Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
File: d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa (raw, json)
Hash identifier: i73RTBbWkbHaA6Tntb8kelD3TJZzoGXPjGrnUev7lqc=
Subject key identifier: 2B:85:20:91:45:3C:19:13:55:48:2F:88:90:96:2B:61:B6:1A:FA:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 621C5623AC4870A6D459DB14B37EA8F70B6382F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
Signing time: Tue 20 May 2025 20:40:04 +0000
ROA not before: Tue 20 May 2025 20:40:04 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d024::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1c:56:23:ac:48:70:a6:d4:59:db:14:b3:7e:a8:f7:0b:63:82:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 20:40:04 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=e77fedb7b520d442d344846fd49d42b40f8826fc0de12d56f0c2ce92b8c08735, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:70:bf:c5:7e:5d:fd:11:5f:a9:ca:85:c6:
9b:f1:64:1d:43:38:ae:45:dd:db:8c:eb:e3:00:08:
7b:e3:39:17:33:0a:cb:55:57:bf:0c:5c:08:73:6e:
ca:a3:22:5d:dd:51:95:dc:80:bf:c8:ce:d6:72:c6:
79:1a:52:3c:aa:67:ae:e6:59:48:a4:34:b3:9a:59:
4e:0e:4e:90:01:15:7a:23:24:0a:15:61:23:dc:6e:
98:8d:82:d6:cb:3b:86:f3:cc:3e:05:23:ab:f8:fb:
3c:17:b3:15:7b:e5:c4:7a:5c:83:67:c7:cc:d4:16:
4e:a2:02:1d:68:53:26:ee:2f:cc:9c:ae:8d:94:a9:
8f:86:79:6e:9c:06:99:3b:e4:05:5d:dc:40:40:b8:
47:ea:8a:da:a6:b3:29:a6:6c:a1:ca:91:af:7e:44:
65:33:4a:74:7f:c6:23:99:18:cf:b9:7f:db:b1:5c:
39:d4:1b:2d:e7:43:57:10:69:12:06:d3:6c:06:e7:
e8:1d:61:dd:d9:9b:95:20:48:1c:c0:3e:32:6d:6e:
c2:2e:78:20:84:58:f9:12:2d:e5:74:d0:4e:18:75:
30:83:14:81:26:8e:69:6f:e6:48:6d:4e:89:91:c7:
3e:1b:74:de:76:5f:69:40:15:73:34:83:7e:58:17:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:20:91:45:3C:19:13:55:48:2F:88:90:96:2B:61:B6:1A:FA:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d8ff7013-08b6-4e36-ab88-c4f8bd3e7a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d024::/36
Signature Algorithm: sha256WithRSAEncryption
45:cf:8d:05:21:e4:f7:cd:e2:0a:86:73:38:c7:56:1b:aa:47:
68:97:ac:dd:a5:26:66:5e:b0:96:85:f3:51:c5:80:be:27:cd:
25:2d:4e:a7:0b:bf:2d:c8:23:4c:18:84:74:65:3b:a2:e1:84:
46:e4:ea:76:f8:b6:6d:5e:be:23:81:89:08:af:06:e0:ce:88:
4a:18:be:31:9d:00:e8:1c:21:2f:d1:80:1a:c2:24:6b:8f:a4:
2e:d7:f6:38:27:b4:b7:d5:b6:fe:46:f1:4d:bc:e8:6c:e5:08:
95:31:2b:96:b2:cb:31:fb:83:b6:9b:40:f9:83:78:57:d2:7a:
d9:3e:f8:c1:bd:c4:7b:8a:f0:56:f1:c7:78:00:8a:f5:65:68:
64:fb:21:c7:56:8e:50:14:52:50:52:ae:d2:ea:c8:98:26:81:
32:84:87:19:2b:8f:66:16:da:c4:35:1c:7f:b1:81:ac:78:8e:
b7:9e:36:f3:36:e3:00:ae:ee:39:c1:a6:61:dd:10:17:4d:59:
ff:49:17:0f:2d:0f:33:89:4c:00:8c:f9:93:81:fa:bc:61:86:
54:b1:d2:b9:1f:af:7e:4c:cf:24:83:ff:2f:41:e6:f8:f8:c8:
8a:ee:ee:89:f9:b8:f9:56:30:cc:1b:ac:e8:2a:54:be:5c:48:
f4:d7:30:cc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUYhxWI6xIcKbUWdsUs36o9wtjgvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAyMDQwMDRaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGU3N2ZlZGI3YjUyMGQ0NDJkMzQ0ODQ2ZmQ0OWQ0MmI0MGY4ODI2ZmMwZGUx
MmQ1NmYwYzJjZTkyYjhjMDg3MzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANu7cL/Ffl39EV+pyoXGm/FkHUM4rkXd24zr4wAIe+M5FzMKy1VXvwxcCHNu
yqMiXd1RldyAv8jO1nLGeRpSPKpnruZZSKQ0s5pZTg5OkAEVeiMkChVhI9xumI2C
1ss7hvPMPgUjq/j7PBezFXvlxHpcg2fHzNQWTqICHWhTJu4vzJyujZSpj4Z5bpwG
mTvkBV3cQEC4R+qK2qazKaZsocqRr35EZTNKdH/GI5kYz7l/27FcOdQbLedDVxBp
EgbTbAbn6B1h3dmblSBIHMA+Mm1uwi54IIRY+RIt5XTQThh1MIMUgSaOaW/mSG1O
iZHHPht03nZfaUAVczSDflgXra8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQrhSCR
RTwZE1VIL4iQliththr6LjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDhmZjcwMTMtMDhiNi00ZTM2LWFiODgtYzRmOGJkM2U3YTA0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CQA
MA0GCSqGSIb3DQEBCwUAA4IBAQBFz40FIeT3zeIKhnM4x1Ybqkdol6zdpSZmXrCW
hfNRxYC+J80lLU6nC78tyCNMGIR0ZTui4YRG5Op2+LZtXr4jgYkIrwbgzohKGL4x
nQDoHCEv0YAawiRrj6Qu1/Y4J7S31bb+RvFNvOhs5QiVMSuWsssx+4O2m0D5g3hX
0nrZPvjBvcR7ivBW8cd4AIr1ZWhk+yHHVo5QFFJQUq7S6siYJoEyhIcZK49mFtrE
NRx/sYGseI63njbzNuMAru45waZh3RAXTVn/SRcPLQ8ziUwAjPmTgfq8YYZUsdK5
H69+TM8kg/8vQeb4+MiK7u6J+bj5VjDMG6zoKlS+XEj01zDM
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:39:23 2025 by rpki-client