Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
File: 08648cfd-d5cb-4480-92d0-084369ff8b4d.roa (raw, json)
Hash identifier: 3BdHbraNM4oGdE75qzuWtWYsRpe3EMJhH6TfhtYQlRo=
Subject key identifier: 44:1B:74:3F:8A:6C:F9:74:E3:CB:37:F4:1A:3F:1E:30:A3:A6:37:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40DB71753B7F24BE6972C0267ACC7E2EF80D0DC5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
Signing time: Tue 20 May 2025 19:51:59 +0000
ROA not before: Tue 20 May 2025 19:51:59 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:1040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:db:71:75:3b:7f:24:be:69:72:c0:26:7a:cc:7e:2e:f8:0d:0d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:51:59 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=fdd21070c652d4972238a2f32b782cd5d02dfac6d07c381bb1f93c85ae61aeba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:51:da:7b:6e:9e:2f:6e:1c:42:4f:0f:74:
f8:95:f7:d7:80:cb:22:ab:53:36:45:3f:39:2f:60:
1b:65:d2:e0:93:67:ff:22:f6:94:32:1c:6f:fe:32:
5e:89:90:37:b6:23:fc:49:29:63:91:af:f2:47:cd:
e9:63:7f:5b:83:88:3c:1e:b7:09:ea:32:31:03:17:
f0:45:e6:67:97:d9:a7:39:75:58:1a:09:17:20:ad:
d8:38:21:ec:9c:3c:dd:50:71:4e:88:1b:d9:7b:07:
6b:1d:b5:23:5c:ff:7b:c6:55:46:4e:e1:4b:5f:df:
08:51:96:d1:d1:76:7e:23:7b:17:23:98:f2:d6:ac:
61:42:ff:29:d1:93:17:ac:ce:52:23:75:ed:5e:ba:
72:35:f4:ab:2e:54:95:b1:e3:66:33:8c:b7:03:fe:
89:ad:a1:3f:60:be:be:5f:95:40:24:11:cd:a6:61:
9b:71:f0:b6:ca:0f:29:18:72:6f:b6:ff:31:81:47:
dc:23:34:de:b7:b3:3f:04:1b:c1:65:3c:a7:55:fa:
29:6e:e1:1b:c9:7d:a6:36:b4:fc:f9:e8:42:25:cb:
d5:f2:4e:90:a3:44:a2:82:93:06:53:72:6a:45:fc:
3d:ca:f5:71:f2:fa:9b:e3:b3:cb:d6:97:96:e4:15:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1B:74:3F:8A:6C:F9:74:E3:CB:37:F4:1A:3F:1E:30:A3:A6:37:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:1040::/46
Signature Algorithm: sha256WithRSAEncryption
0d:5b:c3:0f:90:d3:01:e9:7b:7d:cc:da:12:de:53:6d:db:8f:
e6:85:7f:03:5c:ae:8d:a2:18:f9:c3:34:03:33:be:ae:a9:9c:
fe:48:b5:53:7f:16:00:48:a9:89:d1:6f:f0:ef:e7:93:c2:29:
2f:39:30:16:d3:d9:26:6c:40:f3:40:36:14:de:02:48:b2:07:
22:2a:b4:e1:f7:5c:77:e3:8b:5e:ae:52:b6:d0:56:f8:0d:41:
ba:6e:69:9c:07:1c:58:2b:c2:a1:cd:d8:19:2c:a3:5b:11:c6:
35:1e:9a:59:e9:be:0b:e0:36:bc:df:cb:cc:a3:d6:72:04:d1:
26:5c:48:8a:80:b9:d4:8a:81:a2:59:49:9a:16:2c:d2:4b:85:
41:cb:33:a8:fe:5a:0c:3a:83:a3:32:ac:68:b8:50:b8:fd:f0:
5c:3d:1e:f7:4a:c0:da:9a:27:39:67:da:78:86:a0:4e:91:a0:
9b:81:4f:35:2a:25:26:58:df:24:df:37:3a:7c:36:8a:1b:5a:
83:b5:db:bf:d3:6b:eb:e7:6b:f1:af:bb:be:b4:69:c8:6d:ca:
3e:cd:89:72:30:41:e3:e3:4d:01:90:96:7f:db:c4:8f:a4:33:
75:6e:04:a3:09:37:a0:5a:9a:bf:d5:75:a7:ea:d5:5d:ad:83:
1c:45:80:30
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUQNtxdTt/JL5pcsAmesx+LvgNDcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTUxNTlaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGZkZDIxMDcwYzY1MmQ0OTcyMjM4YTJmMzJiNzgyY2Q1ZDAyZGZhYzZkMDdj
MzgxYmIxZjkzYzg1YWU2MWFlYmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJhKUdp7bp4vbhxCTw90+JX314DLIqtTNkU/OS9gG2XS4JNn/yL2lDIcb/4y
XomQN7Yj/EkpY5Gv8kfN6WN/W4OIPB63CeoyMQMX8EXmZ5fZpzl1WBoJFyCt2Dgh
7Jw83VBxTogb2XsHax21I1z/e8ZVRk7hS1/fCFGW0dF2fiN7FyOY8tasYUL/KdGT
F6zOUiN17V66cjX0qy5UlbHjZjOMtwP+ia2hP2C+vl+VQCQRzaZhm3HwtsoPKRhy
b7b/MYFH3CM03rezPwQbwWU8p1X6KW7hG8l9pja0/PnoQiXL1fJOkKNEooKTBlNy
akX8Pcr1cfL6m+Ozy9aXluQVcPECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBREG3Q/
imz5dOPLN/QaPx4wo6Y3PzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDg2NDhjZmQtZDVjYi00NDgwLTkyZDAtMDg0MzY5ZmY4YjRkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HsQ
QDANBgkqhkiG9w0BAQsFAAOCAQEADVvDD5DTAel7fczaEt5TbduP5oV/A1yujaIY
+cM0AzO+rqmc/ki1U38WAEipidFv8O/nk8IpLzkwFtPZJmxA80A2FN4CSLIHIiq0
4fdcd+OLXq5SttBW+A1Bum5pnAccWCvCoc3YGSyjWxHGNR6aWem+C+A2vN/LzKPW
cgTRJlxIioC51IqBollJmhYs0kuFQcszqP5aDDqDozKsaLhQuP3wXD0e90rA2pon
OWfaeIagTpGgm4FPNSolJljfJN83Onw2ihtag7Xbv9Nr6+dr8a+7vrRpyG3KPs2J
cjBB4+NNAZCWf9vEj6QzdW4Eowk3oFqav9V1p+rVXa2DHEWAMA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:53 2025 by rpki-client