Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
File: 56c31249-f32b-4fc4-a69f-07420913a101.roa (raw, json)
Hash identifier: GCxRHfXNeH+hHwHA/6sp5PjpQbzb2px3p8/fOxzqvi0=
Subject key identifier: BD:83:C7:57:50:8E:1D:A4:A1:A0:60:86:39:68:EC:8A:5A:7D:90:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 38344FBA3180C2A665CC0D1E7BF466F9552A82EE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
Signing time: Tue 20 May 2025 19:01:27 +0000
ROA not before: Tue 20 May 2025 19:01:27 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:34:4f:ba:31:80:c2:a6:65:cc:0d:1e:7b:f4:66:f9:55:2a:82:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:01:27 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=91cde76a3ae434cc6066e7f98e48a0137a992a67190e9040acab87b5b7bdc593, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:b5:b6:30:9c:9c:6e:43:ba:54:69:9e:01:
5d:1d:29:46:93:6f:3d:36:ba:ff:b6:a2:0a:bf:51:
93:5b:07:51:f8:63:d2:b1:1d:76:bd:80:b2:4b:1a:
69:e5:bc:9b:41:48:c0:c4:51:31:ef:5c:7a:f4:3d:
3c:e6:a1:20:c4:f1:0e:4c:40:69:ba:2b:0d:45:1a:
94:40:67:b8:1a:f6:82:1a:67:1f:10:0c:33:59:dc:
26:98:45:45:8a:73:13:15:c4:24:2e:be:71:ef:06:
85:ed:84:c5:f4:39:87:b4:57:55:3d:ba:a1:54:29:
3f:4d:21:cc:81:3a:a5:3f:bf:d0:37:10:df:c6:d9:
e0:a4:a3:4e:fd:37:c7:02:1f:be:e9:6d:da:e1:8b:
bc:73:65:e9:3d:b4:da:fd:66:42:3a:2d:ca:f8:4e:
15:a1:3d:83:86:66:90:48:ef:56:88:c8:d5:a9:33:
a1:79:17:60:57:d6:66:65:d7:f5:6a:bf:b1:de:2c:
84:b3:fb:1c:4e:fd:3d:04:58:d8:d0:ee:56:18:67:
8f:ec:8c:ff:66:4a:3e:d6:2f:3e:29:25:b7:af:2b:
02:9d:92:c7:04:c4:0b:a8:25:36:79:04:df:81:d2:
30:ae:ef:47:3b:27:0a:49:25:db:4d:38:91:2a:02:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:C7:57:50:8E:1D:A4:A1:A0:60:86:39:68:EC:8A:5A:7D:90:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4000::/40
Signature Algorithm: sha256WithRSAEncryption
74:c2:78:e6:69:10:e0:e7:b5:77:a7:8c:d6:fc:b7:27:35:5b:
c4:9a:89:d3:00:fc:a0:92:69:ea:c3:fe:88:a5:3b:56:6f:08:
55:72:e1:4f:a4:8c:1b:d0:2d:0e:a2:06:fb:dc:33:4c:8e:9f:
00:02:40:19:b3:e0:6d:5d:01:58:a3:cd:3a:7a:59:1d:25:82:
46:47:40:c5:95:24:7a:ad:2e:09:5b:65:72:0b:5d:c6:6d:a4:
05:9d:e9:24:a7:e2:79:4b:a2:74:30:70:fc:43:2c:28:04:93:
5b:20:5c:6d:5e:33:d0:96:21:2d:47:51:97:25:5d:2f:d7:ec:
82:44:80:9a:5a:8c:56:79:4b:aa:fa:26:fa:8d:05:ed:45:0c:
a1:e6:e8:7a:9f:97:7e:b8:81:f2:ed:09:40:9b:f1:5a:30:9c:
1d:2d:29:1d:79:04:cb:5b:5c:7a:7c:7a:ac:62:ca:59:58:8c:
6f:26:b6:b6:a8:bc:e3:c8:82:60:dc:3e:a5:6c:6e:8e:9b:cd:
a1:1e:3b:28:2b:c2:63:49:6a:0c:b6:ae:6c:6d:db:2f:f1:f8:
6b:89:38:59:43:81:9c:ac:5a:3d:e0:5f:67:2d:b0:73:2d:4f:
5b:60:6a:1d:7b:1f:79:33:73:89:d6:f2:0a:ee:be:1e:f6:0d:
b5:d8:99:04
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUODRPujGAwqZlzA0ee/Rm+VUqgu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTAxMjdaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDkxY2RlNzZhM2FlNDM0Y2M2MDY2ZTdmOThlNDhhMDEzN2E5OTJhNjcxOTBl
OTA0MGFjYWI4N2I1YjdiZGM1OTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJw9tbYwnJxuQ7pUaZ4BXR0pRpNvPTa6/7aiCr9Rk1sHUfhj0rEddr2Asksa
aeW8m0FIwMRRMe9cevQ9POahIMTxDkxAaborDUUalEBnuBr2ghpnHxAMM1ncJphF
RYpzExXEJC6+ce8Ghe2ExfQ5h7RXVT26oVQpP00hzIE6pT+/0DcQ38bZ4KSjTv03
xwIfvult2uGLvHNl6T202v1mQjotyvhOFaE9g4ZmkEjvVojI1akzoXkXYFfWZmXX
9Wq/sd4shLP7HE79PQRY2NDuVhhnj+yM/2ZKPtYvPiklt68rAp2SxwTEC6glNnkE
34HSMK7vRzsnCkkl2004kSoCGLsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS9g8dX
UI4dpKGgYIY5aOyKWn2QMTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTZjMzEyNDktZjMyYi00ZmM0LWE2OWYtMDc0MjA5MTNhMTAxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HJA
MA0GCSqGSIb3DQEBCwUAA4IBAQB0wnjmaRDg57V3p4zW/LcnNVvEmonTAPygkmnq
w/6IpTtWbwhVcuFPpIwb0C0Oogb73DNMjp8AAkAZs+BtXQFYo806elkdJYJGR0DF
lSR6rS4JW2VyC13GbaQFnekkp+J5S6J0MHD8QywoBJNbIFxtXjPQliEtR1GXJV0v
1+yCRICaWoxWeUuq+ib6jQXtRQyh5uh6n5d+uIHy7QlAm/FaMJwdLSkdeQTLW1x6
fHqsYspZWIxvJra2qLzjyIJg3D6lbG6Om82hHjsoK8JjSWoMtq5sbdsv8fhriThZ
Q4GcrFo94F9nLbBzLU9bYGodex95M3OJ1vIK7r4e9g212JkE
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:29 2025 by rpki-client