Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
File: ca3047ed-6074-479d-9d85-26334085e41c.roa (raw, json)
Hash identifier: x964Uwc4HWk/vGs/S5ct1yi816Oy3W565d7h/dcQUBY=
Subject key identifier: BD:52:D9:73:49:22:9B:B1:10:DB:62:2B:37:CB:02:BF:A4:EC:77:82
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19692B56136EA43804F1C40C763CCAF9E4508D51
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
Signing time: Fri 22 Aug 2025 15:10:40 +0000
ROA not before: Fri 22 Aug 2025 15:10:40 +0000
ROA not after: Fri 26 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:69:2b:56:13:6e:a4:38:04:f1:c4:0c:76:3c:ca:f9:e4:50:8d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 22 15:10:40 2025 GMT
Not After : Sep 26 23:59:59 2025 GMT
Subject: serialNumber=9fd679651ada13941c62e71f9276828c91f60e0ae14d10fc4162b0a82f1b3f36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:6c:6c:d1:bd:d4:a4:e9:d4:3b:30:27:40:
35:0b:e5:12:8c:46:33:d7:30:90:f8:f1:f8:df:96:
d5:05:9b:c2:d4:45:5d:70:13:80:75:c2:5b:ea:bb:
ca:88:c4:30:be:ba:d2:e2:bd:e0:ff:85:16:73:b1:
17:9a:e8:d8:26:d1:de:0f:81:8b:16:87:cb:5e:39:
2f:d9:b4:b6:12:0c:dc:ff:98:87:31:94:34:d0:b2:
b4:88:33:cb:c5:11:b9:5b:b7:ca:ba:bd:80:94:e5:
c3:be:8a:2b:e8:d4:b0:1e:cc:41:28:7a:5e:ee:b0:
c4:31:fd:7f:95:83:94:61:f3:74:8d:a3:f2:2d:9b:
63:b3:d5:6a:82:29:04:72:e9:6e:7f:cd:02:f1:78:
d9:da:90:76:8a:40:36:e8:a7:34:95:74:00:cd:e3:
c2:66:d8:61:42:03:13:c0:65:15:cc:d7:52:d5:f5:
46:7a:4d:10:7f:30:09:fc:0e:98:3e:d4:01:44:8a:
e3:91:b0:5c:b6:4b:4d:91:fd:2c:66:01:96:fc:da:
6d:0b:2c:fe:e1:fc:3a:e2:a9:71:f0:95:75:78:2b:
d1:a6:04:a5:09:24:c3:b9:6f:b2:4e:3f:54:8b:dd:
d4:70:62:59:cc:c4:69:5f:e2:1e:9c:b7:26:b8:3c:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:D9:73:49:22:9B:B1:10:DB:62:2B:37:CB:02:BF:A4:EC:77:82
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3047ed-6074-479d-9d85-26334085e41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.64.0/18
Signature Algorithm: sha256WithRSAEncryption
92:4f:ae:78:84:21:34:41:a8:4f:57:b1:5a:a1:3b:4a:a8:d5:
d4:2a:74:9e:43:ee:f8:16:db:6b:d0:13:60:77:62:eb:d2:eb:
c7:73:81:d1:5a:be:9a:f1:9b:5e:5e:93:3a:8d:58:87:04:d8:
61:c3:d3:8e:8f:a7:ed:d4:28:85:25:92:67:ef:2d:5e:2b:d4:
3d:9d:ed:b3:7c:3f:c7:83:05:35:7d:60:9c:58:38:30:b9:99:
fd:85:3c:04:4e:49:04:17:ff:8d:29:e5:06:71:a5:81:00:b7:
67:a6:f1:64:bd:fc:cd:e6:1b:31:44:0f:9c:57:ea:2f:d6:7e:
fb:11:d8:06:f9:66:79:f0:44:e2:d9:57:9b:5d:5f:5b:e6:a2:
0f:22:37:ba:68:a5:5b:fe:02:5b:60:97:d9:ed:6e:d9:34:86:
d3:91:bc:38:3d:6c:5c:a9:3e:a4:be:c3:4c:8a:ae:23:82:69:
48:80:97:2e:d4:96:4b:e5:4b:75:e9:2f:5b:04:21:4c:50:cf:
38:7b:b3:fa:7e:66:36:3c:ba:f9:03:30:7d:56:3c:99:ca:4b:
62:66:56:19:ef:bf:de:ec:75:df:b3:74:e3:55:48:e3:52:b7:
92:9e:3d:91:d4:48:0b:0d:67:f0:28:48:05:17:35:f9:0b:aa:
93:4c:ea:44
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUGWkrVhNupDgE8cQMdjzK+eRQjVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MjIxNTEwNDBaFw0yNTA5MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDlmZDY3OTY1MWFkYTEzOTQxYzYyZTcxZjkyNzY4MjhjOTFmNjBlMGFlMTRk
MTBmYzQxNjJiMGE4MmYxYjNmMzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI1JbGzRvdSk6dQ7MCdANQvlEoxGM9cwkPjx+N+W1QWbwtRFXXATgHXCW+q7
yojEML660uK94P+FFnOxF5ro2CbR3g+BixaHy145L9m0thIM3P+YhzGUNNCytIgz
y8URuVu3yrq9gJTlw76KK+jUsB7MQSh6Xu6wxDH9f5WDlGHzdI2j8i2bY7PVaoIp
BHLpbn/NAvF42dqQdopANuinNJV0AM3jwmbYYUIDE8BlFczXUtX1RnpNEH8wCfwO
mD7UAUSK45GwXLZLTZH9LGYBlvzabQss/uH8OuKpcfCVdXgr0aYEpQkkw7lvsk4/
VIvd1HBiWczEaV/iHpy3Jrg8ZykCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS9Utlz
SSKbsRDbYis3ywK/pOx3gjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2EzMDQ3ZWQtNjA3NC00NzlkLTlkODUtMjYzMzQwODVlNDFjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrAiQDAN
BgkqhkiG9w0BAQsFAAOCAQEAkk+ueIQhNEGoT1exWqE7SqjV1Cp0nkPu+Bbba9AT
YHdi69Lrx3OB0Vq+mvGbXl6TOo1YhwTYYcPTjo+n7dQohSWSZ+8tXivUPZ3ts3w/
x4MFNX1gnFg4MLmZ/YU8BE5JBBf/jSnlBnGlgQC3Z6bxZL38zeYbMUQPnFfqL9Z+
+xHYBvlmefBE4tlXm11fW+aiDyI3umilW/4CW2CX2e1u2TSG05G8OD1sXKk+pL7D
TIquI4JpSICXLtSWS+VLdekvWwQhTFDPOHuz+n5mNjy6+QMwfVY8mcpLYmZWGe+/
3ux137N041VI41K3kp49kdRICw1n8ChIBRc1+Quqk0zqRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:59:28 2025 by rpki-client