Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4392a9b-4dbd-4966-b39c-0f1163c52611.roa
File: f4392a9b-4dbd-4966-b39c-0f1163c52611.roa (raw, json)
Hash identifier: K9i3EsbpH8sPBAeIYIXf6/ts2/bOAdTQ9c8dm2pRtPs=
Subject key identifier: 82:3A:16:27:1D:41:BC:49:B6:3D:49:05:6F:46:F5:7B:BF:9E:A1:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6C798D7B58597ADB68148B332B947C042872129E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4392a9b-4dbd-4966-b39c-0f1163c52611.roa
Signing time: Mon 16 Jun 2025 20:31:02 +0000
ROA not before: Mon 16 Jun 2025 20:31:02 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:79:8d:7b:58:59:7a:db:68:14:8b:33:2b:94:7c:04:28:72:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:31:02 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=b0430e7568982abd1d37e0cfbbbbf383204c06a9abcab200c61611e87baa53ba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:0f:b6:9f:5a:8f:75:c7:3e:db:9b:df:89:
6d:7e:8f:37:5e:2e:39:76:41:72:2a:63:78:32:30:
df:78:0f:c3:93:bd:b1:2b:9a:b2:25:00:97:3c:01:
f3:6a:25:37:ba:18:56:27:ef:57:30:8c:b1:0a:d9:
01:84:fa:dd:61:8f:06:96:46:90:d4:d8:91:99:21:
de:86:b2:3d:af:f6:fc:e2:60:61:d8:50:f9:b9:d6:
4f:6a:e5:04:ff:4e:4c:df:bc:1e:21:68:76:97:10:
94:72:64:c5:fc:a6:84:04:0f:c1:5d:d7:fd:1f:38:
1e:05:6d:d7:78:41:7a:73:d7:4e:86:55:81:f5:6c:
7c:54:bc:85:0e:4b:7d:29:84:c7:8b:6a:51:31:dc:
c5:ab:0c:78:5c:96:2b:54:9b:fb:83:06:62:f6:38:
54:4d:b8:0e:fd:98:15:87:43:69:44:c0:4a:06:ed:
dd:58:0e:fb:ac:0d:25:30:99:de:6f:45:da:e9:11:
37:4e:1a:08:9c:44:e4:91:8a:c2:58:82:fe:b8:f8:
7c:44:a3:b8:35:49:77:2b:be:a9:bb:1c:2c:0a:51:
84:17:6a:c2:d3:a2:6a:05:57:37:af:37:87:04:62:
ca:f3:1e:39:af:3e:9b:c2:12:1f:52:7a:93:7a:0b:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:16:27:1D:41:BC:49:B6:3D:49:05:6F:46:F5:7B:BF:9E:A1:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f4392a9b-4dbd-4966-b39c-0f1163c52611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a040::/46
Signature Algorithm: sha256WithRSAEncryption
ca:10:88:40:d2:6c:20:0a:46:e3:c7:2f:46:b7:e9:d1:60:20:
dc:cd:dc:1a:6f:be:32:6d:e0:8d:0e:12:b8:ec:90:47:a6:8d:
62:91:f0:5e:24:e5:b9:57:3b:c4:45:cc:cb:d7:e0:72:bd:0c:
9f:7a:57:47:86:e5:e9:a5:47:05:fc:49:90:b3:f3:d2:f3:f9:
db:40:09:83:84:50:e2:78:dd:71:ca:f5:be:ef:9c:38:4c:0e:
bb:00:a5:ff:f4:60:f4:66:19:82:70:a2:8b:1e:ce:c2:9a:44:
cc:0e:11:d6:e6:0f:0e:51:9a:4a:91:74:94:df:84:d4:6f:3b:
79:17:03:19:77:b4:8d:98:c5:02:02:8c:b5:7f:16:46:3e:39:
e8:db:15:57:99:97:a9:12:4b:4d:20:75:c7:ab:12:70:29:45:
49:45:16:93:8b:69:af:8e:93:b9:01:f0:2c:72:c2:1c:6a:ab:
e7:01:6b:17:05:40:8f:8a:2e:69:cc:96:72:cc:9c:e6:cb:da:
99:ee:48:91:14:7b:8b:be:6c:ff:7f:07:5a:5f:e4:e0:8d:e9:
b7:76:dc:05:44:f4:66:ee:48:d1:79:ed:25:ec:55:1a:bb:44:
f4:c5:ce:1a:67:d4:79:53:94:3d:b4:f2:73:1c:1a:3f:81:9c:
62:01:ff:bf
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbHmNe1hZettoFIszK5R8BChyEp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMDMxMDJaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGIwNDMwZTc1Njg5ODJhYmQxZDM3ZTBjZmJiYmJmMzgzMjA0YzA2YTlhYmNh
YjIwMGM2MTYxMWU4N2JhYTUzYmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANWbD7afWo91xz7bm9+JbX6PN14uOXZBcipjeDIw33gPw5O9sSuasiUAlzwB
82olN7oYVifvVzCMsQrZAYT63WGPBpZGkNTYkZkh3oayPa/2/OJgYdhQ+bnWT2rl
BP9OTN+8HiFodpcQlHJkxfymhAQPwV3X/R84HgVt13hBenPXToZVgfVsfFS8hQ5L
fSmEx4tqUTHcxasMeFyWK1Sb+4MGYvY4VE24Dv2YFYdDaUTASgbt3VgO+6wNJTCZ
3m9F2ukRN04aCJxE5JGKwliC/rj4fESjuDVJdyu+qbscLApRhBdqwtOiagVXN683
hwRiyvMeOa8+m8ISH1J6k3oL6mECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSCOhYn
HUG8SbY9SQVvRvV7v56heTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjQzOTJhOWItNGRiZC00OTY2LWIzOWMtMGYxMTYzYzUyNjExLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Hug
QDANBgkqhkiG9w0BAQsFAAOCAQEAyhCIQNJsIApG48cvRrfp0WAg3M3cGm++Mm3g
jQ4SuOyQR6aNYpHwXiTluVc7xEXMy9fgcr0Mn3pXR4bl6aVHBfxJkLPz0vP520AJ
g4RQ4njdccr1vu+cOEwOuwCl//Rg9GYZgnCiix7OwppEzA4R1uYPDlGaSpF0lN+E
1G87eRcDGXe0jZjFAgKMtX8WRj456NsVV5mXqRJLTSB1x6sScClFSUUWk4tpr46T
uQHwLHLCHGqr5wFrFwVAj4ouacyWcsyc5svame5IkRR7i75s/38HWl/k4I3pt3bc
BUT0Zu5I0XntJexVGrtE9MXOGmfUeVOUPbTycxwaP4GcYgH/vw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:50:09 2025 by rpki-client