Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb6f24ea-9fe8-46fd-b5b0-f03667b1672a.roa
File: eb6f24ea-9fe8-46fd-b5b0-f03667b1672a.roa (raw, json)
Hash identifier: wLF7w7fNoyoltdDaeUYuzY3TsAvJd20Tar/n9yBzJ/A=
Subject key identifier: C8:5F:41:EC:FA:33:1D:80:C7:8C:EE:C5:BA:5E:49:FF:EA:96:22:86
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3A5A193035AA26CB875B5A3C239B9A6952E7131D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb6f24ea-9fe8-46fd-b5b0-f03667b1672a.roa
Signing time: Mon 16 Jun 2025 20:41:36 +0000
ROA not before: Mon 16 Jun 2025 20:41:36 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5a:19:30:35:aa:26:cb:87:5b:5a:3c:23:9b:9a:69:52:e7:13:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:41:36 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=724b20fcea86dba28e6c7b9dfc2fb38c931b920430301a76ecb793dc907f3b1a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4d:99:db:93:32:b5:77:5f:38:9d:5d:ad:b3:
1b:51:78:19:e8:53:1c:d9:f9:fe:db:21:4f:ff:30:
89:1a:34:c6:96:c7:49:dd:d1:4c:df:57:92:e3:23:
35:23:9d:59:27:a2:a0:32:11:03:0e:34:9c:63:77:
7b:21:53:db:3a:92:45:e0:e8:37:c1:8b:76:fd:32:
bf:58:c0:e4:d6:52:2c:b2:c8:a8:ca:8f:39:93:b1:
8c:dd:69:d7:dc:72:ec:60:e5:50:1f:71:91:17:1d:
9c:72:93:e7:f6:ce:9f:36:e7:0b:52:6e:bc:54:bb:
5a:9f:75:10:9f:76:ad:e4:51:a5:49:38:01:ab:df:
e4:61:46:8a:f0:f5:51:b6:0e:4a:a8:c3:9d:a6:59:
dd:ab:24:7c:7e:75:53:74:20:9b:cf:d5:90:e5:9a:
cf:71:53:bd:43:74:47:0e:85:12:a6:70:25:d2:26:
05:81:32:0a:90:fe:36:29:f9:bd:a5:6d:92:16:e4:
0b:d0:24:ef:87:c5:ac:9b:c6:8a:50:c9:a6:cf:9b:
5f:47:14:5d:e8:bc:b2:2e:2a:25:82:41:b3:0f:0e:
39:8b:1d:c0:35:44:82:96:56:68:b3:fb:8a:74:7b:
fe:d6:e4:be:a6:f9:f3:7b:87:fb:c7:20:bf:88:32:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:41:EC:FA:33:1D:80:C7:8C:EE:C5:BA:5E:49:FF:EA:96:22:86
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb6f24ea-9fe8-46fd-b5b0-f03667b1672a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4040::/46
Signature Algorithm: sha256WithRSAEncryption
03:f4:f4:18:d3:de:a1:02:5d:54:6a:1e:89:a6:82:f0:88:4c:
ab:7a:21:b5:81:ec:c0:9d:14:76:2d:83:ca:db:f8:a1:37:97:
9d:58:0b:c3:df:f0:4f:33:06:46:4a:3e:8d:ef:5b:73:51:79:
00:01:1c:18:03:20:c2:df:f4:e2:c7:94:71:13:ed:ec:f9:f2:
26:e3:eb:e7:71:d6:89:08:51:c9:5a:3e:43:94:e0:08:bb:84:
b6:2e:dc:1d:60:77:0b:13:a7:7a:82:81:3c:99:29:ad:9f:24:
f5:64:ad:31:20:1c:b7:e6:4f:ac:85:6d:f1:84:69:5f:87:04:
2c:6e:99:f2:6a:9e:e5:e9:97:44:32:1a:8a:e9:cd:bc:d6:e0:
fc:bd:1d:b8:9d:b4:8c:79:10:21:67:43:06:40:5f:36:a1:9a:
ec:64:96:8c:3d:2b:82:79:9d:b1:a7:fa:cc:c9:33:5f:36:82:
88:17:c6:95:39:e7:e2:e6:64:9b:1b:d4:b9:0d:e4:63:80:45:
82:c5:06:8c:4f:a0:d3:bb:a5:4d:13:b1:80:85:3b:16:c2:fa:
eb:6d:fb:dc:bc:96:33:37:88:eb:26:eb:27:34:6d:35:b7:46:
03:56:68:d5:e9:24:eb:3e:c1:fa:48:3d:0b:df:f7:cb:cc:2a:
98:3f:f6:2e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOloZMDWqJsuHW1o8I5uaaVLnEx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMDQxMzZaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDcyNGIyMGZjZWE4NmRiYTI4ZTZjN2I5ZGZjMmZiMzhjOTMxYjkyMDQzMDMw
MWE3NmVjYjc5M2RjOTA3ZjNiMWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO5NmduTMrV3XzidXa2zG1F4GehTHNn5/tshT/8wiRo0xpbHSd3RTN9XkuMj
NSOdWSeioDIRAw40nGN3eyFT2zqSReDoN8GLdv0yv1jA5NZSLLLIqMqPOZOxjN1p
19xy7GDlUB9xkRcdnHKT5/bOnzbnC1JuvFS7Wp91EJ92reRRpUk4Aavf5GFGivD1
UbYOSqjDnaZZ3askfH51U3Qgm8/VkOWaz3FTvUN0Rw6FEqZwJdImBYEyCpD+Nin5
vaVtkhbkC9Ak74fFrJvGilDJps+bX0cUXei8si4qJYJBsw8OOYsdwDVEgpZWaLP7
inR7/tbkvqb583uH+8cgv4gyNC8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTIX0Hs
+jMdgMeM7sW6Xkn/6pYihjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWI2ZjI0ZWEtOWZlOC00NmZkLWI1YjAtZjAzNjY3YjE2NzJhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HtA
QDANBgkqhkiG9w0BAQsFAAOCAQEAA/T0GNPeoQJdVGoeiaaC8IhMq3ohtYHswJ0U
di2Dytv4oTeXnVgLw9/wTzMGRko+je9bc1F5AAEcGAMgwt/04seUcRPt7PnyJuPr
53HWiQhRyVo+Q5TgCLuEti7cHWB3CxOneoKBPJkprZ8k9WStMSAct+ZPrIVt8YRp
X4cELG6Z8mqe5emXRDIaiunNvNbg/L0duJ20jHkQIWdDBkBfNqGa7GSWjD0rgnmd
saf6zMkzXzaCiBfGlTnn4uZkmxvUuQ3kY4BFgsUGjE+g07ulTROxgIU7FsL66237
3LyWMzeI6ybrJzRtNbdGA1Zo1ekk6z7B+kg9C9/3y8wqmD/2Lg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:56:55 2025 by rpki-client