Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
File: 042e82d3-e08f-4fca-9e40-387fde51dfd5.roa (raw, json)
Hash identifier: CCCJZuUQ3cabbDNP9XEE3H/yNXtL2DguL88FFjQZwJ8=
Subject key identifier: FC:E1:A4:BD:BD:31:D5:DB:4D:86:C8:C0:54:4E:16:51:9C:F8:AD:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 102867F86F5BC8769B2F1E3DB1F91AC80CB94E99
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
Signing time: Sat 12 Jul 2025 00:51:01 +0000
ROA not before: Sat 12 Jul 2025 00:51:01 +0000
ROA not after: Sat 16 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:28:67:f8:6f:5b:c8:76:9b:2f:1e:3d:b1:f9:1a:c8:0c:b9:4e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 12 00:51:01 2025 GMT
Not After : Aug 16 23:59:59 2025 GMT
Subject: serialNumber=e090312d81f5c5838d6cb1e731e67c98f5f86816b9bb48de7b3b78e214d814e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:32:34:9c:3c:21:8a:6b:cf:e2:52:37:95:
58:21:00:91:7f:18:32:ab:97:43:85:56:97:e9:84:
68:3b:7e:b3:a2:bb:ec:25:21:9b:f6:25:33:f7:bf:
d6:50:be:e9:d1:2e:c5:41:20:a3:1a:9c:a1:cb:95:
08:b4:52:1b:6c:3c:36:09:6d:ad:d8:13:b8:a9:9e:
b7:cd:19:ed:0c:31:9e:be:c5:df:48:d1:70:da:1e:
74:c0:5b:b0:0c:95:46:bf:ad:e9:53:19:49:14:a9:
13:52:ed:f8:3d:30:6d:af:7a:c8:6c:40:26:bf:7b:
b5:87:e4:85:6e:8c:20:75:66:c5:f3:5a:58:1c:9f:
c4:af:74:b9:ab:21:cc:36:0a:d3:37:70:9a:cf:98:
aa:71:04:88:fa:d8:6a:08:44:93:da:3b:15:68:85:
05:da:ac:95:cb:a5:40:e1:26:03:ec:50:42:fd:63:
0f:39:fa:bf:7b:98:f6:6f:26:d6:a1:4b:b0:83:b2:
6b:18:1f:7c:47:40:73:3c:9f:e6:30:b8:fe:24:32:
91:6e:de:c7:d0:04:f7:78:3f:f3:de:1e:a5:2e:c6:
4e:5e:51:a8:43:3a:53:05:ac:5a:1a:0c:28:c0:75:
ab:bd:07:01:7f:0f:c0:42:40:0d:e5:fd:c6:80:ae:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:A4:BD:BD:31:D5:DB:4D:86:C8:C0:54:4E:16:51:9C:F8:AD:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.104.0/21
Signature Algorithm: sha256WithRSAEncryption
59:8f:2f:05:13:4e:4e:64:29:2d:cc:8a:9d:d9:f2:12:a7:c8:
10:b3:1b:8a:85:3c:8e:4a:1c:5e:71:4c:1d:52:94:c4:fb:be:
9b:35:9e:bd:27:56:e6:68:18:9e:ad:4b:16:ce:6a:fa:74:e8:
9b:eb:95:ef:34:bc:b8:57:f1:e4:35:88:4c:ef:50:f5:51:9f:
0c:fe:fd:60:80:2c:89:5f:f3:c4:c5:8b:b7:3c:24:9a:c4:c0:
15:82:bd:38:19:f7:88:0d:d0:11:d8:63:71:37:84:c1:8d:6e:
31:df:ff:9c:de:9f:be:0e:d5:7c:ee:fb:d4:4d:45:f6:46:0d:
c3:b7:f3:6d:20:60:0d:35:8b:84:8d:05:90:64:bf:6c:c2:6d:
c5:4e:ea:78:84:49:ab:b1:80:c9:3c:bd:f9:9c:04:80:bf:32:
11:af:f8:56:b4:33:be:c2:ea:31:82:1e:bf:95:d9:12:bd:29:
8b:a8:2b:27:36:70:31:d7:37:bd:66:f0:8e:cb:19:0e:e6:6c:
27:46:0a:80:b1:ac:2b:6f:f5:64:7f:45:7e:e1:ee:0e:d0:d0:
a4:61:77:0f:d5:32:57:d5:aa:bc:03:90:6d:d5:45:04:f8:20:
ff:6c:5f:2d:6c:df:2c:5a:ef:3b:6c:82:ec:9b:9e:89:b8:f7:
aa:90:97:7d
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUEChn+G9byHabLx49sfkayAy5TpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTIwMDUxMDFaFw0yNTA4MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGUwOTAzMTJkODFmNWM1ODM4ZDZjYjFlNzMxZTY3Yzk4ZjVmODY4MTZiOWJi
NDhkZTdiM2I3OGUyMTRkODE0ZTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFWMjScPCGKa8/iUjeVWCEAkX8YMquXQ4VWl+mEaDt+s6K77CUhm/YlM/e/
1lC+6dEuxUEgoxqcocuVCLRSG2w8NgltrdgTuKmet80Z7Qwxnr7F30jRcNoedMBb
sAyVRr+t6VMZSRSpE1Lt+D0wba96yGxAJr97tYfkhW6MIHVmxfNaWByfxK90uash
zDYK0zdwms+YqnEEiPrYaghEk9o7FWiFBdqslculQOEmA+xQQv1jDzn6v3uY9m8m
1qFLsIOyaxgffEdAczyf5jC4/iQykW7ex9AE93g/894epS7GTl5RqEM6UwWsWhoM
KMB1q70HAX8PwEJADeX9xoCuccUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT84aS9
vTHV202GyMBUThZRnPitqTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDQyZTgyZDMtZTA4Zi00ZmNhLTllNDAtMzg3ZmRlNTFkZmQ1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA099aDAN
BgkqhkiG9w0BAQsFAAOCAQEAWY8vBRNOTmQpLcyKndnyEqfIELMbioU8jkocXnFM
HVKUxPu+mzWevSdW5mgYnq1LFs5q+nTom+uV7zS8uFfx5DWITO9Q9VGfDP79YIAs
iV/zxMWLtzwkmsTAFYK9OBn3iA3QEdhjcTeEwY1uMd//nN6fvg7VfO771E1F9kYN
w7fzbSBgDTWLhI0FkGS/bMJtxU7qeIRJq7GAyTy9+ZwEgL8yEa/4VrQzvsLqMYIe
v5XZEr0pi6grJzZwMdc3vWbwjssZDuZsJ0YKgLGsK2/1ZH9FfuHuDtDQpGF3D9Uy
V9WqvAOQbdVFBPgg/2xfLWzfLFrvO2yC7Jueibj3qpCXfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 03:44:49 2025 by rpki-client