Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa
File: d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa (raw, json)
Hash identifier: 1rw4ALnNo/VmX4sAnwQO4bUvkJQq13+HT4xJHUoXLR0=
Subject key identifier: 6B:1A:0C:2C:A8:60:FB:D7:81:CB:3E:1E:62:66:27:6C:DB:EA:C3:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 28D949C3C0BBE31D0BE19C97AECB514546757334
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa
Signing time: Fri 01 Aug 2025 17:11:06 +0000
ROA not before: Fri 01 Aug 2025 17:11:06 +0000
ROA not after: Fri 05 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d9:49:c3:c0:bb:e3:1d:0b:e1:9c:97:ae:cb:51:45:46:75:73:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 1 17:11:06 2025 GMT
Not After : Sep 5 23:59:59 2025 GMT
Subject: serialNumber=d92eac20f19dc965d9625f9f6eb82e831e97e0a835f50cd6d4ac959888d421c4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:0b:b9:a0:73:86:77:84:48:8d:86:54:86:
86:02:01:de:e7:18:a6:67:77:48:46:69:b7:a8:70:
c8:4e:dc:01:1a:c2:7b:1a:d4:dd:34:11:98:6a:65:
43:ed:57:c2:9a:41:ee:94:0c:de:69:10:e5:74:82:
7d:9c:65:14:84:b6:2e:ee:cc:f6:b4:19:40:18:8e:
6e:3f:81:dd:f1:f4:ee:f0:6b:b3:c3:cf:ce:cf:bf:
21:95:6c:87:65:f6:b5:11:d9:bc:c2:22:81:e3:e8:
6e:9d:07:09:34:97:66:96:fa:a1:d0:f4:a4:ca:26:
bb:aa:06:a8:2d:bb:55:6f:f0:a6:c6:b9:74:26:d8:
f7:58:e7:61:14:90:e0:a0:8f:41:a4:07:9d:ab:50:
d8:c2:f7:44:8c:99:9d:c0:e6:3a:29:57:10:41:11:
85:5f:16:a9:87:91:f0:98:70:95:fd:90:58:c1:9c:
0f:f7:d4:d2:6d:99:e0:93:39:d2:99:b9:61:4c:77:
d6:c1:35:24:cf:6a:ad:66:8e:b3:16:3b:f5:5f:79:
13:1f:1e:3e:bb:5c:d8:9f:bf:a9:b6:df:bf:9f:f6:
79:d8:0c:9c:e6:01:4a:3a:56:d9:df:71:d8:25:54:
01:12:f0:c3:26:fc:18:cc:29:a7:2b:8b:66:21:89:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1A:0C:2C:A8:60:FB:D7:81:CB:3E:1E:62:66:27:6C:DB:EA:C3:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:800::/40
Signature Algorithm: sha256WithRSAEncryption
1d:21:ff:d5:9c:2f:35:88:bc:ee:c8:9b:f2:fc:c0:56:48:e7:
33:78:04:1b:0b:53:a5:e5:82:4a:93:b4:2a:5f:bc:1c:9b:8e:
f6:8b:21:53:7d:01:9e:fb:69:a0:4a:77:f8:ad:2a:7c:51:17:
b1:02:03:54:f0:d3:a4:eb:d3:67:a6:97:88:5c:2e:09:ba:e1:
f5:e1:62:fd:96:2f:ac:85:61:21:1f:e1:69:de:60:aa:a2:12:
a7:57:d3:20:2f:d7:af:80:78:52:b5:d8:ae:b9:81:ea:a5:2a:
df:f4:03:81:5c:a1:76:c2:ba:5a:f3:e3:ca:de:4b:61:6f:30:
ce:6a:bd:31:bb:a6:48:56:e0:a6:be:02:b6:df:3e:ce:9b:ee:
0f:2a:b2:14:c3:87:18:20:56:0e:01:61:4d:ab:0e:ea:27:3b:
5f:e7:08:5a:89:a8:7c:8f:aa:4f:7e:aa:68:4f:d5:0e:52:0b:
87:a6:2b:e6:d2:7b:42:82:f2:3c:ca:3f:fb:67:97:c4:ad:51:
78:dd:9c:8b:6b:7b:13:47:77:f2:e5:6d:66:db:e0:da:3f:2a:
18:6f:06:d1:37:2a:df:ad:dd:ae:fa:de:90:a9:9d:14:08:aa:
7e:e4:8e:1c:03:24:88:e6:7c:1e:8a:b9:7a:f7:db:b3:65:81:
02:2d:e8:4f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKNlJw8C74x0L4ZyXrstRRUZ1czQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA4MDExNzExMDZaFw0yNTA5MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ5MmVhYzIwZjE5ZGM5NjVkOTYyNWY5ZjZlYjgyZTgzMWU5N2UwYTgzNWY1
MGNkNmQ0YWM5NTk4ODhkNDIxYzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIHC7mgc4Z3hEiNhlSGhgIB3ucYpmd3SEZpt6hwyE7cARrCexrU3TQRmGpl
Q+1XwppB7pQM3mkQ5XSCfZxlFIS2Lu7M9rQZQBiObj+B3fH07vBrs8PPzs+/IZVs
h2X2tRHZvMIigePobp0HCTSXZpb6odD0pMomu6oGqC27VW/wpsa5dCbY91jnYRSQ
4KCPQaQHnatQ2ML3RIyZncDmOilXEEERhV8WqYeR8Jhwlf2QWMGcD/fU0m2Z4JM5
0pm5YUx31sE1JM9qrWaOsxY79V95Ex8ePrtc2J+/qbbfv5/2edgMnOYBSjpW2d9x
2CVUARLwwyb8GMwppyuLZiGJzOkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRrGgws
qGD714HLPh5iZids2+rDYTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDJiMTk5NTYtOTIwMi00ZTcxLTliZWUtZmRiYjRjNTJiYjZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DEI
MA0GCSqGSIb3DQEBCwUAA4IBAQAdIf/VnC81iLzuyJvy/MBWSOczeAQbC1Ol5YJK
k7QqX7wcm472iyFTfQGe+2mgSnf4rSp8URexAgNU8NOk69NnppeIXC4JuuH14WL9
li+shWEhH+Fp3mCqohKnV9MgL9evgHhStdiuuYHqpSrf9AOBXKF2wrpa8+PK3kth
bzDOar0xu6ZIVuCmvgK23z7Om+4PKrIUw4cYIFYOAWFNqw7qJztf5whaiah8j6pP
fqpoT9UOUguHpivm0ntCgvI8yj/7Z5fErVF43ZyLa3sTR3fy5W1m2+DaPyoYbwbR
Nyrfrd2u+t6QqZ0UCKp+5I4cAySI5nweirl699uzZYECLehP
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:54:34 2025 by rpki-client