Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
File: 33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa (raw, json)
Hash identifier: UQldWHvD6por0NnJSVRWL+doAbTmv8GlQHIdoTe8GYk=
Subject key identifier: 26:82:DB:D0:7B:AF:B1:0D:2D:ED:92:25:70:E3:16:09:36:3A:B3:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2DA985E511A7395B6FE9FFCF2F354D52204000CA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
Signing time: Tue 20 May 2025 20:31:28 +0000
ROA not before: Tue 20 May 2025 20:31:28 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d016:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a9:85:e5:11:a7:39:5b:6f:e9:ff:cf:2f:35:4d:52:20:40:00:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:31:28 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=d27b30d379f7192bbc99542e7c418e0ac1c557abd05fd95fa9c89c132cdd13d0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:66:92:cd:1d:82:aa:37:1d:10:bc:2b:62:
30:ce:8a:fe:9d:ee:c8:f2:cf:ae:96:5a:77:cb:b2:
e4:e5:3f:1b:0b:eb:d5:3d:dc:0e:b6:21:e0:3b:a7:
ee:0e:8c:51:a7:d1:00:09:64:4a:1d:99:c6:02:d3:
d7:bc:4c:ee:76:f8:90:05:37:00:3f:3b:b9:ab:16:
d3:d0:1a:c0:c9:8f:82:56:7e:b8:d7:bf:2a:7d:79:
82:8d:bb:7e:72:20:ff:25:3e:17:b8:7f:68:1e:9e:
69:c4:e0:3f:98:06:65:93:27:a0:03:05:2c:d2:1b:
9d:39:e5:6e:f7:9d:d5:7d:7b:f4:11:f6:0a:13:01:
9a:b9:4d:58:56:f2:32:b2:ea:fa:98:c9:d5:8b:33:
1d:48:30:17:1a:cf:fd:e6:03:99:92:80:6c:31:11:
71:75:fc:3f:f9:27:5e:ab:df:4f:ce:59:5b:23:5a:
fe:c4:70:74:91:fc:f0:6f:83:e0:da:29:50:85:72:
48:1b:80:dd:0f:50:17:e2:68:b5:72:5b:8a:78:4e:
ff:28:00:fe:69:a2:83:b8:3d:6d:50:e7:8f:33:8b:
54:25:3c:72:4c:4e:6a:3f:0b:92:fc:7b:17:c5:24:
23:5f:6b:69:9b:69:e1:e0:70:3b:6c:d3:c9:de:9c:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:DB:D0:7B:AF:B1:0D:2D:ED:92:25:70:E3:16:09:36:3A:B3:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/33d27d30-ac5c-415b-8b96-bdf3fa2da3e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d016:800::/38
Signature Algorithm: sha256WithRSAEncryption
b5:68:2f:d1:c6:18:a6:15:3a:4a:fd:38:63:19:43:10:ec:34:
a7:f3:f5:e4:2e:1a:15:91:d5:79:c2:a6:f6:23:35:4c:bc:d2:
1f:41:18:96:8a:84:36:3c:90:e1:89:90:0a:4a:e3:1e:a2:f5:
62:34:d6:d2:3d:91:a9:74:f3:d5:af:05:a6:06:75:cf:a2:63:
30:bc:79:4e:fd:d8:05:31:33:51:13:0a:04:19:36:e8:a0:99:
f4:7e:81:e1:cb:4f:67:29:ed:61:95:7d:5b:20:29:73:ad:a8:
2a:bf:02:3d:39:85:2e:b3:ab:c7:86:99:18:41:c3:ff:bd:f0:
e8:d6:81:ca:22:4e:af:17:f1:05:2f:a8:d3:c3:b7:ce:14:0d:
e2:ca:e4:38:f2:00:a2:b9:0b:ab:44:5c:fb:cd:0e:24:59:04:
41:d8:a2:2b:e1:2d:29:90:9b:c6:2e:9d:eb:be:63:e3:2f:82:
25:22:2f:99:d4:02:a0:18:85:17:ac:9f:a1:b7:fd:f6:b1:9c:
6f:1e:7c:5c:23:c4:68:6f:49:af:db:fe:76:e9:a2:e6:9d:27:
84:f2:a1:52:0f:8d:87:cd:2b:d4:05:56:c5:23:a0:f2:7d:5e:
23:08:5a:a7:e7:4d:7f:9e:89:64:f8:ae:87:22:c6:49:a5:20:
1d:40:5f:d7
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULamF5RGnOVtv6f/PLzVNUiBAAMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAyMDMxMjhaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGQyN2IzMGQzNzlmNzE5MmJiYzk5NTQyZTdjNDE4ZTBhYzFjNTU3YWJkMDVm
ZDk1ZmE5Yzg5YzEzMmNkZDEzZDAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN1oZpLNHYKqNx0QvCtiMM6K/p3uyPLPrpZad8uy5OU/Gwvr1T3cDrYh4Dun
7g6MUafRAAlkSh2ZxgLT17xM7nb4kAU3AD87uasW09AawMmPglZ+uNe/Kn15go27
fnIg/yU+F7h/aB6eacTgP5gGZZMnoAMFLNIbnTnlbved1X179BH2ChMBmrlNWFby
MrLq+pjJ1YszHUgwFxrP/eYDmZKAbDERcXX8P/knXqvfT85ZWyNa/sRwdJH88G+D
4NopUIVySBuA3Q9QF+JotXJbinhO/ygA/mmig7g9bVDnjzOLVCU8ckxOaj8Lkvx7
F8UkI19raZtp4eBwO2zTyd6cRWcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQmgtvQ
e6+xDS3tkiVw4xYJNjqzFzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzNkMjdkMzAtYWM1Yy00MTViLThiOTYtYmRmM2ZhMmRhM2U1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BYI
MA0GCSqGSIb3DQEBCwUAA4IBAQC1aC/RxhimFTpK/ThjGUMQ7DSn8/XkLhoVkdV5
wqb2IzVMvNIfQRiWioQ2PJDhiZAKSuMeovViNNbSPZGpdPPVrwWmBnXPomMwvHlO
/dgFMTNREwoEGTbooJn0foHhy09nKe1hlX1bIClzragqvwI9OYUus6vHhpkYQcP/
vfDo1oHKIk6vF/EFL6jTw7fOFA3iyuQ48gCiuQurRFz7zQ4kWQRB2KIr4S0pkJvG
Lp3rvmPjL4IlIi+Z1AKgGIUXrJ+ht/32sZxvHnxcI8Rob0mv2/526aLmnSeE8qFS
D42HzSvUBVbFI6DyfV4jCFqn501/nolk+K6HIsZJpSAdQF/X
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:59 2025 by rpki-client