Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
File: 36e6bf1a-660d-40a9-a561-406ff743fc37.roa (raw, json)
Hash identifier: d8E/tlHNKDfBzY47hZGzvhjRM+VKEI4VjTxxuNCxc3E=
Subject key identifier: B0:CB:58:21:E8:AA:34:83:78:2E:D6:C8:26:40:5A:F3:27:2E:8B:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4628E4FE865DDDD447EC9B3292047DBAD235EE3A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
Signing time: Fri 11 Jul 2025 20:31:29 +0000
ROA not before: Fri 11 Jul 2025 20:31:29 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:28:e4:fe:86:5d:dd:d4:47:ec:9b:32:92:04:7d:ba:d2:35:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:31:29 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=ceaf2bc47f6e92c4f3a4de7919f8215c44e2969408b3591baab20f63dbe0a75f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:d3:00:6f:eb:f2:a8:6a:e1:7e:07:d3:d2:
30:08:4b:28:d5:6a:35:56:80:59:00:21:6b:85:a6:
6f:d9:d0:42:54:74:30:43:c2:eb:84:40:80:7e:ac:
4a:d8:6f:a7:0d:73:4e:1d:5d:d8:61:1b:7f:91:0e:
55:4e:41:f1:e7:37:91:97:8b:81:cc:c3:c4:7f:ba:
85:8b:3e:c4:52:2f:2c:42:91:de:14:2b:fb:04:cb:
0f:bf:e6:8f:31:df:bc:d5:f2:0b:76:56:ef:61:f0:
4f:2d:d6:e3:0a:8a:63:7a:e3:0a:f4:de:35:69:87:
f3:31:82:1c:51:ce:66:4f:72:41:4a:01:66:1d:b4:
86:b3:33:ac:fb:a1:88:ea:43:3f:4b:f2:6d:fb:0c:
a2:96:57:e8:c2:4b:8b:d7:90:64:8d:3b:37:5a:b9:
71:aa:e1:2c:56:d8:1e:f9:13:ab:2e:08:40:06:c9:
0f:83:f6:36:88:c4:8d:dd:9e:28:0d:d9:36:c1:4f:
72:c4:1c:2f:2f:2d:31:46:d8:e9:38:6b:2b:d0:88:
c6:b6:b6:01:18:5c:15:83:3c:0d:53:10:92:3b:26:
3c:27:e5:fd:23:cb:f6:14:2a:4c:48:63:07:17:5e:
5e:67:66:05:d6:2e:06:43:6b:26:90:e0:ed:ec:1a:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:58:21:E8:AA:34:83:78:2E:D6:C8:26:40:5A:F3:27:2E:8B:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36e6bf1a-660d-40a9-a561-406ff743fc37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1b:57:d5:ec:a6:a3:7b:2a:6a:6e:0a:d0:00:90:5c:62:9c:1f:
82:8c:9a:c8:c5:f7:24:c1:c8:67:ce:aa:c5:02:40:49:bb:ba:
55:09:3d:09:d8:80:95:dd:e8:a9:f7:5d:ea:c2:2d:b3:4e:9a:
e8:3a:60:d9:33:17:8c:1d:ac:c1:91:3f:8e:bf:9f:9a:cf:60:
23:0d:33:75:4a:b2:2c:1d:35:0f:91:a0:ab:35:ad:45:cc:98:
7c:49:2b:9f:d6:77:fe:be:14:01:4b:4f:b2:28:3a:cb:64:b8:
98:34:16:51:e6:3a:cf:72:b8:79:ca:81:a7:0e:ee:85:14:c5:
41:96:ba:c5:60:ce:a7:e1:6a:fd:98:8c:42:a8:18:3e:c2:50:
bf:17:3f:73:29:b6:cf:90:14:c1:17:e4:4b:45:f5:dc:ee:2d:
16:86:e9:20:b4:c5:4d:2f:01:69:cd:a2:86:91:e9:05:e2:0d:
f6:72:c3:38:2d:b2:16:59:d2:db:c0:91:db:36:f5:49:a4:d5:
a7:80:7e:1c:e2:f4:d3:bc:9b:99:fe:28:fd:f4:77:ca:c8:cd:
ba:38:c7:79:79:46:0e:83:89:e6:b1:5b:b2:d6:ca:d7:76:33:
ec:1d:38:da:b7:1f:e5:91:7c:51:7c:62:22:2c:5d:f4:0d:28:
6f:be:fa:00
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURijk/oZd3dRH7JsykgR9utI17jowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDMxMjlaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGNlYWYyYmM0N2Y2ZTkyYzRmM2E0ZGU3OTE5ZjgyMTVjNDRlMjk2OTQwOGIz
NTkxYmFhYjIwZjYzZGJlMGE3NWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALMe0wBv6/KoauF+B9PSMAhLKNVqNVaAWQAha4Wmb9nQQlR0MEPC64RAgH6s
Sthvpw1zTh1d2GEbf5EOVU5B8ec3kZeLgczDxH+6hYs+xFIvLEKR3hQr+wTLD7/m
jzHfvNXyC3ZW72HwTy3W4wqKY3rjCvTeNWmH8zGCHFHOZk9yQUoBZh20hrMzrPuh
iOpDP0vybfsMopZX6MJLi9eQZI07N1q5carhLFbYHvkTqy4IQAbJD4P2NojEjd2e
KA3ZNsFPcsQcLy8tMUbY6ThrK9CIxra2ARhcFYM8DVMQkjsmPCfl/SPL9hQqTEhj
BxdeXmdmBdYuBkNrJpDg7ewaMQUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSwy1gh
6Ko0g3gu1sgmQFrzJy6L5zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzZlNmJmMWEtNjYwZC00MGE5LWE1NjEtNDA2ZmY3NDNmYzM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DoQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAbV9XspqN7KmpuCtAAkFxinB+CjJrIxfckwchn
zqrFAkBJu7pVCT0J2ICV3eip913qwi2zTproOmDZMxeMHazBkT+Ov5+az2AjDTN1
SrIsHTUPkaCrNa1FzJh8SSuf1nf+vhQBS0+yKDrLZLiYNBZR5jrPcrh5yoGnDu6F
FMVBlrrFYM6n4Wr9mIxCqBg+wlC/Fz9zKbbPkBTBF+RLRfXc7i0WhukgtMVNLwFp
zaKGkekF4g32csM4LbIWWdLbwJHbNvVJpNWngH4c4vTTvJuZ/ij99HfKyM26OMd5
eUYOg4nmsVuy1srXdjPsHTjatx/lkXxRfGIiLF30DShvvvoA
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:14 2025 by rpki-client