Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
File: 4b12830e-a860-4a14-b52f-5284626c1a96.roa (raw, json)
Hash identifier: j0Jx7SBPlkLI1lHCKEseAp1sKhE40DeWr+WkJ4hho2Y=
Subject key identifier: FC:95:02:73:7F:CA:31:8B:9C:4A:A0:CC:A4:38:F3:65:85:D1:F2:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A00187B859172530BB6424B5D8BDAB08D285E73
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
Signing time: Tue 01 Jul 2025 15:00:46 +0000
ROA not before: Tue 01 Jul 2025 15:00:46 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:00:18:7b:85:91:72:53:0b:b6:42:4b:5d:8b:da:b0:8d:28:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:00:46 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=f07c144cabf8ba9d6b9d7d259cdd0af4062bb84a6c516388d1c3d74d6a39d931, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:23:73:d2:7c:b8:3b:53:ca:52:fa:8c:91:
93:c3:d5:cf:89:e4:67:f1:11:45:cc:d9:d1:27:46:
8b:b7:ea:51:1c:64:70:e8:c7:c4:57:e7:d0:e6:e2:
f3:9e:ea:1d:3e:52:c9:85:36:e0:02:cf:95:06:00:
cd:b8:5d:89:89:ac:93:86:5a:f3:20:8d:e1:e1:b0:
ac:22:5b:b6:51:03:13:b9:fe:02:84:97:76:41:a7:
a6:45:9e:62:85:51:15:d3:de:d7:b1:7f:cb:58:95:
98:6c:57:e6:e5:70:b2:d3:29:0a:65:72:c2:d3:60:
ff:82:97:b3:43:19:12:99:79:93:be:2e:45:7c:3f:
5a:7b:ca:cd:60:47:4d:bd:4b:91:6d:13:39:f3:bc:
a7:61:cd:9e:ed:56:4a:54:5c:56:e5:a7:b3:ff:37:
b4:be:f0:21:b8:73:84:c7:3c:ba:48:36:93:bd:11:
40:35:7b:b2:02:ab:47:0d:b8:83:ff:f3:f6:c9:2a:
ae:04:61:2d:cb:9b:18:06:d9:1e:b1:d7:bb:bc:ab:
8b:4b:68:61:b5:e0:0e:51:77:0d:5c:10:d5:70:0f:
b5:9d:c2:1f:15:86:65:9c:60:2d:4c:d3:ee:df:64:
de:98:e9:f6:9f:9c:cc:86:86:53:2b:cd:be:4e:2b:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:95:02:73:7F:CA:31:8B:9C:4A:A0:CC:A4:38:F3:65:85:D1:F2:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b12830e-a860-4a14-b52f-5284626c1a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:a3:bc:65:5f:0a:49:58:3d:c0:ae:9f:ba:f5:f2:a0:9c:4a:
84:b6:d1:1b:c2:68:ec:d6:a3:84:77:d9:6d:65:c3:d7:2f:1a:
54:d4:cc:41:28:00:0b:e0:49:90:ec:d7:34:8b:e5:7a:26:62:
fe:bf:fc:b9:fe:4b:95:58:4c:46:0d:d1:7d:f5:54:f8:38:42:
50:26:4f:5d:aa:cb:bd:43:01:5c:a2:42:71:18:c4:b9:2d:fe:
89:d7:5f:18:66:16:0e:97:85:ce:e4:39:60:82:b4:3a:8d:24:
d8:ce:6d:89:3c:a6:32:61:22:d3:bc:c1:01:4f:f7:ca:04:bd:
15:fd:66:03:78:ce:9b:f7:88:6c:a9:c7:41:2b:53:19:b8:77:
5a:f1:42:76:71:9a:48:35:2f:b0:ea:3e:d1:9e:f6:86:3c:55:
36:4d:81:4a:31:67:0b:58:31:ee:c9:2a:ce:b8:d1:e0:80:d2:
20:b0:95:c0:bf:b7:6c:5e:50:3d:4d:af:15:51:de:bb:51:a0:
02:74:e2:6d:d9:c4:d5:13:86:3f:c0:01:70:fc:0e:da:64:c2:
0c:e6:62:2f:10:a5:fb:a1:23:ea:86:d4:44:13:59:43:39:fa:
60:8c:fe:2f:73:28:f0:f4:c8:a4:47:8d:e1:f3:75:b8:a2:69:
3e:60:fc:86
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUegAYe4WRclMLtkJLXYvasI0oXnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MDExNTAwNDZaFw0yNTA4MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGYwN2MxNDRjYWJmOGJhOWQ2YjlkN2QyNTljZGQwYWY0MDYyYmI4NGE2YzUx
NjM4OGQxYzNkNzRkNmEzOWQ5MzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMfHI3PSfLg7U8pS+oyRk8PVz4nkZ/ERRczZ0SdGi7fqURxkcOjHxFfn0Obi
857qHT5SyYU24ALPlQYAzbhdiYmsk4Za8yCN4eGwrCJbtlEDE7n+AoSXdkGnpkWe
YoVRFdPe17F/y1iVmGxX5uVwstMpCmVywtNg/4KXs0MZEpl5k74uRXw/WnvKzWBH
Tb1LkW0TOfO8p2HNnu1WSlRcVuWns/83tL7wIbhzhMc8ukg2k70RQDV7sgKrRw24
g//z9skqrgRhLcubGAbZHrHXu7yri0toYbXgDlF3DVwQ1XAPtZ3CHxWGZZxgLUzT
7t9k3pjp9p+czIaGUyvNvk4rt8kCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBT8lQJz
f8oxi5xKoMykOPNlhdHykzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGIxMjgzMGUtYTg2MC00YTE0LWI1MmYtNTI4NDYyNmMxYTk2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALAiMA0G
CSqGSIb3DQEBCwUAA4IBAQBuo7xlXwpJWD3Arp+69fKgnEqEttEbwmjs1qOEd9lt
ZcPXLxpU1MxBKAAL4EmQ7Nc0i+V6JmL+v/y5/kuVWExGDdF99VT4OEJQJk9dqsu9
QwFcokJxGMS5Lf6J118YZhYOl4XO5DlggrQ6jSTYzm2JPKYyYSLTvMEBT/fKBL0V
/WYDeM6b94hsqcdBK1MZuHda8UJ2cZpINS+w6j7RnvaGPFU2TYFKMWcLWDHuySrO
uNHggNIgsJXAv7dsXlA9Ta8VUd67UaACdOJt2cTVE4Y/wAFw/A7aZMIM5mIvEKX7
oSPqhtREE1lDOfpgjP4vcyjw9MikR43h83W4omk+YPyG
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:42:29 2025 by rpki-client