Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
File: ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa (raw, json)
Hash identifier: gS3VIM0UsfcKaAAxFEE37jo6s+QW7kdwPUIeDaAG3uM=
Subject key identifier: 78:4F:88:A0:E5:2C:5C:D4:7D:D3:CB:AB:F1:A6:36:AC:C6:A2:1A:44
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C3F1469E153EF322A7903AC899AEA89827DF152
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
Signing time: Tue 20 May 2025 19:31:36 +0000
ROA not before: Tue 20 May 2025 19:31:36 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3f:14:69:e1:53:ef:32:2a:79:03:ac:89:9a:ea:89:82:7d:f1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:31:36 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=476c6fc7698d3d2540c1060576c1032641539053bb3b6e0ca3cfd16e335dfa76, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:60:67:36:4b:1e:49:62:70:65:df:da:6b:
9e:c5:90:c2:d9:16:2e:01:38:28:de:81:c1:89:40:
7f:ed:87:a4:46:fa:2a:b6:18:e4:ed:29:0e:7b:94:
32:c9:99:33:29:a6:1d:92:61:cc:f5:92:51:51:69:
d7:9a:53:61:2a:02:08:81:30:1d:1d:68:eb:04:e7:
19:3e:7d:25:ba:b2:25:18:ec:92:1f:ea:2b:58:b5:
53:2e:14:a8:f0:62:a1:f2:07:db:c7:65:bf:58:8c:
82:75:4c:a6:24:32:2a:05:7a:bd:27:87:77:0d:9e:
18:08:33:75:4a:8e:ba:8d:e6:2d:76:c2:46:ce:6d:
38:54:39:d6:ba:e5:12:29:d0:74:a9:57:8d:e5:0c:
57:b1:b2:96:2e:14:71:eb:29:bd:71:b8:4c:93:c1:
30:dd:4c:22:ed:3a:73:b7:60:df:24:3e:bc:0f:ee:
8f:1e:1b:6f:a2:68:ee:3e:b4:76:81:ae:16:cc:8d:
8b:11:2a:7e:02:2f:ae:83:e0:72:71:9e:28:ec:d2:
b2:77:86:8a:63:08:76:4b:ae:d7:c7:83:16:f9:a2:
d2:1e:9a:e7:d4:09:83:59:ee:1c:bc:5e:81:ef:d1:
5e:9f:99:be:77:e7:8b:73:e8:4a:9a:5a:ea:fe:ec:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4F:88:A0:E5:2C:5C:D4:7D:D3:CB:AB:F1:A6:36:AC:C6:A2:1A:44
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4080::/46
Signature Algorithm: sha256WithRSAEncryption
a9:4b:d6:aa:48:7f:f7:53:d4:e0:30:ce:43:84:8c:00:22:3c:
6e:37:a6:de:42:56:70:68:2e:44:36:43:11:d8:49:eb:12:f2:
8e:01:32:58:fc:54:f6:4d:37:48:3f:c2:2f:05:dd:02:39:ea:
ed:e4:a4:f3:95:77:b5:f8:a0:06:e6:98:43:57:67:41:bc:b9:
f4:f5:6a:74:15:e8:f0:dd:de:6c:bf:f8:5a:4b:4e:d7:a3:98:
d5:1c:49:87:7a:13:46:4d:48:a9:75:24:46:cf:bb:29:17:a5:
b3:6b:62:f7:85:73:72:a5:0a:36:33:b6:f0:c7:9a:62:d9:22:
2e:fb:b9:45:b7:55:94:29:1d:29:9b:76:30:d9:0c:ba:f4:c9:
5f:08:ef:26:29:a9:96:5c:8f:ae:39:bd:57:a1:a8:b1:63:5b:
5c:16:f6:88:c5:ee:89:e9:8b:16:4a:21:fc:ba:68:21:ca:70:
08:87:be:cc:b6:41:57:d9:58:ad:3e:81:5f:d4:c7:b7:d1:27:
88:9d:b5:38:3e:a3:fd:3c:75:48:1e:09:8c:29:dd:5e:06:cd:
72:ed:9d:06:3c:8f:fa:c7:51:9c:9b:c1:42:65:bb:d6:b4:72:
0a:f1:83:32:6e:51:d1:03:1c:4c:fa:65:3a:ce:40:7a:0d:ae:
99:b9:b4:48
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUTD8UaeFT7zIqeQOsiZrqiYJ98VIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTMxMzZaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ3NmM2ZmM3Njk4ZDNkMjU0MGMxMDYwNTc2YzEwMzI2NDE1MzkwNTNiYjNi
NmUwY2EzY2ZkMTZlMzM1ZGZhNzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANvRYGc2Sx5JYnBl39prnsWQwtkWLgE4KN6BwYlAf+2HpEb6KrYY5O0pDnuU
MsmZMymmHZJhzPWSUVFp15pTYSoCCIEwHR1o6wTnGT59JbqyJRjskh/qK1i1Uy4U
qPBiofIH28dlv1iMgnVMpiQyKgV6vSeHdw2eGAgzdUqOuo3mLXbCRs5tOFQ51rrl
EinQdKlXjeUMV7Gyli4UcespvXG4TJPBMN1MIu06c7dg3yQ+vA/ujx4bb6Jo7j60
doGuFsyNixEqfgIvroPgcnGeKOzSsneGimMIdkuu18eDFvmi0h6a59QJg1nuHLxe
ge/RXp+Zvnfni3PoSppa6v7s+tUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR4T4ig
5Sxc1H3Ty6vxpjasxqIaRDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGRjZDI5MzEtMWNiNi00OWM1LWFmNWEtMDE5OTlhM2NmZjNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HtA
gDANBgkqhkiG9w0BAQsFAAOCAQEAqUvWqkh/91PU4DDOQ4SMACI8bjem3kJWcGgu
RDZDEdhJ6xLyjgEyWPxU9k03SD/CLwXdAjnq7eSk85V3tfigBuaYQ1dnQby59PVq
dBXo8N3ebL/4WktO16OY1RxJh3oTRk1IqXUkRs+7KRels2ti94VzcqUKNjO28Mea
YtkiLvu5RbdVlCkdKZt2MNkMuvTJXwjvJimpllyPrjm9V6GosWNbXBb2iMXuiemL
Fkoh/LpoIcpwCIe+zLZBV9lYrT6BX9THt9EniJ21OD6j/Tx1SB4JjCndXgbNcu2d
BjyP+sdRnJvBQmW71rRyCvGDMm5R0QMcTPplOs5Aeg2umbm0SA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:36:53 2025 by rpki-client