Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
File: f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa (raw, json)
Hash identifier: 1rhFI0ObX9fi0ZSAh2+V6wbqSct3a0qRYY/Ia6odHkw=
Subject key identifier: 65:C3:5A:90:0D:85:0D:15:44:C0:14:96:7C:C4:74:D3:73:9C:CE:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C3C309EBEBAE3C2777A536E6EE8A3E91AFCBCC1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
Signing time: Tue 20 May 2025 19:11:06 +0000
ROA not before: Tue 20 May 2025 19:11:06 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3c:30:9e:be:ba:e3:c2:77:7a:53:6e:6e:e8:a3:e9:1a:fc:bc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:11:06 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=4193ce4e7fb33d6950455e67097796a96a7c7a25aba6dbdb48e99e7a701c3eb1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:3c:3a:72:da:c0:9c:c6:86:61:1e:18:43:
45:30:fc:b3:9a:27:68:5f:4b:f8:03:7f:61:fb:52:
56:a3:eb:61:cd:26:3b:8b:a6:f5:d7:50:d3:3f:a6:
6e:19:cd:dc:18:30:57:c2:1e:e2:99:0b:bb:c3:79:
7e:ac:e2:71:a2:a1:c3:d2:00:64:bf:a3:9d:14:a6:
c1:da:ba:69:56:d1:86:b6:01:10:40:03:af:7c:39:
11:c9:0b:b8:57:c8:c9:5c:32:57:1c:6c:f7:b0:1f:
06:3b:cc:a1:31:31:3a:78:44:e1:e0:dc:e0:fd:9c:
fc:72:cf:fb:70:1e:87:3b:c5:45:5a:81:aa:ac:e0:
b3:a6:b4:58:52:fa:bf:5b:77:2c:a1:b0:93:98:5f:
00:5f:2d:e6:9d:59:eb:fc:02:fd:ad:85:48:5a:3b:
cd:c5:40:60:0f:f6:15:76:a9:18:3f:de:30:e0:7d:
d9:86:44:b2:29:bd:22:f4:1b:d0:30:7c:73:9c:b3:
03:4c:65:3b:ac:97:1d:1d:ff:7e:b6:1e:63:53:59:
86:19:6c:58:33:f1:0b:64:ce:92:50:54:b4:7e:25:
c2:1b:4a:6a:76:ca:9a:30:d9:b1:20:ce:27:d7:09:
be:b4:ed:07:a6:30:88:6d:d5:05:98:18:ae:d9:2a:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:5A:90:0D:85:0D:15:44:C0:14:96:7C:C4:74:D3:73:9C:CE:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f2d2dfe9-f57a-43e4-8471-748b12e9dda6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:87:41:cf:00:9f:1f:7c:3d:5a:1d:ac:7b:d0:10:8d:05:1d:
52:94:22:0f:5e:a0:4f:69:ee:57:1f:9d:10:fc:1d:fc:41:04:
89:64:8f:fb:1f:ee:45:3e:2b:32:b1:bb:f2:df:1a:34:f2:27:
c1:5d:1a:d6:e4:9d:80:09:78:d6:0f:fb:a5:2d:0a:49:68:e2:
5e:d5:c9:b0:e2:aa:31:42:bf:79:fd:14:40:a1:85:8c:36:d0:
7e:21:77:df:20:cf:d5:fe:4a:20:38:91:90:f5:1c:40:9c:dc:
c4:5d:8e:99:17:d9:9b:47:74:66:71:c5:e8:f7:1e:38:d6:ea:
13:29:17:77:82:17:95:9b:fd:e2:00:ce:fa:27:61:5b:a0:76:
21:7b:cb:5b:bb:fa:7e:c6:85:88:26:ef:69:1e:c8:d3:ec:87:
35:9b:73:04:07:39:57:0d:8e:ff:e4:fc:ee:38:3d:cf:7d:f0:
bb:17:eb:65:08:e0:9d:65:7f:5e:b8:da:9a:15:03:09:1a:3e:
14:b6:96:7f:b3:e4:10:4d:e2:dd:a7:14:98:50:8e:fe:37:39:
b1:b8:06:5d:05:f5:e7:e2:3d:da:a8:af:e5:99:21:4f:9b:66:
16:98:30:99:01:b3:50:2d:d2:0f:31:4f:43:87:30:18:6a:46:
9d:84:af:e1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPDwwnr6648J3elNubuij6Rr8vMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTExMDZaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDQxOTNjZTRlN2ZiMzNkNjk1MDQ1NWU2NzA5Nzc5NmE5NmE3YzdhMjVhYmE2
ZGJkYjQ4ZTk5ZTdhNzAxYzNlYjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANGaPDpy2sCcxoZhHhhDRTD8s5onaF9L+AN/YftSVqPrYc0mO4um9ddQ0z+m
bhnN3BgwV8Ie4pkLu8N5fqzicaKhw9IAZL+jnRSmwdq6aVbRhrYBEEADr3w5EckL
uFfIyVwyVxxs97AfBjvMoTExOnhE4eDc4P2c/HLP+3AehzvFRVqBqqzgs6a0WFL6
v1t3LKGwk5hfAF8t5p1Z6/wC/a2FSFo7zcVAYA/2FXapGD/eMOB92YZEsim9IvQb
0DB8c5yzA0xlO6yXHR3/frYeY1NZhhlsWDPxC2TOklBUtH4lwhtKanbKmjDZsSDO
J9cJvrTtB6YwiG3VBZgYrtkqL2ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRlw1qQ
DYUNFUTAFJZ8xHTTc5zONDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjJkMmRmZTktZjU3YS00M2U0LTg0NzEtNzQ4YjEyZTlkZGE2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HKA
MA0GCSqGSIb3DQEBCwUAA4IBAQAdh0HPAJ8ffD1aHax70BCNBR1SlCIPXqBPae5X
H50Q/B38QQSJZI/7H+5FPisysbvy3xo08ifBXRrW5J2ACXjWD/ulLQpJaOJe1cmw
4qoxQr95/RRAoYWMNtB+IXffIM/V/kogOJGQ9RxAnNzEXY6ZF9mbR3RmccXo9x44
1uoTKRd3gheVm/3iAM76J2FboHYhe8tbu/p+xoWIJu9pHsjT7Ic1m3MEBzlXDY7/
5PzuOD3PffC7F+tlCOCdZX9euNqaFQMJGj4UtpZ/s+QQTeLdpxSYUI7+NzmxuAZd
BfXn4j3aqK/lmSFPm2YWmDCZAbNQLdIPMU9DhzAYakadhK/h
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:37:48 2025 by rpki-client