Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed090164-248d-4744-ac85-e5cadbc41a70.roa
File: ed090164-248d-4744-ac85-e5cadbc41a70.roa (raw, json)
Hash identifier: 2iZVfIOf5qHrKoB6y9tbeNC5TdCg8Lu6DPWGBGcLZfc=
Subject key identifier: 65:AD:B1:A4:D5:C7:1C:69:43:93:CC:9A:DF:32:F0:20:23:C0:64:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45971DB0C369BC72EB6FD38AD9927A385C322A1A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed090164-248d-4744-ac85-e5cadbc41a70.roa
Signing time: Mon 16 Jun 2025 21:00:58 +0000
ROA not before: Mon 16 Jun 2025 21:00:58 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:97:1d:b0:c3:69:bc:72:eb:6f:d3:8a:d9:92:7a:38:5c:32:2a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 21:00:58 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=e44c1b8de1cf184f698072ce4636dfeb647965ce6a37a59159413e62dc7a5889, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:ac:57:76:ab:2b:29:c3:49:97:3d:2f:96:
b2:b8:71:12:e1:0d:21:43:30:de:f8:26:48:4b:9f:
da:c3:a3:05:36:28:b4:e8:27:f4:59:f1:97:8d:9f:
d3:07:5e:df:e6:d9:4e:87:ed:63:44:f1:16:73:34:
1f:f6:94:56:64:65:00:cf:25:f8:b4:50:01:dd:95:
c1:54:b3:1e:95:f3:2f:d8:e5:d3:d2:18:6f:14:1e:
13:7c:73:4f:f5:00:8c:41:75:ad:b7:2f:f2:02:3f:
87:f1:65:b9:50:d0:81:33:26:da:a5:84:92:f8:c5:
ee:cf:d4:7c:ce:9c:73:15:a6:9e:ec:15:b0:f6:c1:
87:40:e4:d0:77:96:de:e8:32:9d:25:48:21:86:b9:
f6:22:94:3e:04:fa:5e:82:46:0b:e0:e7:bb:a4:be:
80:27:cf:f8:c8:cf:31:25:f3:9a:ea:74:cd:af:ee:
85:30:10:f8:52:ba:a4:23:7a:81:13:00:da:b4:70:
8e:00:3a:38:10:18:b9:49:e9:83:41:37:50:2c:bd:
a9:44:89:bd:4c:84:1e:5d:ca:a6:97:23:f8:57:5c:
ac:73:1f:7c:c9:4e:54:95:36:6c:14:22:27:d7:63:
83:81:ca:48:20:6e:95:15:0b:f7:e7:87:ce:6d:3d:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:B1:A4:D5:C7:1C:69:43:93:CC:9A:DF:32:F0:20:23:C0:64:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ed090164-248d-4744-ac85-e5cadbc41a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:e000::/40
Signature Algorithm: sha256WithRSAEncryption
38:3b:16:43:66:5c:17:ab:96:e0:47:8b:c7:f7:89:76:5d:29:
4d:59:2b:2b:28:c6:ab:2b:ad:12:f6:80:69:26:b3:0a:d5:85:
54:0b:19:f3:a3:1d:4d:fa:e6:84:a3:3d:83:1b:98:f2:d3:9e:
39:62:3a:87:26:39:01:ef:91:27:78:8e:f6:14:f3:eb:7d:79:
3a:9d:a3:e7:41:ce:21:27:77:8d:97:28:43:4f:7b:05:f8:8f:
82:01:25:91:c2:73:bc:78:4f:3d:79:11:54:8e:f6:08:9e:02:
41:08:a6:62:8f:a1:a4:80:f9:8a:6f:6b:84:cc:12:88:fc:1d:
64:5a:83:13:bf:1c:51:24:43:9e:49:b5:40:57:0a:06:85:83:
ae:55:99:0b:7f:0f:5a:38:bc:1c:62:d4:a6:06:b1:c3:9f:b1:
eb:03:cf:39:52:ef:14:ed:4f:43:3b:db:5a:b2:c9:64:8c:f4:
27:25:8e:02:44:18:44:c6:b9:8a:b1:cb:0d:ec:cd:c5:10:fb:
2f:46:4e:5d:ef:22:d3:2c:8e:64:69:ec:66:a3:e3:3e:bb:5e:
8d:ab:29:37:9c:e4:7c:9f:ca:de:fc:37:a8:bf:2e:db:1e:c1:
4c:3a:f6:1c:1c:6b:be:31:21:ca:23:ac:9f:14:fa:6e:73:b6:
29:03:1d:28
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURZcdsMNpvHLrb9OK2ZJ6OFwyKhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMTAwNThaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGU0NGMxYjhkZTFjZjE4NGY2OTgwNzJjZTQ2MzZkZmViNjQ3OTY1Y2U2YTM3
YTU5MTU5NDEzZTYyZGM3YTU4ODkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOR2rFd2qyspw0mXPS+WsrhxEuENIUMw3vgmSEuf2sOjBTYotOgn9Fnxl42f
0wde3+bZToftY0TxFnM0H/aUVmRlAM8l+LRQAd2VwVSzHpXzL9jl09IYbxQeE3xz
T/UAjEF1rbcv8gI/h/FluVDQgTMm2qWEkvjF7s/UfM6ccxWmnuwVsPbBh0Dk0HeW
3ugynSVIIYa59iKUPgT6XoJGC+Dnu6S+gCfP+MjPMSXzmup0za/uhTAQ+FK6pCN6
gRMA2rRwjgA6OBAYuUnpg0E3UCy9qUSJvUyEHl3Kppcj+FdcrHMffMlOVJU2bBQi
J9djg4HKSCBulRUL9+eHzm09qcECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRlrbGk
1cccaUOTzJrfMvAgI8BkAzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZWQwOTAxNjQtMjQ4ZC00NzQ0LWFjODUtZTVjYWRiYzQxYTcwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hfg
MA0GCSqGSIb3DQEBCwUAA4IBAQA4OxZDZlwXq5bgR4vH94l2XSlNWSsrKMarK60S
9oBpJrMK1YVUCxnzox1N+uaEoz2DG5jy0545YjqHJjkB75EneI72FPPrfXk6naPn
Qc4hJ3eNlyhDT3sF+I+CASWRwnO8eE89eRFUjvYIngJBCKZij6GkgPmKb2uEzBKI
/B1kWoMTvxxRJEOeSbVAVwoGhYOuVZkLfw9aOLwcYtSmBrHDn7HrA885Uu8U7U9D
O9tasslkjPQnJY4CRBhExrmKscsN7M3FEPsvRk5d7yLTLI5kaexmo+M+u16Nqyk3
nOR8n8re/Deovy7bHsFMOvYcHGu+MSHKI6yfFPpuc7YpAx0o
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:42:14 2025 by rpki-client