Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
File: 37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa (raw, json)
Hash identifier: QWpfZTHQWMiVH3fDru3pLO0M+HoU34q4y+Y65087pAE=
Subject key identifier: 1D:4C:1D:51:CC:8F:18:60:A9:5F:13:7E:39:FA:40:0C:26:A7:D1:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 532E6278EA849C0E2DF8068403F829B82DF0B1C4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
Signing time: Tue 01 Jul 2025 15:01:03 +0000
ROA not before: Tue 01 Jul 2025 15:01:03 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2e:62:78:ea:84:9c:0e:2d:f8:06:84:03:f8:29:b8:2d:f0:b1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:01:03 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=fb4726b2c91a6a41c2c91d4bfdaab49e4c7b7fe48e377cb3595a49bb15c9cdef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:3c:df:fb:17:df:68:ae:24:a3:72:85:75:
7b:9a:20:15:fc:73:02:b7:e2:81:ca:b2:68:e1:9a:
bb:22:a3:2e:b7:e0:8c:61:da:82:cf:f0:ab:69:e8:
41:8e:6b:50:07:55:4b:5e:7b:ac:d9:a9:31:ff:1e:
2e:a4:10:40:d3:57:cd:a1:c0:30:a9:5e:8d:66:8f:
76:8a:1e:7e:3b:16:37:11:27:bc:02:4c:35:dd:7e:
35:f0:d1:ad:c5:84:63:05:63:3d:ca:d7:ff:e5:df:
3a:8a:cd:d7:96:61:d0:23:7c:0b:30:fb:69:7c:3c:
b4:a7:ce:6a:d0:a5:db:9e:68:40:04:4d:ba:69:91:
c6:59:09:e8:aa:17:99:d1:e3:9d:ce:06:67:c9:11:
76:d3:a5:57:ff:a6:4a:d5:de:5c:15:de:7e:01:0c:
bd:66:1e:13:30:7d:bc:4c:a6:6e:76:3c:59:0c:37:
fb:8f:e8:0a:cb:b7:07:c7:60:4d:01:93:b6:8b:e9:
51:a9:df:34:ef:9a:21:7b:57:2e:cf:14:2a:6c:f4:
a9:3d:b0:52:0f:e1:f0:a7:e9:3f:90:67:d9:14:4b:
dd:1e:4f:74:85:11:39:e2:b6:45:a8:7e:67:63:06:
0d:b0:26:d7:d5:b8:05:ff:af:94:93:68:d4:27:eb:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:1D:51:CC:8F:18:60:A9:5F:13:7E:39:FA:40:0C:26:A7:D1:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:8000::/48
Signature Algorithm: sha256WithRSAEncryption
bb:50:d8:fc:75:cd:1b:84:5d:5b:1f:b6:ac:24:ca:f9:f2:ad:
58:f4:bb:8a:bd:d5:35:af:50:fa:3d:81:7b:8f:1c:6b:f3:09:
e3:31:6b:aa:5d:aa:51:3d:c3:dd:1b:b0:85:e9:06:24:01:d7:
68:53:b0:8f:ca:96:12:77:b0:62:14:9d:e4:58:19:8d:4c:76:
75:b3:90:05:76:98:99:db:79:d7:47:39:fa:b5:ff:63:18:9e:
40:1e:af:45:e6:44:a3:38:ac:86:02:41:6e:d7:c6:9b:2f:7f:
b3:f2:91:57:29:1c:50:35:d8:ec:62:82:c4:28:0e:08:b8:a6:
ac:4c:9b:60:42:a8:2a:f5:12:53:6d:d0:3e:9a:9a:1e:0f:33:
4c:7f:4b:20:fe:66:e7:80:c2:67:ea:44:d0:05:82:de:37:b4:
91:0f:98:39:3a:32:00:db:e7:fb:a1:34:e9:e1:c6:0d:fa:ca:
3f:39:65:f1:a8:2c:d1:60:ba:33:86:1b:84:3d:57:9f:45:ef:
8b:29:90:92:d0:78:0d:38:a5:43:f8:d5:69:c1:ed:33:f7:5a:
97:26:c8:d1:76:75:89:5d:3c:2d:40:8c:eb:6f:07:f0:29:17:
86:94:a4:14:bb:11:e8:74:a4:54:b0:52:cd:d8:f0:eb:2c:a3:
09:9c:47:cd
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUy5ieOqEnA4t+AaEA/gpuC3wscQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MDExNTAxMDNaFw0yNTA4MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGZiNDcyNmIyYzkxYTZhNDFjMmM5MWQ0YmZkYWFiNDllNGM3YjdmZTQ4ZTM3
N2NiMzU5NWE0OWJiMTVjOWNkZWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKRLPN/7F99oriSjcoV1e5ogFfxzArfigcqyaOGauyKjLrfgjGHags/wq2no
QY5rUAdVS157rNmpMf8eLqQQQNNXzaHAMKlejWaPdooefjsWNxEnvAJMNd1+NfDR
rcWEYwVjPcrX/+XfOorN15Zh0CN8CzD7aXw8tKfOatCl255oQARNummRxlkJ6KoX
mdHjnc4GZ8kRdtOlV/+mStXeXBXefgEMvWYeEzB9vEymbnY8WQw3+4/oCsu3B8dg
TQGTtovpUanfNO+aIXtXLs8UKmz0qT2wUg/h8KfpP5Bn2RRL3R5PdIUROeK2Rah+
Z2MGDbAm19W4Bf+vlJNo1Cfr0zUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQdTB1R
zI8YYKlfE345+kAMJqfRmTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzdiMDBjNjMtNGQ0OC00NmEyLWEyYWMtYzZkM2JmNjk1M2JkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HaA
ADANBgkqhkiG9w0BAQsFAAOCAQEAu1DY/HXNG4RdWx+2rCTK+fKtWPS7ir3VNa9Q
+j2Be48ca/MJ4zFrql2qUT3D3RuwhekGJAHXaFOwj8qWEnewYhSd5FgZjUx2dbOQ
BXaYmdt510c5+rX/YxieQB6vReZEozishgJBbtfGmy9/s/KRVykcUDXY7GKCxCgO
CLimrEybYEKoKvUSU23QPpqaHg8zTH9LIP5m54DCZ+pE0AWC3je0kQ+YOToyANvn
+6E06eHGDfrKPzll8ags0WC6M4YbhD1Xn0XviymQktB4DTilQ/jVacHtM/dalybI
0XZ1iV08LUCM628H8CkXhpSkFLsR6HSkVLBSzdjw6yyjCZxHzQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 03:33:04 2025 by rpki-client