Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
File: 452f19af-8187-465e-9ab8-4e678c11315e.roa (raw, json)
Hash identifier: Di62nkVUZK5P0l6RD57WsIVhSo5NgVzR50MYVgrGNhA=
Subject key identifier: 95:BD:44:C4:49:26:43:DA:92:DD:EE:5A:61:E2:AC:8F:AB:0C:A4:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6712E9FA9BACDCC90535DC2CC1F3915A5A7C4FFA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
Signing time: Tue 20 May 2025 20:30:18 +0000
ROA not before: Tue 20 May 2025 20:30:18 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:12:e9:fa:9b:ac:dc:c9:05:35:dc:2c:c1:f3:91:5a:5a:7c:4f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:30:18 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=75bba294c3a9989bc06e78d0ef053a2fdb59aca6306f0d432cf9f143ac8291f8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:b4:78:47:f0:cf:64:c3:bf:ad:ed:63:36:
4d:34:b3:64:3b:49:86:32:65:9d:3d:e0:63:52:0a:
d1:34:25:d4:10:95:58:02:49:bc:8e:88:48:1c:4c:
24:4b:56:47:d5:32:e9:39:f8:be:2d:18:27:85:e2:
28:d5:44:04:07:fb:7e:4d:4b:6b:28:a1:50:c2:5a:
d3:41:f3:83:ed:07:08:76:17:20:0b:bb:d1:6c:d5:
00:9b:d9:e6:d1:64:83:5a:b5:79:ce:58:78:7d:06:
d5:8f:69:94:f9:15:5f:7f:36:37:76:6a:d9:26:ef:
25:10:4c:54:78:d9:07:cc:23:36:e0:22:24:ed:a2:
4e:aa:d3:69:84:bb:63:05:a4:e5:46:15:1b:e3:93:
eb:ba:d9:1e:c2:cd:e7:00:de:38:34:a3:d9:65:94:
a3:81:ad:a2:66:46:71:8a:cd:af:4c:9f:2d:dc:3b:
4c:a4:1a:7b:4c:cb:53:1a:8b:9c:d5:89:48:1d:b7:
d1:cc:b6:48:f4:c2:cc:a0:a2:a4:dd:bb:e2:af:ed:
80:4a:6a:85:0f:5b:ae:45:99:15:d9:cc:ed:9e:b7:
d2:ef:8c:ae:a1:00:17:eb:b3:bc:6e:4c:d6:94:43:
60:b8:fb:a7:d3:82:ec:87:88:ca:d7:15:ba:3d:43:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BD:44:C4:49:26:43:DA:92:DD:EE:5A:61:E2:AC:8F:AB:0C:A4:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b::/37
Signature Algorithm: sha256WithRSAEncryption
4c:9b:dd:38:f9:8a:7e:63:78:0c:6a:ee:ac:a2:d4:d1:44:d7:
20:76:77:8a:09:88:3d:4c:58:5e:d7:e9:81:1c:c9:52:32:c9:
a2:99:d2:3e:53:66:3f:30:22:ea:ef:e4:bf:03:82:34:46:06:
4e:f4:50:32:5b:59:a2:5a:bf:c0:dc:5e:0e:63:8f:b6:55:eb:
75:18:ee:5e:d8:d8:ab:b8:57:64:21:8c:69:84:76:31:96:58:
21:57:88:94:67:33:f0:6b:f9:44:48:df:a2:73:3d:e8:1e:e1:
87:f5:76:c7:32:8c:ec:1f:80:af:12:38:cb:04:34:e0:fa:ac:
de:eb:78:87:f7:8c:5e:72:e1:c3:95:3f:3b:44:e7:a6:ad:56:
3e:b1:f1:7a:53:25:31:29:c5:50:17:3e:24:a0:93:21:3b:f9:
e9:c0:1d:a9:a9:51:04:40:d7:de:74:68:d7:09:e5:24:19:05:
4b:e1:38:17:61:38:55:5b:96:3c:c4:2b:b2:d1:e7:08:a6:ba:
b6:ab:04:a3:09:30:86:6e:99:98:e5:a8:28:4c:1a:64:ee:f0:
d4:82:21:2d:05:f6:63:0a:a2:ff:5b:b1:ac:90:3e:b9:1f:6c:
f8:98:bd:49:0e:d0:90:3e:64:de:97:21:3c:65:1a:33:15:20:
af:83:cc:0a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZxLp+pus3MkFNdwswfORWlp8T/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAyMDMwMThaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDc1YmJhMjk0YzNhOTk4OWJjMDZlNzhkMGVmMDUzYTJmZGI1OWFjYTYzMDZm
MGQ0MzJjZjlmMTQzYWM4MjkxZjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANpstHhH8M9kw7+t7WM2TTSzZDtJhjJlnT3gY1IK0TQl1BCVWAJJvI6ISBxM
JEtWR9Uy6Tn4vi0YJ4XiKNVEBAf7fk1LayihUMJa00Hzg+0HCHYXIAu70WzVAJvZ
5tFkg1q1ec5YeH0G1Y9plPkVX382N3Zq2SbvJRBMVHjZB8wjNuAiJO2iTqrTaYS7
YwWk5UYVG+OT67rZHsLN5wDeODSj2WWUo4GtomZGcYrNr0yfLdw7TKQae0zLUxqL
nNWJSB230cy2SPTCzKCipN274q/tgEpqhQ9brkWZFdnM7Z630u+MrqEAF+uzvG5M
1pRDYLj7p9OC7IeIytcVuj1DBecCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSVvUTE
SSZD2pLd7lph4qyPqwyknzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDUyZjE5YWYtODE4Ny00NjVlLTlhYjgtNGU2NzhjMTEzMTVlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0CsA
MA0GCSqGSIb3DQEBCwUAA4IBAQBMm904+Yp+Y3gMau6sotTRRNcgdneKCYg9TFhe
1+mBHMlSMsmimdI+U2Y/MCLq7+S/A4I0RgZO9FAyW1miWr/A3F4OY4+2Vet1GO5e
2NiruFdkIYxphHYxllghV4iUZzPwa/lESN+icz3oHuGH9XbHMozsH4CvEjjLBDTg
+qze63iH94xecuHDlT87ROemrVY+sfF6UyUxKcVQFz4koJMhO/npwB2pqVEEQNfe
dGjXCeUkGQVL4TgXYThVW5Y8xCuy0ecIprq2qwSjCTCGbpmY5agoTBpk7vDUgiEt
BfZjCqL/W7GskD65H2z4mL1JDtCQPmTelyE8ZRozFSCvg8wK
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:26 2025 by rpki-client