Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
File: bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa (raw, json)
Hash identifier: ohCp0pSdrD2VLz20ztmX+rT4+zOHTzEvIXE0A5NWg8I=
Subject key identifier: 5F:FA:E1:A2:70:97:62:5F:0D:0E:80:96:31:F3:C9:29:DE:1C:44:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 613D2AD1065D5E09DDD994BA50D0B2B837D40C86
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
Signing time: Tue 19 Aug 2025 17:01:13 +0000
ROA not before: Tue 19 Aug 2025 17:01:13 +0000
ROA not after: Tue 23 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3d:2a:d1:06:5d:5e:09:dd:d9:94:ba:50:d0:b2:b8:37:d4:0c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 19 17:01:13 2025 GMT
Not After : Sep 23 23:59:59 2025 GMT
Subject: serialNumber=b116fb92f76bc67f9176bf8b5d4729a2f2a65b0277b57a10c521e2f1a9fdd898, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:15:c8:a3:20:67:6b:94:19:ca:d0:ad:1d:
b7:87:8e:b8:d4:4f:d4:3c:47:2c:f8:dd:21:ba:ff:
a6:5c:2a:72:81:e1:cb:82:1e:6a:4c:e4:bb:06:ee:
84:e7:09:63:a2:64:bd:4c:4c:2e:2a:52:c8:bb:61:
db:e5:9b:d9:9b:64:b5:ec:ed:d5:3a:f5:ef:e1:7c:
ff:53:7d:b4:65:d9:58:d2:62:cc:19:30:fa:94:32:
fd:18:90:c8:e7:10:79:e5:ec:50:f2:ff:08:5a:f4:
5a:84:37:b4:c0:34:79:ba:ba:25:ae:e7:f9:ba:cf:
c5:7d:93:ef:34:e6:99:a6:93:b1:17:a9:0a:48:b8:
b2:48:6e:2c:81:57:44:5d:be:a1:48:36:ae:97:30:
c5:8d:09:2b:1f:93:a3:ea:07:b0:91:23:c7:f2:04:
d5:7c:d6:7a:cb:b1:86:2f:9b:e1:9d:af:ee:98:51:
b5:5c:fa:09:87:87:6f:cb:5e:b9:23:c2:22:44:e2:
91:bd:d7:94:56:b1:fc:fe:06:0c:e4:d7:43:39:e2:
59:f0:a0:79:19:ed:c1:7f:14:7f:a2:3c:a9:f0:7d:
43:16:dc:34:17:49:b0:74:e8:a4:be:c2:10:2e:ea:
f2:3d:a9:08:bb:41:c5:45:2f:ab:30:72:53:28:45:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:E1:A2:70:97:62:5F:0D:0E:80:96:31:F3:C9:29:DE:1C:44:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdc831eb-07c2-47bb-a73d-177abc9b14c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.204.0/22
Signature Algorithm: sha256WithRSAEncryption
22:7f:cb:7c:a5:0e:b2:a5:fe:34:5a:2a:48:6c:aa:4c:c5:64:
15:6f:5c:c0:9f:2c:9e:d6:1f:12:a3:25:61:c3:02:61:38:f8:
72:05:b9:c2:a6:e4:1f:4c:93:44:a1:18:89:41:27:f1:e6:91:
65:59:cd:f7:67:f3:df:af:f4:2f:3a:f4:fd:33:14:26:a5:ec:
c9:fd:16:6b:98:36:7c:29:a0:0a:06:ce:37:fb:20:60:74:8c:
4a:85:8d:b1:81:62:13:e9:a7:d4:61:12:c0:b9:97:82:ac:c6:
85:c0:86:4c:f8:d5:b4:10:93:35:07:95:44:ad:d2:d3:38:e4:
d8:28:d4:79:03:84:b5:f2:8c:d1:f3:cc:31:a8:3c:7d:29:1a:
c6:cb:e6:e6:a0:51:78:8f:20:d9:a9:86:8b:e5:de:e4:82:3a:
e7:25:8e:f6:0a:4b:ff:af:63:cb:81:e3:7b:b3:99:62:ca:5a:
7e:ef:81:14:5e:02:b2:ba:0b:fd:a3:d5:d5:ec:50:e8:a9:c8:
a3:0b:ba:36:3d:8f:ef:d1:95:30:7e:d3:e3:f6:7b:d1:d5:ca:
e0:16:70:ca:5c:fe:80:87:af:05:a6:26:d3:f3:45:d6:a7:b0:
5b:30:11:f8:84:69:22:26:2e:f1:80:59:cc:6c:32:9c:56:b4:
5e:cd:cb:79
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYT0q0QZdXgnd2ZS6UNCyuDfUDIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MTkxNzAxMTNaFw0yNTA5MjMyMzU5NTlaMHoxSTBHBgNV
BAUTQGIxMTZmYjkyZjc2YmM2N2Y5MTc2YmY4YjVkNDcyOWEyZjJhNjViMDI3N2I1
N2ExMGM1MjFlMmYxYTlmZGQ4OTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANjbFcijIGdrlBnK0K0dt4eOuNRP1DxHLPjdIbr/plwqcoHhy4Ieakzkuwbu
hOcJY6JkvUxMLipSyLth2+Wb2Ztktezt1Tr17+F8/1N9tGXZWNJizBkw+pQy/RiQ
yOcQeeXsUPL/CFr0WoQ3tMA0ebq6Ja7n+brPxX2T7zTmmaaTsRepCki4skhuLIFX
RF2+oUg2rpcwxY0JKx+To+oHsJEjx/IE1XzWesuxhi+b4Z2v7phRtVz6CYeHb8te
uSPCIkTikb3XlFax/P4GDOTXQzniWfCgeRntwX8Uf6I8qfB9QxbcNBdJsHTopL7C
EC7q8j2pCLtBxUUvqzByUyhFe3MCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRf+uGi
cJdiXw0OgJYx88kp3hxEMDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmRjODMxZWItMDdjMi00N2JiLWE3M2QtMTc3YWJjOWIxNGMwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6JzDAN
BgkqhkiG9w0BAQsFAAOCAQEAIn/LfKUOsqX+NFoqSGyqTMVkFW9cwJ8sntYfEqMl
YcMCYTj4cgW5wqbkH0yTRKEYiUEn8eaRZVnN92fz36/0Lzr0/TMUJqXsyf0Wa5g2
fCmgCgbON/sgYHSMSoWNsYFiE+mn1GESwLmXgqzGhcCGTPjVtBCTNQeVRK3S0zjk
2CjUeQOEtfKM0fPMMag8fSkaxsvm5qBReI8g2amGi+Xe5II65yWO9gpL/69jy4Hj
e7OZYspafu+BFF4CsroL/aPV1exQ6KnIowu6Nj2P79GVMH7T4/Z70dXK4BZwylz+
gIevBaYm0/NF1qewWzAR+IRpIiYu8YBZzGwynFa0Xs3LeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:57:14 2025 by rpki-client