Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
File: f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa (raw, json)
Hash identifier: EMvZDW+iNj+PRukxSY/lbZN9Ajz93WNU3X4WdFJXr08=
Subject key identifier: D9:D2:C3:C2:C8:E0:62:FD:2A:A5:41:11:EC:43:BC:40:C0:79:13:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 026CCA9A561758D9EB8E77F57272F95FEA6BF9F2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
Signing time: Mon 16 Jun 2025 20:50:44 +0000
ROA not before: Mon 16 Jun 2025 20:50:44 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:80c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6c:ca:9a:56:17:58:d9:eb:8e:77:f5:72:72:f9:5f:ea:6b:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:50:44 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=6d1d0eb39e49f8ed97b6a2c66928664315c8759445430b570ffc8d01a87ce4ef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:2d:b1:df:62:38:71:81:ad:72:af:5c:45:
8e:24:85:d8:28:af:5a:ca:0e:d7:1d:fa:8a:50:d9:
c1:27:93:9c:e0:c8:38:47:f5:4d:94:f2:c0:1e:e5:
30:83:63:d2:56:20:0d:04:ff:7c:48:b4:bc:50:bc:
16:0d:7f:26:82:24:d7:12:14:40:ca:53:bd:13:f1:
92:f4:6b:4f:d8:93:5f:be:de:bc:ab:25:a1:77:24:
ee:ce:c4:f8:af:9e:da:c2:13:ce:0f:36:6c:39:f8:
b5:4f:dd:8d:15:8a:fe:cb:1f:76:e9:f0:6e:01:ec:
8e:5d:2e:3f:cf:e9:ea:58:be:11:f7:f3:ce:b8:a7:
07:96:f9:db:4e:72:b2:f5:8d:c8:7c:cc:ca:3c:4a:
9f:49:38:d9:08:8a:ff:5d:69:d8:ac:42:2e:b3:07:
26:ae:3e:4d:12:2a:2e:f7:79:69:ef:03:53:04:7b:
21:38:49:d4:70:e1:33:0e:70:e1:7c:5e:4c:11:50:
36:db:86:14:72:92:d1:ee:c5:3b:3f:e3:9b:e1:28:
2b:2c:d5:46:5e:f7:2f:35:46:ba:61:af:74:54:e4:
1c:07:b6:58:83:08:b8:f8:cd:0e:27:0f:76:62:22:
17:98:95:b2:a9:da:9c:3c:af:42:87:81:82:30:42:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:C3:C2:C8:E0:62:FD:2A:A5:41:11:EC:43:BC:40:C0:79:13:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f0de1a64-465a-4de6-8a1f-164b7f3a2c32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
45:73:a2:37:f0:b5:46:36:48:0b:3d:e7:48:8b:b9:23:fb:3b:
6b:0c:c9:8c:f1:8c:79:8e:03:41:1f:1c:71:1a:0c:a5:84:ee:
2b:e0:2f:e1:d9:a9:15:5c:b2:d6:8a:87:b4:91:74:f7:42:18:
16:12:e4:a5:27:26:b4:99:89:ea:c6:92:19:0a:97:4b:a4:0e:
06:e2:91:2f:51:3c:14:78:7d:39:cb:c9:72:63:d5:0e:6f:81:
c2:d1:f5:a5:c0:11:3b:eb:f0:e9:f8:0a:6d:01:fa:40:89:2e:
6c:6e:76:73:89:8f:27:71:55:14:a0:1f:64:f8:c9:de:cc:7d:
58:e3:44:38:ad:f5:00:c3:b8:40:9f:35:1a:da:76:67:7d:52:
64:9f:db:7a:07:07:b6:c0:26:3b:99:61:f7:97:44:0f:bd:e0:
e7:e8:96:51:9f:cd:e6:6c:ac:f5:7b:df:6c:9f:f7:32:fd:1e:
87:37:64:37:fa:4e:63:e6:36:93:2a:3d:7b:3d:1c:0b:22:6d:
36:de:46:f8:19:8c:01:66:c2:08:37:3d:be:eb:84:42:8c:b2:
7e:d2:fb:a9:1c:3f:d8:e8:75:03:cc:a9:95:64:89:54:c7:d9:
e0:f8:8b:e2:50:8a:e7:b6:92:4d:49:82:0f:9d:45:ae:f0:1e:
41:8c:bf:00
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUAmzKmlYXWNnrjnf1cnL5X+pr+fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMDUwNDRaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDZkMWQwZWIzOWU0OWY4ZWQ5N2I2YTJjNjY5Mjg2NjQzMTVjODc1OTQ0NTQz
MGI1NzBmZmM4ZDAxYTg3Y2U0ZWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMReLbHfYjhxga1yr1xFjiSF2CivWsoO1x36ilDZwSeTnODIOEf1TZTywB7l
MINj0lYgDQT/fEi0vFC8Fg1/JoIk1xIUQMpTvRPxkvRrT9iTX77evKsloXck7s7E
+K+e2sITzg82bDn4tU/djRWK/ssfdunwbgHsjl0uP8/p6li+EffzzrinB5b5205y
svWNyHzMyjxKn0k42QiK/11p2KxCLrMHJq4+TRIqLvd5ae8DUwR7IThJ1HDhMw5w
4XxeTBFQNtuGFHKS0e7FOz/jm+EoKyzVRl73LzVGumGvdFTkHAe2WIMIuPjNDicP
dmIiF5iVsqnanDyvQoeBgjBCEDcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTZ0sPC
yOBi/SqlQRHsQ7xAwHkTjTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjBkZTFhNjQtNDY1YS00ZGU2LThhMWYtMTY0YjdmM2EyYzMyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HuA
wDANBgkqhkiG9w0BAQsFAAOCAQEARXOiN/C1RjZICz3nSIu5I/s7awzJjPGMeY4D
QR8ccRoMpYTuK+Av4dmpFVyy1oqHtJF090IYFhLkpScmtJmJ6saSGQqXS6QOBuKR
L1E8FHh9OcvJcmPVDm+BwtH1pcARO+vw6fgKbQH6QIkubG52c4mPJ3FVFKAfZPjJ
3sx9WONEOK31AMO4QJ81Gtp2Z31SZJ/begcHtsAmO5lh95dED73g5+iWUZ/N5mys
9XvfbJ/3Mv0ehzdkN/pOY+Y2kyo9ez0cCyJtNt5G+BmMAWbCCDc9vuuEQoyyftL7
qRw/2Oh1A8yplWSJVMfZ4PiL4lCK57aSTUmCD51FrvAeQYy/AA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:51:07 2025 by rpki-client