Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
File: 924a4487-e709-4e7a-9c72-9678b465cef8.roa (raw, json)
Hash identifier: NazdUg5OcBY6wqCArUhsfUVrgU73HmmtFnRWfxCbnEI=
Subject key identifier: 4D:E7:4D:B8:04:A0:A8:07:D4:BE:53:7F:9B:A7:B7:BF:2C:70:EA:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D7CDD9DA6C7A4CE3A9A0EE22BA196122B443713
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
Signing time: Fri 25 Jul 2025 16:50:14 +0000
ROA not before: Fri 25 Jul 2025 16:50:14 +0000
ROA not after: Fri 29 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:7c:dd:9d:a6:c7:a4:ce:3a:9a:0e:e2:2b:a1:96:12:2b:44:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 25 16:50:14 2025 GMT
Not After : Aug 29 23:59:59 2025 GMT
Subject: serialNumber=7551518890e92c0f82e954dcb32aa00c46270164864dccbf38a34d4179b6f4d7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:7b:3f:db:95:88:78:b5:50:bb:17:53:d3:
e0:e9:55:e5:0a:86:4e:55:f1:17:45:2a:97:36:4b:
de:49:29:8c:ca:76:94:9b:87:c6:8c:10:b2:f0:68:
b5:8b:e0:00:0b:71:be:37:85:a5:bb:93:e0:0e:98:
87:5e:fa:7d:d9:9c:97:44:df:07:c4:4b:65:a0:14:
79:97:65:65:1b:57:87:22:b6:c8:aa:23:dc:a1:c7:
55:3f:52:25:cc:9a:e1:49:4b:5d:0e:d4:b9:a3:cb:
25:df:1d:b4:4d:68:e9:96:c0:a4:14:52:71:d0:26:
83:da:3e:60:f3:ed:06:b6:52:10:bb:58:03:40:a2:
9c:aa:9a:06:5f:d0:04:a1:e0:1c:a1:a3:ff:96:39:
8d:01:7e:f7:6d:bc:68:d3:13:ad:3f:22:21:4c:9c:
4e:4d:8c:b8:6f:36:d9:cf:bf:75:c9:3f:dd:83:01:
8c:57:79:16:cc:c2:71:ad:a8:2d:37:2c:ba:d2:a7:
65:88:60:9a:75:3d:0c:78:57:b1:01:bf:98:3f:c3:
bf:f4:71:5d:49:1d:6c:13:a8:c0:aa:5b:1a:27:97:
14:6b:ca:46:f0:ee:0f:a2:dc:46:f4:77:b0:92:e3:
64:e2:7f:5d:d9:da:cc:c5:b2:58:d9:2e:db:6a:f8:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E7:4D:B8:04:A0:A8:07:D4:BE:53:7F:9B:A7:B7:BF:2C:70:EA:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/924a4487-e709-4e7a-9c72-9678b465cef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6000::/40
Signature Algorithm: sha256WithRSAEncryption
10:e7:ea:43:20:6b:5a:78:53:15:1f:70:06:9f:e8:e0:f6:13:
dc:23:04:2b:3a:73:eb:82:e1:5d:9d:45:e4:00:8c:db:18:f5:
c6:a6:80:fb:84:86:53:ee:be:ea:d3:73:ec:75:0a:d7:d1:80:
d0:9f:33:5f:42:c6:c5:99:cc:1c:e1:0b:ab:9e:87:24:c7:22:
78:3b:b9:9c:31:05:4a:5b:37:42:c8:e9:2f:21:a1:c7:e6:b2:
3d:7e:8e:20:58:ca:1e:c8:3b:4e:e1:05:a3:93:49:dc:f0:e4:
c6:11:b9:af:0d:11:60:6e:b4:03:35:8c:0c:1f:de:f4:43:6f:
77:d4:24:ae:b4:91:d5:6c:0a:08:0a:bd:11:15:c5:4b:02:75:
2f:2f:63:f4:48:b1:26:ae:d1:dd:6d:e7:40:a0:2a:3f:cb:d5:
cb:c1:2f:25:6a:20:fd:86:0e:b5:ac:55:63:53:64:3c:7a:11:
26:0b:dd:8a:58:ae:9c:2a:15:7e:fb:ec:c0:72:0e:41:56:ed:
2c:6e:1c:5c:7b:1c:18:6f:ac:28:d3:dd:28:44:ef:23:be:2b:
20:dc:34:51:d1:8f:4e:96:9b:94:50:9b:48:5a:97:39:7a:7f:
2c:d9:6e:54:be:37:a8:d1:5a:58:7d:d9:22:05:80:c5:dd:e4:
b0:ec:7a:cc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTXzdnabHpM46mg7iK6GWEitENxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MjUxNjUwMTRaFw0yNTA4MjkyMzU5NTlaMHoxSTBHBgNV
BAUTQDc1NTE1MTg4OTBlOTJjMGY4MmU5NTRkY2IzMmFhMDBjNDYyNzAxNjQ4NjRk
Y2NiZjM4YTM0ZDQxNzliNmY0ZDcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKLDez/blYh4tVC7F1PT4OlV5QqGTlXxF0UqlzZL3kkpjMp2lJuHxowQsvBo
tYvgAAtxvjeFpbuT4A6Yh176fdmcl0TfB8RLZaAUeZdlZRtXhyK2yKoj3KHHVT9S
Jcya4UlLXQ7UuaPLJd8dtE1o6ZbApBRScdAmg9o+YPPtBrZSELtYA0CinKqaBl/Q
BKHgHKGj/5Y5jQF+9228aNMTrT8iIUycTk2MuG822c+/dck/3YMBjFd5FszCca2o
LTcsutKnZYhgmnU9DHhXsQG/mD/Dv/RxXUkdbBOowKpbGieXFGvKRvDuD6LcRvR3
sJLjZOJ/XdnazMWyWNku22r4LCsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRN5024
BKCoB9S+U3+bp7e/LHDqvzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTI0YTQ0ODctZTcwOS00ZTdhLTljNzItOTY3OGI0NjVjZWY4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HRg
MA0GCSqGSIb3DQEBCwUAA4IBAQAQ5+pDIGtaeFMVH3AGn+jg9hPcIwQrOnPrguFd
nUXkAIzbGPXGpoD7hIZT7r7q03PsdQrX0YDQnzNfQsbFmcwc4QurnockxyJ4O7mc
MQVKWzdCyOkvIaHH5rI9fo4gWMoeyDtO4QWjk0nc8OTGEbmvDRFgbrQDNYwMH970
Q2931CSutJHVbAoICr0RFcVLAnUvL2P0SLEmrtHdbedAoCo/y9XLwS8laiD9hg61
rFVjU2Q8ehEmC92KWK6cKhV+++zAcg5BVu0sbhxcexwYb6wo090oRO8jvisg3DRR
0Y9OlpuUUJtIWpc5en8s2W5Uvjeo0VpYfdkiBYDF3eSw7HrM
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:32 2025 by rpki-client