Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
File: 46265eea-a395-4578-afc8-0bf551de327d.roa (raw, json)
Hash identifier: m9CczJk6x7c1WUiq4lKUo0a74fXDCkGpGVb9o+pofwE=
Subject key identifier: 43:67:60:E1:E7:25:DC:41:A3:17:1B:57:7A:AC:0F:C8:48:CF:56:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 10424F6B9064EBB9609A5B5FB7BC71194B5732A5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
Signing time: Mon 21 Jul 2025 16:40:14 +0000
ROA not before: Mon 21 Jul 2025 16:40:14 +0000
ROA not after: Mon 25 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d073:c0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:42:4f:6b:90:64:eb:b9:60:9a:5b:5f:b7:bc:71:19:4b:57:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 21 16:40:14 2025 GMT
Not After : Aug 25 23:59:59 2025 GMT
Subject: serialNumber=fcf8eb7e902595625127615165cfdcc897ed177ae5415b6b7d918073f34e0ac9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:49:0e:67:83:aa:be:16:df:be:b8:06:f9:
5e:e1:e7:23:35:66:24:97:74:96:d5:58:e9:0f:37:
4c:b4:7e:41:2b:4f:b6:15:3b:a1:cd:76:79:86:5a:
cd:0a:13:5b:a4:27:84:11:45:cd:eb:2d:ab:11:c0:
a9:d0:90:ab:37:36:5e:e3:d8:dc:cf:da:fa:ae:9a:
0a:8f:50:ce:d5:73:01:cf:14:75:5f:ba:fa:46:65:
9f:19:fc:ac:93:40:ca:ec:68:7e:64:d2:d5:2a:23:
f9:6a:31:49:d3:14:ac:6d:ce:9a:30:18:f7:62:a7:
88:06:5c:ea:92:e2:73:85:b1:5a:ee:47:35:10:c6:
24:85:09:6b:40:60:5f:8c:55:ad:f2:43:ea:d1:da:
41:9d:02:7b:f6:be:b1:57:4a:00:ea:59:6e:20:db:
34:7c:f0:00:cd:2d:3c:68:d1:7d:be:fa:a8:21:be:
cb:bf:23:48:b5:cf:5d:eb:67:cd:8b:e3:96:a4:b3:
86:4b:7a:12:ca:29:aa:fb:b2:de:87:fd:ba:01:05:
49:df:86:97:4e:8e:ba:d9:b1:70:30:5a:e6:43:e2:
54:b3:35:9c:4c:f9:02:5c:2f:20:ec:ed:88:27:1b:
ae:3b:ac:ae:1f:5b:e2:a7:32:3c:02:96:cb:c9:aa:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:60:E1:E7:25:DC:41:A3:17:1B:57:7A:AC:0F:C8:48:CF:56:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/46265eea-a395-4578-afc8-0bf551de327d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d073:c0c0::/46
Signature Algorithm: sha256WithRSAEncryption
7d:cf:81:fb:77:96:58:b4:77:7e:01:ef:04:88:63:6e:ea:58:
0b:4b:91:95:7d:33:dc:16:17:74:7d:f7:cb:13:da:b1:50:32:
59:ea:80:f7:8a:d1:51:e5:c4:ee:ef:fb:ad:e6:ad:4c:0d:27:
e7:df:84:34:48:93:5b:08:e3:54:0b:a7:81:bb:6d:34:5f:6e:
de:79:39:f9:77:89:ef:13:d8:be:b1:e6:cb:ca:3c:e4:f4:8d:
28:8c:1f:49:c8:5b:bf:60:1d:0f:58:97:a3:40:92:ce:b9:b2:
63:39:bb:bb:d9:0b:26:19:49:62:b3:8d:50:c4:aa:c1:27:41:
7f:20:2f:ae:bd:5a:e8:c6:0d:89:42:c3:4d:c0:47:73:f5:30:
a9:fc:ac:12:ad:fa:ee:5e:f1:a2:bb:71:c9:99:ae:d0:b8:c1:
5b:be:d8:c8:26:e4:e0:78:b5:07:ce:19:5c:68:0e:63:87:a7:
c4:99:fe:59:cf:6b:db:95:92:8b:50:c1:70:5a:13:bc:9e:00:
ca:2a:b4:ef:dd:d3:8c:d1:c7:ea:b3:cc:f8:21:f4:c1:82:49:
52:6a:c6:b9:e1:6f:4a:7c:34:f4:b6:ce:5a:f0:f3:9d:34:65:
f9:2b:c8:f4:93:5d:14:88:77:72:1c:d2:c4:c9:c6:e7:5f:ed:
e2:64:a4:82
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUEEJPa5Bk67lgmltft7xxGUtXMqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MjExNjQwMTRaFw0yNTA4MjUyMzU5NTlaMHoxSTBHBgNV
BAUTQGZjZjhlYjdlOTAyNTk1NjI1MTI3NjE1MTY1Y2ZkY2M4OTdlZDE3N2FlNTQx
NWI2YjdkOTE4MDczZjM0ZTBhYzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKrsSQ5ng6q+Ft++uAb5XuHnIzVmJJd0ltVY6Q83TLR+QStPthU7oc12eYZa
zQoTW6QnhBFFzestqxHAqdCQqzc2XuPY3M/a+q6aCo9QztVzAc8UdV+6+kZlnxn8
rJNAyuxofmTS1Soj+WoxSdMUrG3OmjAY92KniAZc6pLic4WxWu5HNRDGJIUJa0Bg
X4xVrfJD6tHaQZ0Ce/a+sVdKAOpZbiDbNHzwAM0tPGjRfb76qCG+y78jSLXPXetn
zYvjlqSzhkt6Esopqvuy3of9ugEFSd+Gl06OutmxcDBa5kPiVLM1nEz5AlwvIOzt
iCcbrjusrh9b4qcyPAKWy8mq1VECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRDZ2Dh
5yXcQaMXG1d6rA/ISM9WQTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDYyNjVlZWEtYTM5NS00NTc4LWFmYzgtMGJmNTUxZGUzMjdkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HPA
wDANBgkqhkiG9w0BAQsFAAOCAQEAfc+B+3eWWLR3fgHvBIhjbupYC0uRlX0z3BYX
dH33yxPasVAyWeqA94rRUeXE7u/7reatTA0n59+ENEiTWwjjVAungbttNF9u3nk5
+XeJ7xPYvrHmy8o85PSNKIwfSchbv2AdD1iXo0CSzrmyYzm7u9kLJhlJYrONUMSq
wSdBfyAvrr1a6MYNiULDTcBHc/UwqfysEq367l7xortxyZmu0LjBW77YyCbk4Hi1
B84ZXGgOY4enxJn+Wc9r25WSi1DBcFoTvJ4Ayiq0793TjNHH6rPM+CH0wYJJUmrG
ueFvSnw09LbOWvDznTRl+SvI9JNdFIh3chzSxMnG51/t4mSkgg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:41 2025 by rpki-client