Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
File: 24b496aa-161c-4d5d-a9ca-3ba09772390a.roa (raw, json)
Hash identifier: i7aTIjL4qdQw7oBKGLBUnODQmYCCfoJ5qPd73MB8YzY=
Subject key identifier: 49:59:73:39:AA:38:1C:5B:36:8B:92:4B:85:09:47:4B:49:A3:B5:B6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48AB7653C3825EF11C76DD209323C7380D1B6B26
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
Signing time: Fri 11 Jul 2025 20:30:05 +0000
ROA not before: Fri 11 Jul 2025 20:30:05 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ab:76:53:c3:82:5e:f1:1c:76:dd:20:93:23:c7:38:0d:1b:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:30:05 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=72888b79ca6068af3e466803a720f467b8e7856f6f6b52f0b1324f45027dbf20, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:2f:1d:e8:a0:72:c8:4b:59:3b:3f:4c:bb:
d1:a0:6f:76:9f:5c:8f:0c:ae:39:0f:83:f4:7c:64:
7a:9f:17:a7:71:02:6e:02:67:16:92:e6:7a:c5:0d:
f6:99:30:a0:93:7a:7e:06:65:fd:f4:79:3f:b8:a7:
1c:2e:e3:9b:37:10:5a:3c:8e:55:14:cb:22:d0:96:
11:db:04:6a:77:10:6a:40:75:02:d4:a9:65:14:2c:
ef:80:32:47:9a:df:15:15:e4:79:c6:85:75:5e:eb:
95:1d:07:af:9a:5e:b7:d5:7f:30:f1:5a:98:97:dd:
cb:bc:d8:22:74:c6:6e:39:22:1b:e6:e7:8f:6d:8f:
41:e8:8a:ae:05:3f:47:24:69:46:c8:32:5a:ce:73:
85:9b:09:fc:7b:0a:3b:aa:0a:75:e2:21:40:ce:79:
8f:55:ef:4f:49:a2:a3:fd:f3:a6:d6:e1:78:b4:d3:
70:a3:ce:cf:4d:02:8e:20:d5:39:89:58:33:cd:ed:
1e:a9:06:1f:af:c2:c7:3a:a0:5b:a1:8e:87:7e:af:
56:34:27:13:d9:f7:ba:9e:34:60:fd:cd:70:d0:9e:
28:a2:ee:ff:35:d4:6b:ad:39:db:2c:84:37:67:24:
76:05:82:9c:e6:aa:51:d7:41:7f:38:69:a1:a3:ad:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:73:39:AA:38:1C:5B:36:8B:92:4B:85:09:47:4B:49:A3:B5:B6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/24b496aa-161c-4d5d-a9ca-3ba09772390a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:6000::/40
Signature Algorithm: sha256WithRSAEncryption
8b:32:e6:ba:09:45:71:5b:9c:39:44:bd:9a:15:bc:8f:95:49:
2d:84:0f:38:03:fc:e4:8c:01:d4:42:b7:31:b9:bb:29:cb:3e:
06:ba:16:14:cb:4e:37:3d:e5:de:da:88:53:7f:1f:72:8f:db:
a4:f7:26:58:06:c7:81:ce:2f:65:df:00:ff:1e:97:6f:5e:f3:
2f:af:76:26:f0:38:f3:d4:64:5a:b0:70:2d:f4:43:b7:c2:d3:
a9:50:2b:74:bd:d9:a2:35:e1:d2:70:6f:8a:0e:31:38:f4:fe:
c7:df:f6:32:e6:de:17:51:a8:6e:9a:08:62:fe:17:96:cf:a0:
d2:47:94:1c:f3:9f:02:8b:85:58:79:36:68:a0:1c:a5:7f:02:
6d:59:e6:8a:82:18:b6:4b:19:c6:ad:97:1e:15:73:4e:0c:56:
32:d3:b0:cd:2d:c3:d2:a1:59:71:e1:74:ad:94:63:6c:8d:46:
05:8e:4e:03:30:b9:8b:70:ec:59:14:4e:fa:f8:ee:57:8e:68:
f0:6e:05:7d:dd:18:76:a2:e6:67:a3:15:4b:0e:19:04:d4:c3:
ad:db:c4:80:e5:74:d2:08:b8:cf:5a:be:f2:5f:44:23:8f:5c:
b2:2e:1f:77:d2:10:b6:78:a6:ed:e6:da:92:7b:39:d1:2c:14:
dc:87:0c:1c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSKt2U8OCXvEcdt0gkyPHOA0bayYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDMwMDVaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDcyODg4Yjc5Y2E2MDY4YWYzZTQ2NjgwM2E3MjBmNDY3YjhlNzg1NmY2ZjZi
NTJmMGIxMzI0ZjQ1MDI3ZGJmMjAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJz4Lx3ooHLIS1k7P0y70aBvdp9cjwyuOQ+D9Hxkep8Xp3ECbgJnFpLmesUN
9pkwoJN6fgZl/fR5P7inHC7jmzcQWjyOVRTLItCWEdsEancQakB1AtSpZRQs74Ay
R5rfFRXkecaFdV7rlR0Hr5pet9V/MPFamJfdy7zYInTGbjkiG+bnj22PQeiKrgU/
RyRpRsgyWs5zhZsJ/HsKO6oKdeIhQM55j1XvT0mio/3zptbheLTTcKPOz00CjiDV
OYlYM83tHqkGH6/CxzqgW6GOh36vVjQnE9n3up40YP3NcNCeKKLu/zXUa6052yyE
N2ckdgWCnOaqUddBfzhpoaOt/P0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRJWXM5
qjgcWzaLkkuFCUdLSaO1tjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjRiNDk2YWEtMTYxYy00ZDVkLWE5Y2EtM2JhMDk3NzIzOTBhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DZg
MA0GCSqGSIb3DQEBCwUAA4IBAQCLMua6CUVxW5w5RL2aFbyPlUkthA84A/zkjAHU
Qrcxubspyz4GuhYUy043PeXe2ohTfx9yj9uk9yZYBseBzi9l3wD/HpdvXvMvr3Ym
8Djz1GRasHAt9EO3wtOpUCt0vdmiNeHScG+KDjE49P7H3/Yy5t4XUahumghi/heW
z6DSR5Qc858Ci4VYeTZooBylfwJtWeaKghi2SxnGrZceFXNODFYy07DNLcPSoVlx
4XStlGNsjUYFjk4DMLmLcOxZFE76+O5XjmjwbgV93Rh2ouZnoxVLDhkE1MOt28SA
5XTSCLjPWr7yX0Qjj1yyLh930hC2eKbt5tqSeznRLBTchwwc
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:43:19 2025 by rpki-client