:91:68:1d:52:94:f1:a8:9a:97:e2:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:B8:AB:A7:F7:FD:D9:94:76:6D:91:CB:27:2F:B2:46:21:B4:43
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9430d5db-5a09-4461-b80a-b9d755d346a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a::/38
Signature Algorithm: sha256WithRSAEncryption
7d:d9:1b:4e:84:00:2c:dd:50:b3:ac:e8:7b:d7:c3:ab:5d:0c:
20:4d:af:0c:7b:1f:38:a3:d2:b0:65:ca:2b:e3:1a:e9:80:90:
42:2e:12:3a:f0:54:45:d1:33:c2:b8:69:f1:16:42:bc:21:86:
2e:56:4e:52:91:29:1e:a2:57:b4:16:a5:6f:af:b7:89:61:72:
82:3e:a4:07:45:27:ce:a2:f5:3f:33:a9:1f:3e:83:5c:f0:e3:
3c:6a:50:cd:18:fb:51:89:cd:1b:27:65:f3:fb:47:8f:31:9c:
3a:47:34:29:68:a4:05:c1:d7:87:60:fe:06:4a:bf:44:eb:71:
17:ed:71:82:5e:61:92:06:b3:1c:29:c4:80:a1:18:23:8d:da:
db:56:c3:ed:8f:c5:47:fa:93:32:94:13:a4:79:cf:95:15:9f:
6d:ec:11:cc:2c:ff:29:f9:0c:b3:97:ee:e9:af:5f:a9:58:b7:
d8:26:78:af:d4:0e:fa:6b:51:dd:59:ef:e8:d3:48:3d:b1:70:
8e:eb:fc:3d:8a:03:87:4b:39:93:f0:b1:ef:45:be:76:a8:c3:
39:44:28:2f:33:fe:12:96:22:b3:68:8e:86:d2:41:50:ed:a3:
2b:5f:a9:70:06:f0:5b:89:15:1c:ad:93:9a:04:ea:62:32:bd:
df:7e:13:3a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUcXWebgBXlSjSIoi9ElfDfRG00EgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMTQxMjhaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDI5ZGYwMjA3MTc5ZmJhNmIzZjk3YTc4YzllYmJmMTUzOTExMGRhMGU5MDE0
ZTIyMmM3MjJiYWJkMzA4MjIyNDQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANadMstHqBHHVabQu21cMzjfWvrCp95OnoeZZtEtklAQFh8Kom8H5MGmYYDZ
LqW9KUYmlfpSRd5PE3lhm5xIHIIVGcQJP8i3Dj48WAB5CBcf7TYfIcrBPJdPD5wl
6EiYLBSPHqzoAaVxWpJAcbiC4N7xJpjmJ+H8ahuRyK9Na7iv1hTrJHTqVOjqTkON
ogmLDY0kMJPUJ5BjDbJKw38E/bNFxEShr5pzGXpuDlO30ycWIWskH+DQpQoIJSdT
YCnRzptdKUUxulzHFTgH2UTMYAs3fTiQt5fNX9l+xMJ9+KabfAQElNoPHg7PQdJA
Kzf7GfwJUtCRaB1SlPGompficRkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSMsLir
p/f92ZR2bZHLJy+yRiG0QzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTQzMGQ1ZGItNWEwOS00NDYxLWI4MGEtYjlkNzU1ZDM0NmE5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BoA
MA0GCSqGSIb3DQEBCwUAA4IBAQB92RtOhAAs3VCzrOh718OrXQwgTa8Mex84o9Kw
Zcor4xrpgJBCLhI68FRF0TPCuGnxFkK8IYYuVk5SkSkeole0FqVvr7eJYXKCPqQH
RSfOovU/M6kfPoNc8OM8alDNGPtRic0bJ2Xz+0ePMZw6RzQpaKQFwdeHYP4GSr9E
63EX7XGCXmGSBrMcKcSAoRgjjdrbVsPtj8VH+pMylBOkec+VFZ9t7BHMLP8p+Qyz
l+7pr1+pWLfYJniv1A76a1HdWe/o00g9sXCO6/w9igOHSzmT8LHvRb52qMM5RCgv
M/4SliKzaI6G0kFQ7aMrX6lwBvBbiRUcrZOaBOpiMr3ffhM6
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:50:17 2025 by rpki-client