Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1277c797-1181-445f-b798-ef72bbfc284c.roa
File: 1277c797-1181-445f-b798-ef72bbfc284c.roa (raw, json)
Hash identifier: JjOVWoVYzLhetJWs6kURNCBmSqElwf12DbB7LINNE+U=
Subject key identifier: 62:EF:33:8B:A0:99:EF:78:C3:12:B8:F6:BC:2B:A2:7C:DC:39:00:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3171B03E68F32C0E2DE68925D80CFD113E7C4E05
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1277c797-1181-445f-b798-ef72bbfc284c.roa
Signing time: Mon 14 Jul 2025 16:54:20 +0000
ROA not before: Mon 14 Jul 2025 16:54:20 +0000
ROA not after: Mon 18 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:71:b0:3e:68:f3:2c:0e:2d:e6:89:25:d8:0c:fd:11:3e:7c:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 14 16:54:20 2025 GMT
Not After : Aug 18 23:59:59 2025 GMT
Subject: serialNumber=28f5ee38213dce3be1d938ad014b5b72cd5a30799d3a70d06043fa078cc7c02b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:f7:5f:ee:b2:d9:54:f3:88:e5:5e:46:4d:
3a:19:99:a1:eb:2d:85:40:ea:6a:fd:15:ad:23:c9:
fc:1b:c8:c7:bd:9c:af:f6:9f:31:f5:23:ce:67:dc:
80:26:61:56:f0:37:5b:79:1e:d5:e8:bd:46:80:ed:
37:de:7f:01:39:a4:41:f7:62:26:d8:50:46:7b:3d:
5a:03:21:76:d7:78:cf:a7:d5:50:90:af:96:b4:a5:
ae:62:44:95:85:4a:d4:a0:34:a7:e0:6f:b4:54:87:
76:f6:ad:cc:b6:92:46:8b:d3:fb:3c:8c:aa:dc:72:
11:d0:5d:40:17:de:21:c3:05:d1:ee:27:e1:78:7c:
df:4a:df:f3:8d:3f:5e:b5:ee:fd:5e:80:be:5c:04:
a4:ca:66:96:1b:af:62:71:67:a3:3f:2a:1f:7f:f9:
ea:73:d2:b1:c0:f0:92:90:ca:c3:de:e4:1e:bd:34:
5c:c6:ee:29:ad:78:a5:d8:ea:77:e3:be:47:3f:bf:
78:79:9d:50:3e:1a:f4:e8:9d:92:26:9e:56:6c:f7:
fa:d0:43:6d:22:19:19:d3:24:74:cf:61:30:ca:82:
74:50:bf:9b:40:16:49:40:1d:b7:ca:4a:e1:3b:7b:
51:6f:6b:f2:6c:7e:5c:37:26:a2:91:1e:a5:06:cf:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EF:33:8B:A0:99:EF:78:C3:12:B8:F6:BC:2B:A2:7C:DC:39:00:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1277c797-1181-445f-b798-ef72bbfc284c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b0:2b:de:b2:a1:24:ad:80:8b:01:c6:bb:3e:7a:64:45:ba:d4:
49:ef:66:8c:4a:b1:23:6b:64:9a:c7:3e:87:f5:37:c0:9f:ba:
83:eb:8a:bd:9e:7c:c1:8c:1a:4a:69:61:79:8e:47:28:0d:cb:
70:04:89:ef:0e:2d:e2:6b:d2:f2:83:fb:5e:7a:ba:18:ac:bb:
af:fb:1e:79:35:75:f0:9f:22:35:17:57:6f:e9:a9:31:57:98:
8f:48:58:54:5d:9b:a7:62:79:56:38:d9:4d:ba:f7:31:5c:4e:
5d:66:27:3d:41:bd:66:0d:18:d1:c6:d6:6a:b4:3a:8f:df:08:
45:ab:98:7a:0b:f4:0f:81:7f:10:b5:42:24:e1:0b:46:79:6c:
c0:8f:49:a1:65:fa:18:14:52:58:23:b5:f8:32:b6:67:6a:9e:
87:1a:87:86:af:38:8d:99:14:23:44:7f:38:2a:76:b2:f3:83:
3a:2a:1a:57:09:9b:e4:00:18:4b:24:a5:41:e1:3e:cb:31:12:
dd:53:df:cb:19:ba:c9:a3:29:10:23:37:93:09:b0:26:09:24:
60:c8:fb:eb:c8:7d:85:7a:e7:c0:a5:dd:5c:4e:17:32:37:19:
40:04:2d:89:d6:48:44:58:c3:e3:56:bc:05:d7:75:84:fa:d5:
f3:ad:99:9f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMXGwPmjzLA4t5okl2Az9ET58TgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTQxNjU0MjBaFw0yNTA4MTgyMzU5NTlaMHoxSTBHBgNV
BAUTQDI4ZjVlZTM4MjEzZGNlM2JlMWQ5MzhhZDAxNGI1YjcyY2Q1YTMwNzk5ZDNh
NzBkMDYwNDNmYTA3OGNjN2MwMmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALxN91/ustlU84jlXkZNOhmZoesthUDqav0VrSPJ/BvIx72cr/afMfUjzmfc
gCZhVvA3W3ke1ei9RoDtN95/ATmkQfdiJthQRns9WgMhdtd4z6fVUJCvlrSlrmJE
lYVK1KA0p+BvtFSHdvatzLaSRovT+zyMqtxyEdBdQBfeIcMF0e4n4Xh830rf840/
XrXu/V6AvlwEpMpmlhuvYnFnoz8qH3/56nPSscDwkpDKw97kHr00XMbuKa14pdjq
d+O+Rz+/eHmdUD4a9OidkiaeVmz3+tBDbSIZGdMkdM9hMMqCdFC/m0AWSUAdt8pK
4Tt7UW9r8mx+XDcmopEepQbP7z8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRi7zOL
oJnveMMSuPa8K6J83DkAxDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTI3N2M3OTctMTE4MS00NDVmLWI3OTgtZWY3MmJiZmMyODRjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HTg
MA0GCSqGSIb3DQEBCwUAA4IBAQCwK96yoSStgIsBxrs+emRFutRJ72aMSrEja2Sa
xz6H9TfAn7qD64q9nnzBjBpKaWF5jkcoDctwBInvDi3ia9Lyg/teeroYrLuv+x55
NXXwnyI1F1dv6akxV5iPSFhUXZunYnlWONlNuvcxXE5dZic9Qb1mDRjRxtZqtDqP
3whFq5h6C/QPgX8QtUIk4QtGeWzAj0mhZfoYFFJYI7X4MrZnap6HGoeGrziNmRQj
RH84Knay84M6KhpXCZvkABhLJKVB4T7LMRLdU9/LGbrJoykQIzeTCbAmCSRgyPvr
yH2FeufApd1cThcyNxlABC2J1khEWMPjVrwF13WE+tXzrZmf
-----END CERTIFICATE-----
Generated at Tue Jul 22 22:23:34 2025 by rpki-client