Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
File: e2212154-4339-4293-b1a8-15f06519a708.roa (raw, json)
Hash identifier: 5uDeahjGMJ4oJyBEJYGynNj0J0srrNwqWJzrp92WHA8=
Subject key identifier: 45:30:95:4C:23:02:F9:F5:B6:15:86:C9:66:64:0A:1E:A9:54:02:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 34250A2F508747312ABC183F21D6F54CAEC5D5E3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
Signing time: Wed 06 Aug 2025 00:51:11 +0000
ROA not before: Wed 06 Aug 2025 00:51:11 +0000
ROA not after: Wed 10 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:25:0a:2f:50:87:47:31:2a:bc:18:3f:21:d6:f5:4c:ae:c5:d5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 6 00:51:11 2025 GMT
Not After : Sep 10 23:59:59 2025 GMT
Subject: serialNumber=e39de958c37677438080b9d0a74f86cc84ff886f499292d18c5f39c37faf5f36, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:fc:4e:4c:86:49:97:38:65:d5:0d:4a:9f:
74:91:6b:f1:bf:5f:e9:fd:42:25:7f:5a:30:32:e6:
c6:ba:af:c9:fc:a3:15:48:bd:3d:c7:c1:e3:a5:fa:
fa:0b:bf:a6:d4:a1:31:c2:87:15:b6:e0:7c:78:58:
f6:c5:d7:32:76:dc:01:24:d5:3e:ff:4d:0c:14:fb:
77:9e:26:fc:24:cb:55:f2:63:a8:d6:6b:de:ff:11:
d9:f7:08:2a:ac:4d:0d:2b:bf:b5:22:b4:ab:9c:e9:
12:ca:b6:5e:76:46:7f:b4:67:df:71:a0:94:8b:89:
58:2d:8b:74:8a:93:ab:cd:5f:3e:2d:52:26:03:c7:
80:3e:cf:13:8d:4b:6f:53:51:a3:c8:4e:ce:d0:ec:
db:70:96:8c:88:ec:b1:90:b8:c4:bb:56:69:46:82:
27:0d:31:e2:c4:4a:e4:5b:f5:66:39:8f:b0:ab:e7:
27:9e:22:d9:1c:02:f5:e4:d4:d9:8c:8d:09:a0:f2:
46:c0:e4:5a:54:ec:b5:ed:ac:e4:66:99:cb:2a:97:
7e:36:25:52:1b:79:e7:5e:23:cc:ad:21:81:e8:dc:
f0:97:1c:83:6f:c9:b5:58:e4:66:50:ae:41:2f:d2:
a4:02:88:d1:75:06:96:78:1d:dd:56:05:b8:64:77:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:30:95:4C:23:02:F9:F5:B6:15:86:C9:66:64:0A:1E:A9:54:02:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
22:9b:cd:1d:73:d8:2c:1d:a0:5a:13:a9:47:72:02:e5:47:de:
1b:f8:23:f1:12:06:44:c8:58:71:00:da:a0:59:8f:a4:f4:0e:
24:15:0b:e5:95:71:6b:0d:14:ca:1e:53:72:8d:33:b9:d9:29:
ca:8a:2a:6d:ce:78:0b:06:be:e0:ce:dc:57:04:8e:1a:f2:16:
b6:be:fd:7b:c9:c5:27:7d:a6:9e:87:f4:24:5d:f4:d9:52:41:
2b:1f:fc:64:14:07:3e:77:40:cd:7d:16:df:f2:ec:8a:09:06:
9b:6e:b0:2d:b1:82:48:07:a4:13:47:9c:8d:45:ea:86:e8:d5:
a7:eb:9b:6b:2f:f3:f2:4a:80:2d:95:e7:21:b6:9f:c4:ba:ff:
67:93:27:9f:ee:86:a6:c6:d5:97:d2:f0:b2:bd:61:b1:bb:98:
22:45:36:40:62:f9:18:4a:18:7c:16:16:7a:0a:ed:e2:8d:be:
b9:22:43:5a:97:7f:5f:e3:3b:71:ef:16:8b:1f:d2:46:e6:95:
1a:ce:cd:58:9a:4f:b7:63:db:e4:c9:6e:8a:99:31:0f:24:55:
f4:9f:e7:8e:f3:c7:ab:8d:cb:38:3e:52:49:01:0f:5e:d2:8b:
81:ec:6d:cf:aa:05:0f:f6:f3:c2:15:95:d6:98:ce:35:49:6b:
61:7e:91:3f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNCUKL1CHRzEqvBg/Idb1TK7F1eMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDYwMDUxMTFaFw0yNTA5MTAyMzU5NTlaMHoxSTBHBgNV
BAUTQGUzOWRlOTU4YzM3Njc3NDM4MDgwYjlkMGE3NGY4NmNjODRmZjg4NmY0OTky
OTJkMThjNWYzOWMzN2ZhZjVmMzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALya/E5MhkmXOGXVDUqfdJFr8b9f6f1CJX9aMDLmxrqvyfyjFUi9PcfB46X6
+gu/ptShMcKHFbbgfHhY9sXXMnbcASTVPv9NDBT7d54m/CTLVfJjqNZr3v8R2fcI
KqxNDSu/tSK0q5zpEsq2XnZGf7Rn33GglIuJWC2LdIqTq81fPi1SJgPHgD7PE41L
b1NRo8hOztDs23CWjIjssZC4xLtWaUaCJw0x4sRK5Fv1ZjmPsKvnJ54i2RwC9eTU
2YyNCaDyRsDkWlTste2s5GaZyyqXfjYlUht5514jzK0hgejc8Jccg2/JtVjkZlCu
QS/SpAKI0XUGlngd3VYFuGR3W+UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRFMJVM
IwL59bYVhslmZAoeqVQCizAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTIyMTIxNTQtNDMzOS00MjkzLWIxYTgtMTVmMDY1MTlhNzA4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G+g
MA0GCSqGSIb3DQEBCwUAA4IBAQAim80dc9gsHaBaE6lHcgLlR94b+CPxEgZEyFhx
ANqgWY+k9A4kFQvllXFrDRTKHlNyjTO52SnKiiptzngLBr7gztxXBI4a8ha2vv17
ycUnfaaeh/QkXfTZUkErH/xkFAc+d0DNfRbf8uyKCQabbrAtsYJIB6QTR5yNReqG
6NWn65trL/PySoAtlechtp/Euv9nkyef7oamxtWX0vCyvWGxu5giRTZAYvkYShh8
FhZ6Cu3ijb65IkNal39f4ztx7xaLH9JG5pUazs1Ymk+3Y9vkyW6KmTEPJFX0n+eO
88erjcs4PlJJAQ9e0ouB7G3PqgUP9vPCFZXWmM41SWthfpE/
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:13 2025 by rpki-client