Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
File: b8a24699-2493-4e45-8227-bd2ec32f88ab.roa (raw, json)
Hash identifier: AoHOJ17FsM59MtOaz628W61ocDRG2yBhN6LJ85llvPE=
Subject key identifier: 08:71:24:11:EC:C2:93:C7:45:49:F1:85:88:28:17:96:66:22:31:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E187516727C2EDCD9B39C8421E86D438A86B695
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
Signing time: Tue 20 May 2025 19:11:04 +0000
ROA not before: Tue 20 May 2025 19:11:04 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:18:75:16:72:7c:2e:dc:d9:b3:9c:84:21:e8:6d:43:8a:86:b6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:11:04 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=7e776fba2567659ac3ec44fba17ae801acea41f05dbad4329f0560d876471f11, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b8:e3:05:d4:74:ce:a1:87:ca:4a:f0:b6:8d:
04:79:40:11:8a:81:67:a8:b6:d5:cb:d3:f2:8b:73:
13:0a:8b:c2:67:6e:b8:61:32:56:0e:89:c5:d5:40:
10:bc:69:36:89:de:46:1c:55:b2:57:21:a5:b7:30:
a9:42:06:af:f2:c6:ba:95:76:d2:a0:4c:77:08:28:
4d:2f:7a:10:b1:e4:a3:8a:ae:cb:e3:20:0f:21:d6:
15:cb:af:ae:f2:b6:8e:ab:c9:22:0f:38:6e:20:9f:
be:f0:5e:7d:80:ea:59:65:f5:5a:3e:ce:dc:87:73:
8b:75:b5:85:e5:2c:8b:7d:61:e8:eb:57:7b:31:f4:
9d:a0:cc:73:fd:7b:58:e8:d8:91:c0:67:62:a0:ec:
18:0c:6c:ea:2f:da:54:3f:44:cb:99:a7:9d:d0:38:
88:08:43:af:6c:a1:19:87:92:1a:84:c6:7f:ae:f4:
c6:44:aa:9c:c5:d5:9b:13:8e:74:c6:f7:0f:3c:50:
02:61:4d:c4:6d:47:81:ff:9c:a3:d0:66:8f:8c:93:
a4:52:75:f4:e3:d7:39:38:28:cb:97:2e:16:4c:8b:
5e:c5:79:9c:69:30:87:36:3e:ce:9a:67:6d:07:38:
25:21:34:e2:0e:95:24:74:77:b9:2e:74:3a:ac:f3:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:71:24:11:EC:C2:93:C7:45:49:F1:85:88:28:17:96:66:22:31:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
14:52:30:67:a6:d6:ec:b6:45:02:33:cc:2f:f1:0a:77:79:57:
3a:ef:1a:38:94:3d:9d:94:32:6f:e1:f8:97:89:79:5c:35:59:
b1:48:c7:23:53:c3:f8:21:cb:60:87:05:c0:b5:f8:29:02:9d:
0b:04:2c:da:e7:ce:56:6a:5e:05:c7:f7:58:d2:83:70:91:82:
1a:92:d5:de:98:82:40:90:54:09:ff:98:7a:08:8d:5f:75:f5:
7e:8f:90:2b:f1:31:2d:85:fd:ce:e3:14:5b:69:0f:ee:35:4f:
61:cc:98:5c:e8:dc:1f:f7:bc:82:21:c3:ee:01:e0:12:95:59:
62:e8:2d:8c:c8:64:09:ea:5d:25:2d:9a:36:eb:0b:0c:c2:73:
f0:ef:ac:b8:c7:f9:28:2c:ca:16:51:5b:81:66:cc:27:1e:8f:
8b:3c:97:54:cd:22:ed:64:3e:a7:92:b9:94:e9:87:4f:7c:6a:
12:4f:36:14:91:69:a8:6d:0f:8d:8c:cb:42:df:a4:09:51:8c:
88:a9:ab:38:80:21:61:93:05:ef:54:b8:5f:37:3c:ea:d2:1a:
bc:a0:73:cc:2f:bf:84:95:07:b1:28:f3:05:f9:5e:a3:88:a7:
c8:86:92:f1:c2:53:63:78:03:bf:d5:e2:14:73:21:8f:a4:fd:
e9:ac:e5:d6
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfhh1FnJ8LtzZs5yEIehtQ4qGtpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTExMDRaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDdlNzc2ZmJhMjU2NzY1OWFjM2VjNDRmYmExN2FlODAxYWNlYTQxZjA1ZGJh
ZDQzMjlmMDU2MGQ4NzY0NzFmMTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOW44wXUdM6hh8pK8LaNBHlAEYqBZ6i21cvT8otzEwqLwmduuGEyVg6JxdVA
ELxpNoneRhxVslchpbcwqUIGr/LGupV20qBMdwgoTS96ELHko4quy+MgDyHWFcuv
rvK2jqvJIg84biCfvvBefYDqWWX1Wj7O3Idzi3W1heUsi31h6OtXezH0naDMc/17
WOjYkcBnYqDsGAxs6i/aVD9Ey5mnndA4iAhDr2yhGYeSGoTGf670xkSqnMXVmxOO
dMb3DzxQAmFNxG1Hgf+co9Bmj4yTpFJ19OPXOTgoy5cuFkyLXsV5nGkwhzY+zppn
bQc4JSE04g6VJHR3uS50OqzzBRcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQIcSQR
7MKTx0VJ8YWIKBeWZiIxkzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjhhMjQ2OTktMjQ5My00ZTQ1LTgyMjctYmQyZWMzMmY4OGFiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H8Q
wDANBgkqhkiG9w0BAQsFAAOCAQEAFFIwZ6bW7LZFAjPML/EKd3lXOu8aOJQ9nZQy
b+H4l4l5XDVZsUjHI1PD+CHLYIcFwLX4KQKdCwQs2ufOVmpeBcf3WNKDcJGCGpLV
3piCQJBUCf+YegiNX3X1fo+QK/ExLYX9zuMUW2kP7jVPYcyYXOjcH/e8giHD7gHg
EpVZYugtjMhkCepdJS2aNusLDMJz8O+suMf5KCzKFlFbgWbMJx6PizyXVM0i7WQ+
p5K5lOmHT3xqEk82FJFpqG0PjYzLQt+kCVGMiKmrOIAhYZMF71S4Xzc86tIavKBz
zC+/hJUHsSjzBfleo4inyIaS8cJTY3gDv9XiFHMhj6T96azl1g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:41:11 2025 by rpki-client