Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
File: 3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa (raw, json)
Hash identifier: pQt2/Mi2/IwZ+amcgIcc/WU9YWsHtqsTguvoBvhpIJI=
Subject key identifier: 3D:DC:B9:50:61:A8:05:50:11:57:EE:87:FD:1C:D7:00:96:B1:F5:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40134878720FD2EA380F99348B5D2074E74F4A8C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
Signing time: Sat 12 Jul 2025 00:50:10 +0000
ROA not before: Sat 12 Jul 2025 00:50:10 +0000
ROA not after: Sat 16 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:13:48:78:72:0f:d2:ea:38:0f:99:34:8b:5d:20:74:e7:4f:4a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 12 00:50:10 2025 GMT
Not After : Aug 16 23:59:59 2025 GMT
Subject: serialNumber=13fb1143532abccdad429e854a128fe2504e11fca68c0bdcb0e35a0039fd12ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:b5:13:a4:59:38:95:80:3a:fa:a7:dc:49:
be:47:53:9e:f9:55:5c:a5:1b:aa:44:c2:c9:7e:f9:
5b:96:f5:f6:8e:bf:0e:6d:3f:f5:7f:b6:f5:27:23:
d4:7c:d4:cd:1a:b5:b7:e7:4c:24:99:90:e2:41:1c:
81:5b:d9:e6:0d:35:44:86:93:59:82:50:37:ee:f3:
7a:9d:4f:36:a7:32:b3:ac:52:90:27:88:ef:bd:28:
d2:ec:d3:62:87:ff:51:7b:90:ad:ab:8b:1b:74:9f:
bd:f8:34:72:00:db:81:31:86:19:7e:5b:bd:13:f1:
61:1c:8a:6b:cc:4c:78:67:74:b1:22:7b:e2:66:1d:
d3:4d:6b:3a:ad:ae:d8:92:4d:95:aa:d5:71:4e:f1:
b1:d5:b5:d4:7c:8b:a9:1f:4c:cc:2f:cb:f2:b0:56:
1f:70:2e:07:ac:91:f0:e6:73:16:e2:f0:08:b8:8d:
f8:b9:45:6a:a6:5c:ce:76:29:3d:e8:4d:2a:3e:fa:
ea:8b:f5:9e:80:1b:6e:08:27:68:b9:d7:99:a7:64:
ac:7a:9b:13:bd:7e:3e:ae:b0:0d:f3:a1:17:62:71:
f7:8a:55:84:44:60:d8:9a:1a:85:51:8e:40:8f:a2:
ca:9d:91:27:ab:e5:3e:78:0f:e9:5e:78:ae:ac:55:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:B9:50:61:A8:05:50:11:57:EE:87:FD:1C:D7:00:96:B1:F5:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b5c68d3-e5a1-4742-a90c-59b1e29cfc00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
57:23:4e:13:21:9c:c9:1e:67:a1:5d:29:4d:cf:4e:4f:a1:b5:
f7:90:13:60:e1:fd:b8:4c:0c:13:b0:45:7a:06:0f:6c:14:b0:
72:24:24:7b:e5:b1:e9:61:98:dc:3f:36:f3:46:9b:92:aa:2f:
01:37:32:18:14:64:db:a6:0c:3c:bb:ff:48:9b:13:70:62:76:
4b:00:0b:11:d2:80:35:0f:a7:9e:f6:5c:52:e1:a3:a1:a5:ef:
88:14:29:39:1d:6f:56:dc:6c:aa:43:8e:25:0b:d7:51:79:85:
bb:81:69:b7:4d:8d:7a:23:2f:3d:80:8e:c8:ab:8c:53:0c:a8:
8c:cf:4e:95:cf:95:e4:88:0f:41:29:41:0c:ad:df:bf:c0:46:
8a:3f:84:c5:42:f8:3a:98:e0:d3:23:9d:78:ac:58:a9:04:a2:
39:b6:c0:0d:6e:5a:6b:1c:93:14:9a:b7:1f:80:e9:12:a8:77:
44:05:e6:90:6f:59:ed:bc:79:0f:ac:c2:f3:78:6d:5b:d4:8a:
d7:76:1b:33:a1:0c:e2:5c:82:bd:f9:e7:82:68:46:96:e3:60:
09:ad:02:82:78:e5:6e:b2:7a:aa:af:7c:91:29:51:8b:70:a1:
9c:40:88:31:01:8b:9e:27:74:6b:b6:ad:f5:0e:2f:74:bb:92:
58:ea:ec:d2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUQBNIeHIP0uo4D5k0i10gdOdPSowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTIwMDUwMTBaFw0yNTA4MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDEzZmIxMTQzNTMyYWJjY2RhZDQyOWU4NTRhMTI4ZmUyNTA0ZTExZmNhNjhj
MGJkY2IwZTM1YTAwMzlmZDEyZmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANvdtROkWTiVgDr6p9xJvkdTnvlVXKUbqkTCyX75W5b19o6/Dm0/9X+29Scj
1HzUzRq1t+dMJJmQ4kEcgVvZ5g01RIaTWYJQN+7zep1PNqcys6xSkCeI770o0uzT
Yof/UXuQrauLG3Sfvfg0cgDbgTGGGX5bvRPxYRyKa8xMeGd0sSJ74mYd001rOq2u
2JJNlarVcU7xsdW11HyLqR9MzC/L8rBWH3AuB6yR8OZzFuLwCLiN+LlFaqZcznYp
PehNKj766ov1noAbbggnaLnXmadkrHqbE71+Pq6wDfOhF2Jx94pVhERg2JoahVGO
QI+iyp2RJ6vlPngP6V54rqxVYrMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ93LlQ
YagFUBFX7of9HNcAlrH1FDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2I1YzY4ZDMtZTVhMS00NzQyLWE5MGMtNTliMWUyOWNmYzAwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G/A
MA0GCSqGSIb3DQEBCwUAA4IBAQBXI04TIZzJHmehXSlNz05PobX3kBNg4f24TAwT
sEV6Bg9sFLByJCR75bHpYZjcPzbzRpuSqi8BNzIYFGTbpgw8u/9ImxNwYnZLAAsR
0oA1D6ee9lxS4aOhpe+IFCk5HW9W3GyqQ44lC9dReYW7gWm3TY16Iy89gI7Iq4xT
DKiMz06Vz5XkiA9BKUEMrd+/wEaKP4TFQvg6mODTI514rFipBKI5tsANblprHJMU
mrcfgOkSqHdEBeaQb1ntvHkPrMLzeG1b1IrXdhszoQziXIK9+eeCaEaW42AJrQKC
eOVusnqqr3yRKVGLcKGcQIgxAYueJ3Rrtq31Di90u5JY6uzS
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:32:47 2025 by rpki-client