Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
File: 42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa (raw, json)
Hash identifier: 9VxCTdEZ0RiYztj5Ub7OGxJtO0ZtxMkjvFuAE72Szj8=
Subject key identifier: 03:32:27:02:00:17:BC:6E:59:46:0B:72:9E:82:AE:49:D2:97:63:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4677FFFA8670762378A6C0BD0789AE7AB46D6E55
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
Signing time: Tue 20 May 2025 18:41:23 +0000
ROA not before: Tue 20 May 2025 18:41:23 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8090::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:77:ff:fa:86:70:76:23:78:a6:c0:bd:07:89:ae:7a:b4:6d:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:41:23 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=e34a4082a8512f50eaddc963fc4b38c1144559346c6531c987612418887f963c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9d:85:2d:5f:f4:f7:9d:58:06:46:2c:6d:37:
9b:44:65:57:cc:15:84:aa:63:e6:6d:65:44:f6:5a:
34:24:dd:c5:04:84:97:82:7b:de:a5:47:c3:9f:bc:
12:8e:46:04:ee:d6:e3:0e:c3:e0:d8:87:6b:77:1c:
28:a7:69:11:36:01:45:17:53:3e:8a:e3:8f:b3:92:
61:96:4d:fd:87:08:f2:38:0f:18:08:b2:67:89:29:
a7:60:2e:04:c9:d3:3c:99:27:77:6b:78:4f:67:4a:
3a:51:78:c9:34:55:02:b3:cf:94:47:0c:27:0f:a3:
4d:ca:94:fb:55:8b:56:89:f4:03:8b:dc:42:06:7e:
50:bd:35:48:50:f7:bf:93:5e:6f:19:7e:f7:15:6d:
f8:67:30:4d:b7:75:65:7c:53:e8:79:8e:f9:fc:f4:
47:14:9f:6e:e0:ff:26:e7:fd:88:18:93:23:33:c3:
43:fe:38:87:6d:23:55:b0:8a:61:31:d9:09:de:a7:
72:3b:3e:66:fd:11:14:49:1f:51:fb:fb:06:e4:a8:
7a:32:c4:73:ff:38:6d:3f:5c:e9:7a:a4:0f:d0:42:
48:df:11:d5:9e:52:a3:a6:fb:a9:ce:e0:1e:c2:bb:
8d:c4:6a:22:5f:e7:d7:b8:6d:86:37:de:58:11:e3:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:27:02:00:17:BC:6E:59:46:0B:72:9E:82:AE:49:D2:97:63:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8090::/48
Signature Algorithm: sha256WithRSAEncryption
6c:e4:14:0d:e3:40:a6:fa:08:37:05:3b:d8:72:60:7b:7f:fb:
cf:c3:42:aa:ef:ab:c1:5a:14:04:d8:f5:a1:1f:95:85:98:13:
e3:26:e3:6b:0b:2d:73:f7:45:5f:b7:78:59:c0:43:c6:9f:71:
0c:d4:d7:42:54:ab:f8:c5:91:35:ba:b9:6d:c9:2b:36:cf:05:
3b:39:34:c7:9e:bf:64:bf:27:ec:03:9a:7a:d7:04:a9:8a:a7:
76:c6:4e:ba:dd:52:72:79:f8:16:6c:8c:0e:6d:4f:7d:54:e5:
6f:40:69:75:65:28:7c:03:e6:6b:8e:07:ca:a9:1d:31:98:39:
c5:e4:b4:f4:29:94:f9:1a:69:1b:5d:bb:3f:cf:a7:13:6c:a1:
ca:89:bb:7b:61:78:6b:bd:b3:46:a0:a6:f4:aa:de:d7:c0:83:
03:bc:52:14:4d:fb:b2:0f:8b:fd:b2:aa:61:67:52:83:d0:01:
d1:d5:02:3f:d9:b1:61:c2:89:4c:19:a1:ef:1b:a2:e8:cd:79:
df:f3:67:32:06:b3:94:8b:d4:aa:25:13:39:19:4c:09:6d:7e:
04:2b:33:f6:d1:59:04:79:ef:b8:d5:bb:70:88:6c:ac:c5:3b:
e2:78:23:5b:e5:2a:0c:72:75:7c:c4:2d:ff:6b:2f:1a:88:b1:
10:86:25:63
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIURnf/+oZwdiN4psC9B4muerRtblUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODQxMjNaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGUzNGE0MDgyYTg1MTJmNTBlYWRkYzk2M2ZjNGIzOGMxMTQ0NTU5MzQ2YzY1
MzFjOTg3NjEyNDE4ODg3Zjk2M2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPGdhS1f9PedWAZGLG03m0RlV8wVhKpj5m1lRPZaNCTdxQSEl4J73qVHw5+8
Eo5GBO7W4w7D4NiHa3ccKKdpETYBRRdTPorjj7OSYZZN/YcI8jgPGAiyZ4kpp2Au
BMnTPJknd2t4T2dKOlF4yTRVArPPlEcMJw+jTcqU+1WLVon0A4vcQgZ+UL01SFD3
v5Nebxl+9xVt+GcwTbd1ZXxT6HmO+fz0RxSfbuD/Juf9iBiTIzPDQ/44h20jVbCK
YTHZCd6ncjs+Zv0RFEkfUfv7BuSoejLEc/84bT9c6XqkD9BCSN8R1Z5So6b7qc7g
HsK7jcRqIl/n17hthjfeWBHj4QcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQDMicC
ABe8bllGC3Kegq5J0pdjkDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDJlZjdkODktYjliZi00NjBmLWI5MDYtNzQ0M2Q5NmY0YTZmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
kDANBgkqhkiG9w0BAQsFAAOCAQEAbOQUDeNApvoINwU72HJge3/7z8NCqu+rwVoU
BNj1oR+VhZgT4ybjawstc/dFX7d4WcBDxp9xDNTXQlSr+MWRNbq5bckrNs8FOzk0
x56/ZL8n7AOaetcEqYqndsZOut1Scnn4FmyMDm1PfVTlb0BpdWUofAPma44Hyqkd
MZg5xeS09CmU+RppG127P8+nE2yhyom7e2F4a72zRqCm9Kre18CDA7xSFE37sg+L
/bKqYWdSg9AB0dUCP9mxYcKJTBmh7xui6M153/NnMgazlIvUqiUTORlMCW1+BCsz
9tFZBHnvuNW7cIhsrMU74ngjW+UqDHJ1fMQt/2svGoixEIYlYw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:24 2025 by rpki-client