Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
File: bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json)
Hash identifier: 1g2bVZyUfvyGway3okP6OAJF96jbrV/oHRzF+x50sC8=
Subject key identifier: 64:A3:CA:D5:6A:2E:1F:C8:DD:3C:8B:F9:D7:9E:DB:E2:BE:EE:C2:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48DF6CB49638D287BA1B3309F556A937D85FBD2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
Signing time: Mon 16 Jun 2025 21:41:04 +0000
ROA not before: Mon 16 Jun 2025 21:41:04 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d021::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:df:6c:b4:96:38:d2:87:ba:1b:33:09:f5:56:a9:37:d8:5f:bd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:41:04 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=b0a98a402f86314c326ffcee0f9b11ab571f216d2d42ac95646c6f79442cc050, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:5f:b6:0f:66:dd:40:02:65:78:82:0f:7c:
d9:b2:c5:05:3c:47:67:20:bb:d1:65:50:f1:89:af:
a5:b5:08:51:0c:30:b4:a4:65:fd:c4:4c:e6:0d:47:
f3:36:a2:21:41:cf:68:2f:46:6d:11:4d:69:9f:06:
bc:eb:4a:c3:61:c1:72:6c:94:5e:27:19:e3:ac:8d:
b0:41:63:94:79:b3:09:11:be:a4:2a:33:52:93:52:
4b:62:36:36:66:e8:f1:6b:e0:56:c0:ae:4e:93:8b:
56:8a:cd:60:ca:9c:32:2b:bc:8a:5d:2a:1f:a3:3f:
18:6d:12:60:b6:e5:03:fc:26:43:c7:d2:0d:d7:de:
dc:b5:90:6d:21:77:fa:99:65:86:cf:ee:58:76:33:
fb:70:ff:12:e7:65:a8:33:0a:41:a7:e7:13:96:9a:
03:61:14:f3:48:34:c5:92:b6:ce:3b:b3:30:c7:57:
67:3d:11:b9:14:21:49:6c:17:fb:a3:9a:26:69:12:
16:f5:2d:ee:ad:1e:c8:2a:55:f5:db:0d:36:46:f4:
71:4d:50:90:1b:3d:db:17:84:b6:67:0c:a5:5a:3b:
b3:37:df:0f:9b:0a:f9:84:b4:8f:2f:a2:1c:7d:2d:
46:bb:05:6a:dd:d6:2e:85:8c:7c:c7:b6:3e:16:68:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:CA:D5:6A:2E:1F:C8:DD:3C:8B:F9:D7:9E:DB:E2:BE:EE:C2:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d021::/36
Signature Algorithm: sha256WithRSAEncryption
94:28:77:55:b4:9b:f8:e5:59:6e:c9:bb:82:69:53:24:55:80:
c6:91:a0:30:b2:7d:5f:85:4a:52:65:8e:46:fe:f5:31:1b:cc:
82:51:b0:26:3a:f2:08:09:56:71:2b:0f:c8:f7:c1:50:64:05:
2e:99:54:bf:18:c8:d8:a5:76:61:d1:6e:7a:87:eb:d9:d2:7b:
cd:58:f0:f3:45:42:c5:6a:9d:38:ec:0c:3d:0f:07:a4:b7:cf:
5b:b1:43:76:99:a1:cb:5e:9e:53:0f:84:fa:37:78:83:28:7b:
f6:ba:39:81:05:65:0d:01:a8:1a:6f:a7:11:8d:93:32:c2:24:
59:46:a0:b0:f3:8a:ee:b7:24:d7:25:ee:28:79:62:e5:58:2b:
45:c1:80:b2:6f:af:4b:b0:2f:d8:25:a4:24:97:f3:0d:be:f7:
fe:05:93:04:50:f5:89:9b:1b:34:3b:a6:05:ed:a5:08:71:8c:
d9:32:2b:7e:8a:ec:53:6c:c7:39:60:15:cb:ce:45:bc:25:76:
5f:bd:b3:5d:c0:4b:49:1a:13:51:22:44:7c:fd:2d:c4:06:05:
d1:1f:31:52:9d:59:bd:ba:cc:6b:a5:30:f6:3c:ea:de:13:7f:
4a:c3:e2:2c:8e:26:b8:36:44:f0:24:00:62:f9:ca:3d:f0:b9:
17:f2:c4:d1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSN9stJY40oe6GzMJ9VapN9hfvS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMTQxMDRaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGIwYTk4YTQwMmY4NjMxNGMzMjZmZmNlZTBmOWIxMWFiNTcxZjIxNmQyZDQy
YWM5NTY0NmM2Zjc5NDQyY2MwNTAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4xX7YPZt1AAmV4gg982bLFBTxHZyC70WVQ8YmvpbUIUQwwtKRl/cRM5g1H
8zaiIUHPaC9GbRFNaZ8GvOtKw2HBcmyUXicZ46yNsEFjlHmzCRG+pCozUpNSS2I2
Nmbo8WvgVsCuTpOLVorNYMqcMiu8il0qH6M/GG0SYLblA/wmQ8fSDdfe3LWQbSF3
+pllhs/uWHYz+3D/EudlqDMKQafnE5aaA2EU80g0xZK2zjuzMMdXZz0RuRQhSWwX
+6OaJmkSFvUt7q0eyCpV9dsNNkb0cU1QkBs92xeEtmcMpVo7szffD5sK+YS0jy+i
HH0tRrsFat3WLoWMfMe2PhZoM0cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRko8rV
ai4fyN08i/nXntvivu7CkDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmRkMzM1NjItMjY1My00NTQ5LTg0ZGMtMjVmOTZhYTEwYTgzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCUKHdVtJv45VluybuCaVMkVYDGkaAwsn1fhUpS
ZY5G/vUxG8yCUbAmOvIICVZxKw/I98FQZAUumVS/GMjYpXZh0W56h+vZ0nvNWPDz
RULFap047Aw9Dwekt89bsUN2maHLXp5TD4T6N3iDKHv2ujmBBWUNAagab6cRjZMy
wiRZRqCw84rutyTXJe4oeWLlWCtFwYCyb69LsC/YJaQkl/MNvvf+BZMEUPWJmxs0
O6YF7aUIcYzZMit+iuxTbMc5YBXLzkW8JXZfvbNdwEtJGhNRIkR8/S3EBgXRHzFS
nVm9usxrpTD2POreE39Kw+Isjia4NkTwJABi+co98LkX8sTR
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:15:19 2025 by rpki-client