Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
File: f757d966-a37e-4dd4-896c-8caa86d1e20d.roa (raw, json)
Hash identifier: yaVQHlj0Llkym6Qx2IaxDeUsrWJd4DyTszTXa2+67UY=
Subject key identifier: 1D:A9:74:8E:3E:43:C4:93:26:F5:04:D8:E1:CD:8D:6F:E4:5B:C7:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39A32C8C432D7C0F0BAA663A2E2A6DEBD46856AC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
Signing time: Mon 16 Jun 2025 20:50:51 +0000
ROA not before: Mon 16 Jun 2025 20:50:51 +0000
ROA not after: Mon 21 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a3:2c:8c:43:2d:7c:0f:0b:aa:66:3a:2e:2a:6d:eb:d4:68:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 16 20:50:51 2025 GMT
Not After : Jul 21 23:59:59 2025 GMT
Subject: serialNumber=2c278d88a933d5b4e12127b4e28e923c19d5294d03d06c82751ee60f124444c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:84:a8:47:a7:b7:5f:79:c4:93:b5:be:ac:
86:36:78:3c:ef:eb:01:4f:17:4b:ee:12:c7:f9:b9:
1b:59:eb:26:79:cd:bd:86:6d:7f:c7:2c:f1:d7:ab:
81:7e:69:30:bc:69:07:a1:81:79:06:8a:6f:7f:38:
a5:d5:76:bf:0a:ef:b3:7f:7c:dd:2e:96:92:82:5d:
fc:ce:89:5c:d5:c9:ba:43:f3:16:2e:f5:74:7f:1a:
63:76:72:54:1d:60:d0:97:a8:bf:a9:6f:6c:be:9d:
ab:5a:e6:05:65:05:f0:f6:0b:d9:76:fa:77:c6:b1:
d7:c9:22:f3:bb:2c:16:87:a2:a2:c9:40:a2:71:5e:
ff:ad:5d:56:c5:86:87:80:1f:99:55:a9:2b:72:cb:
32:ea:8f:1b:88:6a:f9:78:09:49:50:e0:3c:04:eb:
51:7a:2b:db:a0:1a:ba:46:4a:6b:40:bf:ee:5e:88:
fc:bf:36:b5:03:85:78:5c:43:ff:c8:eb:6f:a3:c2:
02:c8:9f:a3:5e:e5:f5:53:65:9c:7b:66:66:7f:0a:
ea:47:1f:fb:5a:95:54:a2:65:e7:06:e8:7c:59:68:
10:c4:50:08:6c:08:5e:e9:b1:a9:94:0c:83:a0:ec:
12:f9:03:c2:61:a1:2f:76:7a:76:50:df:62:96:9a:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:74:8E:3E:43:C4:93:26:F5:04:D8:E1:CD:8D:6F:E4:5B:C7:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f757d966-a37e-4dd4-896c-8caa86d1e20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2040::/46
Signature Algorithm: sha256WithRSAEncryption
25:c9:a9:c1:01:7b:b2:2a:8f:8d:f2:6f:8b:e3:e3:45:e4:0e:
5c:db:22:4d:a1:01:8e:21:77:b3:ca:40:a7:5a:3c:0e:da:4c:
b7:79:f7:ba:31:b9:ed:f1:48:1d:d5:de:cf:f8:b1:51:bb:01:
7e:2b:73:eb:09:df:ee:d8:66:db:07:8a:af:4c:f2:2b:36:ff:
38:7e:32:2c:60:69:66:4a:cb:be:84:d4:62:52:b6:bb:9f:58:
d6:2d:8a:25:1b:e2:0f:9f:9b:47:b1:e7:3c:ea:84:ae:02:d1:
29:b9:5c:77:83:9e:e6:45:95:a2:91:04:df:2b:13:8b:f7:82:
af:a0:0b:73:bb:f0:69:03:53:2a:37:3b:39:ef:cd:f4:51:f4:
53:1a:34:8c:66:66:b1:12:be:ad:ff:e3:c3:87:7c:d4:85:50:
ee:35:f9:d4:f9:ae:8c:f3:9b:6c:ae:30:47:d4:52:60:1b:0e:
6c:9a:3a:c5:c0:28:a5:c4:53:b8:65:af:63:1d:de:ce:bd:fe:
22:97:a9:a2:1f:3f:19:f2:55:9e:79:10:d1:8f:d3:b0:a2:62:
67:c7:2d:b7:78:44:52:7a:4c:0e:3b:6e:3e:d3:e0:07:d7:cf:
86:06:cc:d1:ff:c2:12:55:20:99:85:01:f1:ff:52:c6:1c:fc:
98:84:14:26
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUOaMsjEMtfA8LqmY6Lipt69RoVqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MTYyMDUwNTFaFw0yNTA3MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDJjMjc4ZDg4YTkzM2Q1YjRlMTIxMjdiNGUyOGU5MjNjMTlkNTI5NGQwM2Qw
NmM4Mjc1MWVlNjBmMTI0NDQ0YzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ5VhKhHp7dfecSTtb6shjZ4PO/rAU8XS+4Sx/m5G1nrJnnNvYZtf8cs8der
gX5pMLxpB6GBeQaKb384pdV2vwrvs3983S6WkoJd/M6JXNXJukPzFi71dH8aY3Zy
VB1g0Jeov6lvbL6dq1rmBWUF8PYL2Xb6d8ax18ki87ssFoeioslAonFe/61dVsWG
h4AfmVWpK3LLMuqPG4hq+XgJSVDgPATrUXor26AaukZKa0C/7l6I/L82tQOFeFxD
/8jrb6PCAsifo17l9VNlnHtmZn8K6kcf+1qVVKJl5wbofFloEMRQCGwIXumxqZQM
g6DsEvkDwmGhL3Z6dlDfYpaaCRsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQdqXSO
PkPEkyb1BNjhzY1v5FvH+TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Zjc1N2Q5NjYtYTM3ZS00ZGQ0LTg5NmMtOGNhYTg2ZDFlMjBkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DUg
QDANBgkqhkiG9w0BAQsFAAOCAQEAJcmpwQF7siqPjfJvi+PjReQOXNsiTaEBjiF3
s8pAp1o8DtpMt3n3ujG57fFIHdXez/ixUbsBfitz6wnf7thm2weKr0zyKzb/OH4y
LGBpZkrLvoTUYlK2u59Y1i2KJRviD5+bR7HnPOqErgLRKblcd4Oe5kWVopEE3ysT
i/eCr6ALc7vwaQNTKjc7Oe/N9FH0Uxo0jGZmsRK+rf/jw4d81IVQ7jX51PmujPOb
bK4wR9RSYBsObJo6xcAopcRTuGWvYx3ezr3+Ipepoh8/GfJVnnkQ0Y/TsKJiZ8ct
t3hEUnpMDjtuPtPgB9fPhgbM0f/CElUgmYUB8f9Sxhz8mIQUJg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:49:17 2025 by rpki-client