Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
File: 94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa (raw, json)
Hash identifier: Nf0x/2HP0jRaDJoyk65dJjJx2XkMVifwMq8523ojSB4=
Subject key identifier: E3:61:8A:60:00:27:5C:A6:A2:BB:99:7A:E3:6F:FE:6D:A9:F6:AD:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A59CCB8BC86E67375C542883A0B1F9EB2280D2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
Signing time: Tue 20 May 2025 18:50:51 +0000
ROA not before: Tue 20 May 2025 18:50:51 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:59:cc:b8:bc:86:e6:73:75:c5:42:88:3a:0b:1f:9e:b2:28:0d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 18:50:51 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=4e736bfbbdda7837002bcfc29314f2b3181ac95fbb72922e180a0dff4ce42a02, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:a9:28:9c:b0:cf:6d:61:dc:e5:9c:fc:5d:
d9:e3:e0:ee:99:d6:8b:9a:b1:03:f2:8f:e4:6a:71:
72:65:3b:50:b7:f5:ea:bc:d4:91:da:76:db:41:8d:
75:38:1d:b3:f0:e7:bf:c1:03:3c:54:28:f5:f9:87:
5d:48:b1:2b:12:35:a3:bb:0f:cf:52:da:f4:29:89:
74:fa:f1:78:1c:e4:86:b0:c0:41:34:37:9a:3e:a2:
24:06:97:6c:13:88:77:dc:de:54:0c:ed:b2:42:70:
29:9f:79:db:85:ae:50:a0:d7:86:50:78:5f:6e:b9:
14:b0:e9:77:13:3a:d6:47:0e:fe:6e:70:82:3b:3c:
be:1c:7f:7e:9f:6f:41:77:0c:c5:48:ef:a9:05:e6:
33:a5:60:00:d2:49:ea:7a:b4:72:c3:48:2f:11:6f:
8d:69:f6:7f:c2:ae:bd:5a:ea:b7:81:5a:b1:34:bf:
ca:58:32:1a:b5:8b:e7:2d:d8:f5:68:9e:97:77:30:
a4:36:7d:17:4a:62:a7:04:fd:65:8d:88:b4:63:02:
87:70:f9:4e:8f:73:a6:cd:f3:6e:c9:6b:9f:80:59:
51:ef:63:27:c1:5f:8a:15:d4:2c:2c:94:8c:b4:2c:
49:6e:5a:2e:49:ff:95:d2:61:9b:e6:90:ac:8a:51:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:8A:60:00:27:5C:A6:A2:BB:99:7A:E3:6F:FE:6D:A9:F6:AD:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/94e08d8d-13fa-4060-8ce0-0a2757a1fa5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:6040::/48
Signature Algorithm: sha256WithRSAEncryption
0c:75:aa:f9:e7:43:6a:86:0c:7c:99:11:d5:8c:fd:15:2f:fa:
6f:0e:1e:ad:43:4b:de:ce:81:45:ee:4f:b0:56:52:84:da:b2:
c8:97:57:c9:b6:6a:f9:47:7e:55:ad:d6:ad:19:fe:45:ca:80:
da:49:44:8f:70:fa:99:22:f7:66:dc:75:23:9d:8c:b6:6d:e0:
3a:f0:b0:df:59:8f:19:8b:d4:81:77:8a:74:09:8d:18:a1:70:
ce:8c:3b:76:63:35:3f:14:47:a5:4a:8d:67:31:3d:d5:fc:d8:
0e:3f:b4:11:e7:6b:fe:09:fd:32:99:9c:b1:d8:32:9a:e2:63:
c0:2c:14:47:92:d8:34:b6:6c:1b:0d:97:de:65:78:71:6c:26:
01:7b:43:55:c3:d4:f1:76:68:53:e0:b9:0d:4a:16:18:c2:a1:
05:a9:32:da:ba:ab:1a:20:f2:61:fe:46:a3:4c:ab:7b:63:6c:
21:e9:8d:97:9d:e3:21:bc:71:bc:8b:40:23:00:41:c7:bd:aa:
c2:43:0f:ef:4f:f5:1d:e4:fd:e5:19:f0:d5:a2:9f:f3:a6:07:
22:9f:8e:6a:c7:b7:1c:0d:b6:ab:b2:56:b8:25:68:5d:3f:f4:
0f:95:28:6d:81:e4:2a:7a:60:d7:c4:dc:be:7f:78:f0:fb:6e:
8d:dc:d5:c7
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUalnMuLyG5nN1xUKIOgsfnrIoDS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxODUwNTFaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDRlNzM2YmZiYmRkYTc4MzcwMDJiY2ZjMjkzMTRmMmIzMTgxYWM5NWZiYjcy
OTIyZTE4MGEwZGZmNGNlNDJhMDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKf4qSicsM9tYdzlnPxd2ePg7pnWi5qxA/KP5GpxcmU7ULf16rzUkdp220GN
dTgds/Dnv8EDPFQo9fmHXUixKxI1o7sPz1La9CmJdPrxeBzkhrDAQTQ3mj6iJAaX
bBOId9zeVAztskJwKZ9524WuUKDXhlB4X265FLDpdxM61kcO/m5wgjs8vhx/fp9v
QXcMxUjvqQXmM6VgANJJ6nq0csNILxFvjWn2f8KuvVrqt4FasTS/ylgyGrWL5y3Y
9Wiel3cwpDZ9F0pipwT9ZY2ItGMCh3D5To9zps3zbslrn4BZUe9jJ8FfihXULCyU
jLQsSW5aLkn/ldJhm+aQrIpRJLMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTjYYpg
ACdcpqK7mXrjb/5tqfatqTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTRlMDhkOGQtMTNmYS00MDYwLThjZTAtMGEyNzU3YTFmYTVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9g
QDANBgkqhkiG9w0BAQsFAAOCAQEADHWq+edDaoYMfJkR1Yz9FS/6bw4erUNL3s6B
Re5PsFZShNqyyJdXybZq+Ud+Va3WrRn+RcqA2klEj3D6mSL3Ztx1I52Mtm3gOvCw
31mPGYvUgXeKdAmNGKFwzow7dmM1PxRHpUqNZzE91fzYDj+0Eedr/gn9Mpmcsdgy
muJjwCwUR5LYNLZsGw2X3mV4cWwmAXtDVcPU8XZoU+C5DUoWGMKhBaky2rqrGiDy
Yf5Go0yre2NsIemNl53jIbxxvItAIwBBx72qwkMP70/1HeT95Rnw1aKf86YHIp+O
ase3HA22q7JWuCVoXT/0D5UobYHkKnpg18Tcvn948PtujdzVxw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:31 2025 by rpki-client