Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6c332d1-7ca9-4f9c-889d-410dabe8ebb0.roa
File: d6c332d1-7ca9-4f9c-889d-410dabe8ebb0.roa (raw, json)
Hash identifier: 2/jQQGIMWAPEUNjm+F/Z6PSKs78UmULS4cUiJy8pcQ8=
Subject key identifier: FC:5F:CA:C9:07:03:E4:FC:9F:8D:98:1E:74:FE:02:4A:DC:BB:7B:73
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4BBB94EB39CACDEAE67DFECC2669049712990067
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6c332d1-7ca9-4f9c-889d-410dabe8ebb0.roa
Signing time: Mon 16 Jun 2025 20:31:35 +0000
ROA not before: Mon 16 Jun 2025 20:31:35 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:bb:94:eb:39:ca:cd:ea:e6:7d:fe:cc:26:69:04:97:12:99:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:31:35 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=6d194efef2ba203cca626746da16263d87336bd70dfa2346a3d95becbdf35bc1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:5a:f6:88:a7:ec:98:76:b5:e5:d3:43:f2:
43:a7:43:d2:5c:9a:9b:cb:14:e6:0e:4f:be:f4:5b:
a9:f5:b1:0c:a8:99:a2:1b:54:95:6f:81:0f:cc:4f:
f0:49:7b:23:20:eb:1b:ff:22:70:06:8e:b0:b3:91:
cf:f9:60:c9:98:06:c8:a1:86:f0:fa:da:6e:70:7d:
2a:f6:68:02:2c:cc:e1:bc:99:03:04:73:e1:d2:ec:
49:40:c4:c6:4d:f1:5b:b7:b4:c7:cb:05:3b:6c:7f:
13:5c:72:aa:dc:e9:ac:27:c9:28:cf:d4:b6:56:db:
f4:fb:21:26:9b:fd:c8:c0:39:d6:32:35:45:91:b7:
7a:c0:cc:a1:5f:3c:a0:3f:32:57:65:ce:8d:fe:a2:
2b:65:15:16:9d:48:cd:69:46:13:bc:65:7a:dd:f0:
94:5f:e1:ea:d1:27:f5:ae:db:21:a6:88:e4:0d:d9:
40:7a:7f:20:5f:c9:a4:6f:00:7b:b9:63:57:bc:cd:
4b:5d:2d:f6:6f:99:8e:a5:ac:35:7a:64:84:98:b6:
67:b0:a0:81:b7:7b:e7:de:db:d5:37:94:52:19:c1:
d3:00:59:af:8b:24:d1:74:53:ce:76:32:ef:3f:5e:
df:9e:a5:ef:5e:6b:df:47:7e:46:09:df:dc:c9:e0:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:CA:C9:07:03:E4:FC:9F:8D:98:1E:74:FE:02:4A:DC:BB:7B:73
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6c332d1-7ca9-4f9c-889d-410dabe8ebb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a040::/46
Signature Algorithm: sha256WithRSAEncryption
87:d2:27:eb:e2:df:4d:ab:c7:14:72:13:29:9b:ba:89:36:9a:
c7:93:19:77:c7:f9:32:13:d9:9f:40:ac:1a:15:92:91:d4:55:
2d:b8:2d:0d:7d:fe:ad:18:ca:3a:1b:21:02:d5:62:0e:3f:24:
ad:bd:5d:f3:fd:38:ee:3e:60:5c:93:84:e8:16:e3:de:7c:b0:
e7:23:4b:41:43:a3:50:e4:de:2c:4d:e5:40:66:2c:5e:19:46:
11:e9:53:ef:59:f9:fa:43:86:8d:f7:e4:cd:0f:ed:5c:da:08:
2f:53:20:76:f9:d9:42:43:c6:57:94:46:ba:ba:fa:aa:7f:78:
31:6d:e5:a2:27:a9:5b:cb:45:9f:40:cf:27:55:58:29:49:12:
cd:29:75:42:0c:a0:1b:85:a8:2a:8a:05:87:51:28:d6:06:b1:
fa:b4:e2:d0:25:93:21:b6:8d:97:da:8e:f5:b8:3f:e9:8f:18:
34:98:36:b5:0c:17:98:b4:7f:83:b4:ac:d3:f6:6e:5d:e3:9b:
76:89:1e:b4:0a:3c:00:5c:8a:ad:a1:78:e8:a6:28:4e:34:d9:
d2:c2:da:8d:0f:7b:88:9e:c4:76:0b:91:96:66:d3:33:b1:85:
5f:c5:da:d1:8a:10:0f:3b:90:5f:20:16:b6:69:07:f8:05:5c:
f1:b7:25:2b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUS7uU6znKzermff7MJmkElxKZAGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMDMxMzVaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDZkMTk0ZWZlZjJiYTIwM2NjYTYyNjc0NmRhMTYyNjNkODczMzZiZDcwZGZh
MjM0NmEzZDk1YmVjYmRmMzViYzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALI6WvaIp+yYdrXl00PyQ6dD0lyam8sU5g5PvvRbqfWxDKiZohtUlW+BD8xP
8El7IyDrG/8icAaOsLORz/lgyZgGyKGG8PrabnB9KvZoAizM4byZAwRz4dLsSUDE
xk3xW7e0x8sFO2x/E1xyqtzprCfJKM/Utlbb9PshJpv9yMA51jI1RZG3esDMoV88
oD8yV2XOjf6iK2UVFp1IzWlGE7xlet3wlF/h6tEn9a7bIaaI5A3ZQHp/IF/JpG8A
e7ljV7zNS10t9m+ZjqWsNXpkhJi2Z7Cggbd7597b1TeUUhnB0wBZr4sk0XRTznYy
7z9e356l715r30d+Rgnf3MngWccCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT8X8rJ
BwPk/J+NmB50/gJK3Lt7czAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDZjMzMyZDEtN2NhOS00ZjljLTg4OWQtNDEwZGFiZThlYmIwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DWg
QDANBgkqhkiG9w0BAQsFAAOCAQEAh9In6+LfTavHFHITKZu6iTaax5MZd8f5MhPZ
n0CsGhWSkdRVLbgtDX3+rRjKOhshAtViDj8krb1d8/047j5gXJOE6Bbj3nyw5yNL
QUOjUOTeLE3lQGYsXhlGEelT71n5+kOGjffkzQ/tXNoIL1MgdvnZQkPGV5RGurr6
qn94MW3loiepW8tFn0DPJ1VYKUkSzSl1QgygG4WoKooFh1Eo1gax+rTi0CWTIbaN
l9qO9bg/6Y8YNJg2tQwXmLR/g7Ss0/ZuXeObdoketAo8AFyKraF46KYoTjTZ0sLa
jQ97iJ7EdguRlmbTM7GFX8Xa0YoQDzuQXyAWtmkH+AVc8bclKw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:50:19 2025 by rpki-client