Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
File: e9508335-e447-4b74-99f5-98b04a3a6b2f.roa (raw, json)
Hash identifier: 7pP3nSZChBZRvL5toS4QIbENtKExkBTeOFLDgfISTpM=
Subject key identifier: 7E:4A:69:6A:00:00:1A:13:9B:03:20:4E:88:4F:F4:FD:DB:9C:80:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6F9E41C9020A3C8F30A977079DCC7708B0D98255
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
Signing time: Tue 20 May 2025 19:20:04 +0000
ROA not before: Tue 20 May 2025 19:20:04 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:40c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:9e:41:c9:02:0a:3c:8f:30:a9:77:07:9d:cc:77:08:b0:d9:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:20:04 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=f88628f643a20915786d5651cb985b8769815598ee439c901d6e8cc81116e345, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:c6:3e:4f:ac:df:fb:e0:82:5e:89:c1:6b:
3b:ed:8d:f4:e6:6f:3a:36:a0:e5:da:c3:8c:a1:3d:
77:f0:3c:47:03:0d:ad:cb:f9:cc:10:39:f9:d5:c7:
56:b3:b6:5f:05:1a:12:1e:09:76:97:70:b4:65:08:
07:ad:1e:ff:99:21:8d:bf:53:61:ab:7e:54:78:fd:
d1:c5:21:9d:a9:6c:5c:2b:94:e1:40:dd:21:d0:3d:
1b:26:46:03:ea:e1:5b:db:a3:56:39:9a:fa:18:7d:
d9:18:dd:2a:c9:f2:08:0d:82:25:8b:f4:cc:2d:d9:
69:00:43:58:85:6d:37:6d:43:5a:b9:06:be:cf:a7:
db:e7:d1:78:84:d7:b1:f0:d0:46:2e:36:13:7d:19:
db:a1:23:45:3c:cb:60:ba:db:76:79:ef:11:bb:70:
b9:73:33:2d:76:6a:96:57:fd:73:d0:c4:b7:42:06:
14:80:a9:4f:3b:c3:e0:94:50:fd:6a:3c:81:79:76:
b7:0e:cb:d4:03:20:f1:ae:73:05:40:2f:5a:21:ab:
df:48:62:7a:3d:fd:ec:79:57:72:a1:35:3c:90:0c:
02:e4:55:4b:dd:05:72:04:9f:52:91:fc:22:86:08:
71:6c:c7:6e:0d:bf:35:8e:91:60:8c:42:ad:b8:8e:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:69:6A:00:00:1A:13:9B:03:20:4E:88:4F:F4:FD:DB:9C:80:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
3e:a6:61:f8:e3:a7:eb:e0:f2:12:45:3c:24:27:5b:61:db:e1:
03:61:6d:40:99:1e:5c:45:d9:ef:2f:b1:64:7f:ed:56:f3:b3:
28:c6:5e:d0:44:16:cd:53:17:37:8a:4a:98:f8:b6:e9:a1:c6:
fa:45:50:39:b1:01:a0:67:36:55:a5:c0:ed:ab:39:34:d5:85:
77:ef:99:33:63:a4:5b:52:98:d6:ed:bc:d5:f5:ac:55:fb:cb:
80:db:b8:59:23:38:df:3b:8f:6c:9e:bb:84:72:ba:bf:98:72:
b3:1b:2f:71:01:89:36:70:43:8c:5c:79:26:f2:9f:18:89:46:
c2:d4:a7:88:a2:47:5c:09:c1:13:7f:65:98:d1:2d:cc:77:38:
94:a0:59:32:c3:17:8c:ed:72:27:d3:3b:f3:ed:e4:71:ab:18:
0f:05:97:1e:6a:50:a8:37:60:02:07:14:05:8c:29:4a:9b:09:
33:35:08:f2:49:3c:e2:56:de:d5:88:6f:75:d1:f4:29:2a:70:
c2:29:63:71:5d:82:ae:a6:5c:01:0d:41:c9:cd:14:b4:aa:a5:
e6:f1:7a:fa:13:9b:04:c3:fd:10:ad:72:8a:dc:66:21:97:03:
bd:3e:54:cf:1b:13:9c:c2:37:4e:2c:af:54:be:e4:9d:be:ce:
7b:44:49:fc
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUb55ByQIKPI8wqXcHncx3CLDZglUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTIwMDRaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGY4ODYyOGY2NDNhMjA5MTU3ODZkNTY1MWNiOTg1Yjg3Njk4MTU1OThlZTQz
OWM5MDFkNmU4Y2M4MTExNmUzNDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIu4xj5PrN/74IJeicFrO+2N9OZvOjag5drDjKE9d/A8RwMNrcv5zBA5+dXH
VrO2XwUaEh4JdpdwtGUIB60e/5khjb9TYat+VHj90cUhnalsXCuU4UDdIdA9GyZG
A+rhW9ujVjma+hh92RjdKsnyCA2CJYv0zC3ZaQBDWIVtN21DWrkGvs+n2+fReITX
sfDQRi42E30Z26EjRTzLYLrbdnnvEbtwuXMzLXZqllf9c9DEt0IGFICpTzvD4JRQ
/Wo8gXl2tw7L1AMg8a5zBUAvWiGr30hiej397HlXcqE1PJAMAuRVS90FcgSfUpH8
IoYIcWzHbg2/NY6RYIxCrbiO3N0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR+Smlq
AAAaE5sDIE6IT/T925yALDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTk1MDgzMzUtZTQ0Ny00Yjc0LTk5ZjUtOThiMDRhM2E2YjJmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HtA
wDANBgkqhkiG9w0BAQsFAAOCAQEAPqZh+OOn6+DyEkU8JCdbYdvhA2FtQJkeXEXZ
7y+xZH/tVvOzKMZe0EQWzVMXN4pKmPi26aHG+kVQObEBoGc2VaXA7as5NNWFd++Z
M2OkW1KY1u281fWsVfvLgNu4WSM43zuPbJ67hHK6v5hysxsvcQGJNnBDjFx5JvKf
GIlGwtSniKJHXAnBE39lmNEtzHc4lKBZMsMXjO1yJ9M78+3kcasYDwWXHmpQqDdg
AgcUBYwpSpsJMzUI8kk84lbe1YhvddH0KSpwwiljcV2CrqZcAQ1Byc0UtKql5vF6
+hObBMP9EK1yitxmIZcDvT5UzxsTnMI3TiyvVL7knb7Oe0RJ/A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:40:17 2025 by rpki-client