Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: QJHerdyJZxqQhdArF+/dKvp+MOwWQfmG9EMeGPullb4=
Subject key identifier: DD:40:A4:A0:86:8F:B8:94:5E:16:B0:8D:AF:37:EB:FB:00:6F:17:D9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48421DF859167DDF06199825B12F9A4FC3E326A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Tue 20 May 2025 18:21:14 +0000
ROA not before: Tue 20 May 2025 18:21:14 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:42:1d:f8:59:16:7d:df:06:19:98:25:b1:2f:9a:4f:c3:e3:26:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:21:14 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=a8cb57be62dddf3d4636a0b94ec290b34647701ae08db0d41e2a8d692b22ec1e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a2:af:8f:aa:08:f2:db:8c:39:6d:9d:01:29:
38:23:57:e1:4c:14:c4:93:db:b1:08:76:f1:a8:52:
84:ef:9b:c3:4d:d7:73:2e:a6:fb:92:86:6f:af:ef:
7b:06:34:5e:c5:43:5d:e8:95:aa:42:c7:98:0e:7a:
da:41:61:47:0b:8c:4b:3a:c1:1e:7e:5a:05:65:94:
86:0d:29:f7:14:38:8c:08:b2:a4:af:9b:b0:2b:2d:
80:34:c0:e4:39:c2:22:b6:5e:33:d4:0f:61:98:d9:
22:94:da:40:0a:9e:2a:5f:d5:47:be:f4:2c:93:f4:
9b:de:f0:97:82:2b:8b:40:0c:97:8a:82:b5:cf:9c:
4e:20:9d:8d:96:4b:58:ad:1e:a2:54:b9:05:9e:27:
b3:16:6d:1d:3e:42:df:6b:99:36:14:6e:b0:5f:64:
a4:2f:d0:51:1d:25:b6:f1:39:98:98:c4:66:49:e2:
ab:7c:15:39:3d:c1:10:dd:d0:08:40:66:89:9b:03:
c7:c2:0e:0c:8f:05:64:b7:b5:80:25:97:25:9d:f5:
ab:f3:7f:3b:e9:78:3c:9d:1a:52:75:b2:14:3a:f7:
62:5f:54:fe:bf:19:28:5f:22:e9:fd:cb:5c:2e:62:
6a:71:93:fd:0d:e1:65:d9:f3:d5:cc:3c:c7:79:7f:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:40:A4:A0:86:8F:B8:94:5E:16:B0:8D:AF:37:EB:FB:00:6F:17:D9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
45:34:a4:76:05:6d:6a:fa:a7:25:e3:25:d8:ff:48:a4:78:13:
2e:d6:43:fc:18:89:2f:7a:78:a9:72:0c:95:e0:ad:79:2a:8c:
30:cb:72:d5:8c:49:a4:3f:2b:35:30:0c:8a:e1:e1:34:07:78:
8b:94:a6:5f:3f:d8:0c:d0:fa:78:0c:7a:03:a8:a6:4c:f3:b2:
0c:95:2e:d4:b7:1d:ec:f1:15:06:5b:65:26:68:c2:a2:fa:1c:
a1:c4:b9:5c:38:7c:7d:d4:d9:67:f8:28:66:3e:44:57:c5:a8:
9b:49:8d:f7:a3:b1:99:9f:53:66:cb:26:8f:4d:16:e1:cd:ee:
d0:19:99:10:4a:70:46:45:8f:0f:f5:86:b4:72:17:e6:60:d9:
2c:a3:37:f4:1e:82:89:17:bf:3e:fb:4a:cb:d4:b0:73:1e:be:
f5:33:c4:e8:76:a0:49:9f:fa:a6:23:7b:af:d4:41:37:8f:ef:
da:40:c2:19:c5:a0:50:47:80:8b:01:98:65:f2:c0:e7:97:4b:
be:aa:c7:72:62:a4:c6:d9:b1:a4:b4:f3:1a:ce:1a:62:b9:22:
29:b3:4d:5c:3f:16:89:63:01:33:dc:dc:c7:29:96:a9:8e:8e:
7b:f1:bf:05:ce:47:41:20:d1:c4:d1:88:61:03:5f:ca:de:22:
da:03:0f:f8
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUSEId+FkWfd8GGZglsS+aT8PjJqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODIxMTRaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGE4Y2I1N2JlNjJkZGRmM2Q0NjM2YTBiOTRlYzI5MGIzNDY0NzcwMWFlMDhk
YjBkNDFlMmE4ZDY5MmIyMmVjMWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPGir4+qCPLbjDltnQEpOCNX4UwUxJPbsQh28ahShO+bw03Xcy6m+5KGb6/v
ewY0XsVDXeiVqkLHmA562kFhRwuMSzrBHn5aBWWUhg0p9xQ4jAiypK+bsCstgDTA
5DnCIrZeM9QPYZjZIpTaQAqeKl/VR770LJP0m97wl4Iri0AMl4qCtc+cTiCdjZZL
WK0eolS5BZ4nsxZtHT5C32uZNhRusF9kpC/QUR0ltvE5mJjEZkniq3wVOT3BEN3Q
CEBmiZsDx8IODI8FZLe1gCWXJZ31q/N/O+l4PJ0aUnWyFDr3Yl9U/r8ZKF8i6f3L
XC5ianGT/Q3hZdnz1cw8x3l/ldsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTdQKSg
ho+4lF4WsI2vN+v7AG8X2TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTJmYTAwOTQtMzcyMS00YTYxLWE3MmYtOGNkZWZmNWU1ZjM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
sDANBgkqhkiG9w0BAQsFAAOCAQEARTSkdgVtavqnJeMl2P9IpHgTLtZD/BiJL3p4
qXIMleCteSqMMMty1YxJpD8rNTAMiuHhNAd4i5SmXz/YDND6eAx6A6imTPOyDJUu
1Lcd7PEVBltlJmjCovococS5XDh8fdTZZ/goZj5EV8Wom0mN96OxmZ9TZssmj00W
4c3u0BmZEEpwRkWPD/WGtHIX5mDZLKM39B6CiRe/PvtKy9Swcx6+9TPE6HagSZ/6
piN7r9RBN4/v2kDCGcWgUEeAiwGYZfLA55dLvqrHcmKkxtmxpLTzGs4aYrkiKbNN
XD8WiWMBM9zcxymWqY6Oe/G/Bc5HQSDRxNGIYQNfyt4i2gMP+A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:26 2025 by rpki-client