Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
File: cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa (raw, json)
Hash identifier: zF7mE4TSB3mjimtmJEAPrIn0EmvUsIQHK5BNyWhs+tQ=
Subject key identifier: 59:E8:21:EF:CC:CF:F6:79:82:D2:20:77:08:54:F4:F2:87:EA:D1:DA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7F54FB688848B6203FC029F6532676820B50203F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
Signing time: Mon 16 Jun 2025 20:01:15 +0000
ROA not before: Mon 16 Jun 2025 20:01:15 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:54:fb:68:88:48:b6:20:3f:c0:29:f6:53:26:76:82:0b:50:20:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:01:15 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=03bb1e88909f7a56446a511fa18e00e13fa6dcf24d08c1d257a74ce4bd5b3008, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:b2:35:a0:88:63:c5:d4:23:7e:ed:47:2d:
29:7a:5d:3a:65:0a:49:25:43:e1:68:e3:9e:9c:26:
a4:d9:d6:14:d3:f6:87:0e:eb:28:c1:0c:ad:e4:2a:
82:68:8b:4e:fd:d0:4b:26:07:5d:08:a5:81:d1:e6:
25:1a:73:cc:0b:79:c2:04:d2:63:d9:3a:a8:1b:53:
73:ea:ec:02:1e:99:b5:c3:ee:57:6f:b1:d7:7b:3d:
d2:9f:c5:43:1f:0a:0d:19:33:d1:1f:94:fa:89:3e:
a7:30:d0:2a:9e:ec:4a:d8:6b:df:d0:77:84:c5:6c:
e0:b4:08:04:e0:bd:64:36:82:8c:0f:5b:db:6a:bb:
bc:1b:b1:7d:b3:82:00:ad:52:79:63:5c:a0:71:88:
a2:ef:3e:88:4c:94:66:76:1b:91:80:ae:60:47:cb:
d4:d3:44:c8:e0:0c:b4:43:aa:89:75:f7:5a:f7:56:
da:91:b3:64:16:e8:cf:b3:d6:ae:37:d3:10:16:fe:
35:06:ff:03:8d:46:f3:b2:c4:dd:07:9a:49:d1:d8:
a9:09:57:e9:34:4b:18:ed:76:98:f3:7a:78:41:08:
24:d8:f4:f5:74:02:93:46:50:8e:c8:63:25:9a:51:
42:56:e4:af:3f:fb:cf:9b:e1:cf:55:bd:0a:37:ca:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E8:21:EF:CC:CF:F6:79:82:D2:20:77:08:54:F4:F2:87:EA:D1:DA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
05:82:fd:00:a6:fc:03:66:bd:cd:5a:36:2d:57:b5:07:27:f3:
35:12:04:20:bc:1d:d6:b0:8b:70:78:e4:da:d8:2d:b4:ed:cb:
b5:8f:8d:89:1c:70:c1:c7:2b:e2:7c:63:ae:c4:c0:89:c2:ec:
88:5b:4e:73:db:81:34:67:6e:d3:9d:42:bc:af:6e:68:34:48:
72:e0:c5:a7:88:d6:41:13:9f:4e:41:29:cd:cd:cb:af:a1:2d:
df:75:19:43:91:ff:99:c1:3d:1d:52:f6:6a:a4:f6:fb:81:43:
a6:f9:21:48:16:d6:f2:2e:5b:b7:a0:c8:94:4a:4f:b6:1d:08:
a0:4a:04:25:fb:fa:18:43:d8:29:0d:f1:2b:e7:59:8b:93:24:
90:1f:9b:a7:33:af:2f:73:a0:1f:d8:4a:02:0c:91:d3:c5:21:
a0:26:1c:bb:c3:87:d7:31:96:be:ad:b1:07:42:43:27:8a:4e:
a0:d9:b4:c8:c5:54:cb:ea:00:a9:90:f8:e5:fd:6f:86:aa:70:
cb:b2:7e:7c:c2:4a:8f:07:08:ba:91:1b:87:18:00:cd:54:87:
d8:75:5d:66:51:3e:3e:37:f2:e4:8f:00:58:14:19:e2:42:05:
43:de:6d:b3:70:42:c6:2c:f9:13:39:67:24:06:e0:35:a6:83:
70:90:63:d1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUf1T7aIhItiA/wCn2UyZ2ggtQID8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMDAxMTVaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDAzYmIxZTg4OTA5ZjdhNTY0NDZhNTExZmExOGUwMGUxM2ZhNmRjZjI0ZDA4
YzFkMjU3YTc0Y2U0YmQ1YjMwMDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIvrsjWgiGPF1CN+7UctKXpdOmUKSSVD4WjjnpwmpNnWFNP2hw7rKMEMreQq
gmiLTv3QSyYHXQilgdHmJRpzzAt5wgTSY9k6qBtTc+rsAh6ZtcPuV2+x13s90p/F
Qx8KDRkz0R+U+ok+pzDQKp7sSthr39B3hMVs4LQIBOC9ZDaCjA9b22q7vBuxfbOC
AK1SeWNcoHGIou8+iEyUZnYbkYCuYEfL1NNEyOAMtEOqiXX3WvdW2pGzZBboz7PW
rjfTEBb+NQb/A41G87LE3QeaSdHYqQlX6TRLGO12mPN6eEEIJNj09XQCk0ZQjshj
JZpRQlbkrz/7z5vhz1W9CjfKZTkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRZ6CHv
zM/2eYLSIHcIVPTyh+rR2jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Y2YWMzZWYtODJmNS00YWJjLWEzNmUtNDA1Yjg2M2Y4ODRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
oDANBgkqhkiG9w0BAQsFAAOCAQEABYL9AKb8A2a9zVo2LVe1ByfzNRIEILwd1rCL
cHjk2tgttO3LtY+NiRxwwccr4nxjrsTAicLsiFtOc9uBNGdu051CvK9uaDRIcuDF
p4jWQROfTkEpzc3Lr6Et33UZQ5H/mcE9HVL2aqT2+4FDpvkhSBbW8i5bt6DIlEpP
th0IoEoEJfv6GEPYKQ3xK+dZi5MkkB+bpzOvL3OgH9hKAgyR08UhoCYcu8OH1zGW
vq2xB0JDJ4pOoNm0yMVUy+oAqZD45f1vhqpwy7J+fMJKjwcIupEbhxgAzVSH2HVd
ZlE+Pjfy5I8AWBQZ4kIFQ95ts3BCxiz5EzlnJAbgNaaDcJBj0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:22 2025 by rpki-client