Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa
File: 730c632c-0510-4eef-8649-b29c7a1d089b.roa (raw, json)
Hash identifier: JWCeo61M9rF73Z9EzOQ7R35f2ZLQ6+J2nSIlvCA29jE=
Subject key identifier: BB:F3:99:88:AC:44:6D:41:7F:6B:7F:27:53:4C:FA:22:68:47:6A:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 66DBBF080A158F9EE6C23D901E304763066318E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa
Signing time: Tue 20 May 2025 18:20:56 +0000
ROA not before: Tue 20 May 2025 18:20:56 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:db:bf:08:0a:15:8f:9e:e6:c2:3d:90:1e:30:47:63:06:63:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:20:56 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=c30be163c1749d6c21bc1f1410025c11f64bfa030cfb3cf6c6ab88f0c580efe5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:70:60:d5:9b:d2:b0:ae:e2:e6:47:89:49:
fc:e2:38:06:d7:78:e3:6c:9f:b4:6a:6a:d7:f8:fa:
4f:fa:64:96:f5:f9:8c:14:a3:90:77:b1:e0:7b:a8:
df:c9:52:16:0b:22:ce:13:8f:7b:3b:f4:2e:b8:78:
82:63:54:eb:e7:0b:a3:1c:29:9b:e5:36:5f:f1:2c:
8a:28:8f:3d:5a:c0:df:e7:3c:25:c1:c1:03:b2:6f:
d1:63:db:ff:5d:81:53:b5:aa:a4:6b:db:3d:a3:5d:
a4:1d:4e:42:e4:68:70:ca:9e:c3:79:80:cf:0e:90:
b7:1b:6c:5d:c7:66:b0:fb:ed:da:c2:78:d0:34:6e:
20:fc:1b:6a:38:6a:f9:64:76:9d:c5:8d:29:48:2f:
5c:11:1b:c0:ac:2b:07:fe:25:26:e0:30:36:cb:1a:
9c:78:89:3a:6f:ca:f2:f4:07:2f:ab:7d:9c:ce:65:
22:3c:e9:ef:04:7f:5a:89:99:e2:78:c7:04:8f:01:
33:c1:cb:c9:41:dc:05:b7:59:61:18:de:90:31:c4:
de:b7:e3:78:ed:03:2f:69:f2:57:73:c8:02:1c:d1:
41:3d:89:47:dc:7f:92:29:96:3b:46:af:3f:f6:a4:
57:90:61:b2:f6:d0:04:88:bb:d4:1d:09:43:87:bf:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:99:88:AC:44:6D:41:7F:6B:7F:27:53:4C:FA:22:68:47:6A:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:2040::/48
Signature Algorithm: sha256WithRSAEncryption
49:ee:9e:35:28:26:4a:0f:52:a7:0e:2d:c2:e5:e9:84:10:77:
dd:6c:21:1c:bb:51:66:1e:1b:26:18:20:01:b3:8e:0a:5f:2f:
d9:c0:e4:37:0b:8c:c6:e8:d9:55:c4:a2:62:da:d7:cb:8c:ac:
51:c6:ae:bc:ff:32:18:64:82:42:19:87:a8:9d:ce:c7:0b:12:
5d:5b:9d:ab:c4:e4:d8:cb:53:89:7c:d3:a1:66:8c:fc:5d:d1:
7a:57:15:bc:cf:8d:26:d4:9f:8f:70:e0:9d:42:95:76:e2:89:
dc:10:2b:ff:f0:84:c0:1d:bf:b6:46:b9:d6:70:31:d1:bf:b0:
11:91:ab:df:23:9a:ef:53:c7:62:5a:7c:46:06:e3:12:be:83:
08:19:c5:75:25:9c:87:ad:0f:93:d3:57:06:55:f8:90:0b:77:
fb:d8:1b:a0:69:35:36:cb:e1:07:09:8d:e3:2a:86:22:02:fa:
93:99:9a:e2:51:83:d1:81:fd:3f:7d:93:89:05:a0:1c:40:44:
d7:43:fc:a8:c6:12:d8:07:3f:2e:a2:5e:76:0e:be:8f:65:c0:
cc:e5:50:a3:03:5c:0c:28:1e:6b:a6:e5:f8:f7:40:2a:9e:df:
a3:0c:86:b5:dd:90:e6:62:2a:57:99:73:58:45:59:7a:60:3b:
71:d2:c2:c5
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUZtu/CAoVj57mwj2QHjBHYwZjGOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODIwNTZaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGMzMGJlMTYzYzE3NDlkNmMyMWJjMWYxNDEwMDI1YzExZjY0YmZhMDMwY2Zi
M2NmNmM2YWI4OGYwYzU4MGVmZTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKBncGDVm9KwruLmR4lJ/OI4Btd442yftGpq1/j6T/pklvX5jBSjkHex4Huo
38lSFgsizhOPezv0Lrh4gmNU6+cLoxwpm+U2X/EsiiiPPVrA3+c8JcHBA7Jv0WPb
/12BU7WqpGvbPaNdpB1OQuRocMqew3mAzw6QtxtsXcdmsPvt2sJ40DRuIPwbajhq
+WR2ncWNKUgvXBEbwKwrB/4lJuAwNssanHiJOm/K8vQHL6t9nM5lIjzp7wR/WomZ
4njHBI8BM8HLyUHcBbdZYRjekDHE3rfjeO0DL2nyV3PIAhzRQT2JR9x/kimWO0av
P/akV5BhsvbQBIi71B0JQ4e/C/kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS785mI
rERtQX9rfydTTPoiaEdqyDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzMwYzYzMmMtMDUxMC00ZWVmLTg2NDktYjI5YzdhMWQwODliLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DEg
QDANBgkqhkiG9w0BAQsFAAOCAQEASe6eNSgmSg9Spw4twuXphBB33WwhHLtRZh4b
JhggAbOOCl8v2cDkNwuMxujZVcSiYtrXy4ysUcauvP8yGGSCQhmHqJ3OxwsSXVud
q8Tk2MtTiXzToWaM/F3RelcVvM+NJtSfj3DgnUKVduKJ3BAr//CEwB2/tka51nAx
0b+wEZGr3yOa71PHYlp8RgbjEr6DCBnFdSWch60Pk9NXBlX4kAt3+9gboGk1Nsvh
BwmN4yqGIgL6k5ma4lGD0YH9P32TiQWgHEBE10P8qMYS2Ac/LqJedg6+j2XAzOVQ
owNcDCgea6bl+PdAKp7fowyGtd2Q5mIqV5lzWEVZemA7cdLCxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:14 2025 by rpki-client