Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
File: 0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa (raw, json)
Hash identifier: R249KEmax9PftVM5XQqiH25yuJeYta8beTxtbKbDLHU=
Subject key identifier: CD:EC:BB:FE:10:04:50:5B:EF:73:7C:B9:05:FA:A8:AF:30:DC:0E:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6DC238868B0285ABC4B87F29B600CEBB6AE579A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
Signing time: Tue 20 May 2025 18:50:46 +0000
ROA not before: Tue 20 May 2025 18:50:46 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c2:38:86:8b:02:85:ab:c4:b8:7f:29:b6:00:ce:bb:6a:e5:79:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:50:46 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=b85704f4d5a360ab39d0215d25300eb258f629e14d20ea310601dde254c16bf3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:15:1b:13:fc:7b:6c:a7:39:9b:cb:2f:5f:
78:fa:32:b7:ce:e7:2b:9f:d3:b1:35:80:aa:ac:e6:
21:a3:ac:14:9d:69:8d:a2:72:3b:d8:78:1a:e6:00:
39:81:31:04:e4:53:57:74:f7:fe:44:fb:4d:dd:c8:
e6:86:80:98:52:b2:f1:02:c1:b9:0f:33:2c:c6:9c:
f2:af:75:54:13:24:e4:ce:99:10:2a:67:c8:82:bf:
b1:c3:18:38:b9:cf:b0:3c:6c:47:32:26:ae:d2:6f:
4c:14:3e:08:3f:d3:0f:2a:ea:57:7b:ab:4e:c0:29:
8d:bd:60:14:61:de:c7:bc:49:50:4d:44:8c:a0:67:
ec:dc:74:e8:01:50:87:d3:ef:e4:05:d5:06:23:c0:
24:23:5f:d2:55:f2:d6:2a:0b:ec:14:4b:9e:65:0f:
a9:55:f0:37:57:e0:7c:1c:98:b9:18:f1:ab:be:48:
62:7b:b1:f8:bd:29:e8:e0:3d:0b:67:74:0c:d6:1d:
85:d9:2e:61:95:de:27:a8:a6:8a:4d:56:e3:91:f8:
09:06:a6:e2:1f:43:a8:48:07:0d:81:6c:5a:8e:0e:
f9:01:e4:ca:7d:ac:f4:54:94:76:b1:95:b8:12:c8:
de:8c:78:27:a3:0e:98:d6:a5:46:74:9f:8a:62:12:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:BB:FE:10:04:50:5B:EF:73:7C:B9:05:FA:A8:AF:30:DC:0E:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a040::/48
Signature Algorithm: sha256WithRSAEncryption
34:7a:d7:58:a2:e0:93:d6:fe:72:af:da:7e:45:8b:ef:9a:65:
65:3d:0c:55:60:2b:54:98:bb:af:0c:19:5b:b4:46:e3:22:49:
db:a2:96:51:ff:bc:cd:11:d7:ea:74:57:7c:ee:d8:79:db:f2:
1a:45:2c:f3:52:71:0c:85:1f:a5:d8:db:91:fd:ac:89:df:6e:
46:8c:e4:e3:cd:b7:2a:3a:34:e0:f8:67:96:de:ab:4c:4f:21:
35:93:12:85:04:84:77:a4:af:2b:47:aa:82:d6:03:5b:b1:65:
d4:d1:a6:8c:cb:07:91:cb:33:57:8b:59:5d:41:8f:89:aa:ac:
cf:f6:ac:43:31:52:eb:c5:bd:17:92:d8:0e:89:54:44:96:e0:
c5:8c:2f:eb:25:1c:51:04:0d:ac:ac:50:4f:e2:7b:c7:e2:6d:
1a:dd:d7:2d:b0:74:d5:b8:d4:b2:27:38:30:f9:fb:9b:d4:68:
bf:9d:e1:ed:1d:48:60:4e:7e:a4:80:b4:dc:f5:f3:da:59:ed:
ca:83:c6:86:e1:8a:5c:25:6a:55:0c:8f:32:55:ef:b7:ab:81:
3c:fd:f2:bd:82:5e:8b:1a:5b:b4:42:b8:36:ef:65:2b:fe:ff:
d7:04:6c:94:7b:76:df:53:60:b4:7d:89:15:f8:50:02:98:db:
cb:0c:d8:1d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUbcI4hosChavEuH8ptgDOu2rleaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODUwNDZaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGI4NTcwNGY0ZDVhMzYwYWIzOWQwMjE1ZDI1MzAwZWIyNThmNjI5ZTE0ZDIw
ZWEzMTA2MDFkZGUyNTRjMTZiZjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALC1FRsT/Htspzmbyy9fePoyt87nK5/TsTWAqqzmIaOsFJ1pjaJyO9h4GuYA
OYExBORTV3T3/kT7Td3I5oaAmFKy8QLBuQ8zLMac8q91VBMk5M6ZECpnyIK/scMY
OLnPsDxsRzImrtJvTBQ+CD/TDyrqV3urTsApjb1gFGHex7xJUE1EjKBn7Nx06AFQ
h9Pv5AXVBiPAJCNf0lXy1ioL7BRLnmUPqVXwN1fgfByYuRjxq75IYnux+L0p6OA9
C2d0DNYdhdkuYZXeJ6imik1W45H4CQam4h9DqEgHDYFsWo4O+QHkyn2s9FSUdrGV
uBLI3ox4J6MOmNalRnSfimISswUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTN7Lv+
EARQW+9zfLkF+qivMNwOyDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MGExYTI1ZDctNjkzNS00MjBjLWE5NDktNGE5ZDBlNmE5NWQ3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGg
QDANBgkqhkiG9w0BAQsFAAOCAQEANHrXWKLgk9b+cq/afkWL75plZT0MVWArVJi7
rwwZW7RG4yJJ26KWUf+8zRHX6nRXfO7YedvyGkUs81JxDIUfpdjbkf2sid9uRozk
4823Kjo04Phnlt6rTE8hNZMShQSEd6SvK0eqgtYDW7Fl1NGmjMsHkcszV4tZXUGP
iaqsz/asQzFS68W9F5LYDolURJbgxYwv6yUcUQQNrKxQT+J7x+JtGt3XLbB01bjU
sic4MPn7m9Rov53h7R1IYE5+pIC03PXz2lntyoPGhuGKXCVqVQyPMlXvt6uBPP3y
vYJeixpbtEK4Nu9lK/7/1wRslHt231NgtH2JFfhQApjbywzYHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:49 2025 by rpki-client