Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53fdd354-0eb8-404b-8203-b5e8211b2b7e.roa
File: 53fdd354-0eb8-404b-8203-b5e8211b2b7e.roa (raw, json)
Hash identifier: TxyKmGgNt/8sg0RPHjRkijRVHD17BVUYpxCweNWxZKY=
Subject key identifier: 15:81:D3:72:71:84:21:A5:D4:EC:FC:4D:CC:38:34:59:F8:EB:47:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A6C887096C4CECDC58DDA59777FC5327F280782
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53fdd354-0eb8-404b-8203-b5e8211b2b7e.roa
Signing time: Tue 01 Jul 2025 15:10:44 +0000
ROA not before: Tue 01 Jul 2025 15:10:44 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:6c:88:70:96:c4:ce:cd:c5:8d:da:59:77:7f:c5:32:7f:28:07:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:10:44 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=a443a59f210e6fa462f36b98bdcfe2dd9076b01529eba01e7b34f04e74a1655b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:e2:a3:d7:61:03:e7:ea:35:c6:5b:2a:b0:
53:e3:9a:5c:43:91:61:a8:2a:14:6e:cd:7b:0a:b3:
e0:a0:22:33:0c:53:b2:20:77:74:ba:c9:89:80:5e:
cf:0c:4e:0a:59:d5:4c:3b:d8:46:1f:7a:36:d1:92:
3a:6d:70:64:ee:fb:e2:47:8a:1e:b3:d7:13:d5:ea:
7f:8e:64:12:35:53:f1:c4:c5:78:22:62:1c:d1:02:
a1:44:2b:02:e9:b7:ae:05:cb:da:97:fc:7a:fb:7b:
3c:d9:29:ce:33:11:88:42:da:93:c1:e0:83:50:cb:
09:34:1d:c9:fa:7b:11:37:b6:f4:58:95:cb:cc:4f:
81:d0:3f:08:f3:f6:6a:3e:07:a9:64:3e:9a:09:c3:
27:f8:08:d8:20:aa:93:ad:94:ee:21:ee:6a:da:fc:
2c:87:5a:9c:d5:e1:85:43:f2:b3:f4:42:0b:19:09:
0a:7f:db:1d:a6:04:63:2c:55:b2:b9:8e:73:e9:95:
e1:a0:6c:c5:42:43:6b:73:bb:8b:fd:85:94:97:fc:
07:01:0b:19:0b:fc:1e:ad:3b:7e:e6:79:16:93:9c:
66:7f:10:08:4b:11:6d:d0:fd:f1:f8:2b:89:af:85:
d3:ec:0e:85:ad:71:2f:f6:10:1f:bd:27:b8:1b:75:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:81:D3:72:71:84:21:A5:D4:EC:FC:4D:CC:38:34:59:F8:EB:47:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/53fdd354-0eb8-404b-8203-b5e8211b2b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b3:06:70:d5:d0:2a:ef:37:6f:ff:90:4e:d1:98:d1:e1:8f:1d:
24:58:73:4e:ac:29:e5:a1:f4:8c:d5:8a:f3:e3:7d:e9:d6:fd:
b2:2d:72:f3:9a:ed:b2:64:ba:25:84:10:15:86:94:35:4e:89:
bf:46:29:db:cd:d5:2f:fa:02:b5:f6:db:06:05:18:d3:c7:9f:
2c:99:d9:d3:b6:33:bd:50:d9:aa:9c:4f:e7:2c:fc:c6:b0:ec:
41:ea:53:f0:fe:33:5f:eb:e7:a5:bd:bd:c7:1c:a9:20:19:be:
13:af:c9:37:ff:27:d9:73:f3:da:8c:92:7a:94:58:5b:9d:79:
e4:47:4f:6a:80:bc:3c:32:82:34:3a:db:1d:39:f9:94:61:45:
40:90:1d:25:4a:31:88:9b:47:52:47:2c:46:2e:2d:84:31:42:
36:dc:32:8e:54:67:eb:6e:07:20:f1:c2:45:ca:91:78:d7:d5:
e9:81:c7:3e:78:6b:c0:e3:cc:37:5e:ca:01:81:ec:24:b1:91:
0e:17:7b:7d:b4:fe:cc:f4:3a:0d:6f:15:9e:bd:6b:02:c8:ef:
8b:8a:66:6c:94:ad:59:1f:02:67:19:02:ab:1e:cd:a1:0f:56:
76:f2:98:36:39:68:59:d0:71:2e:82:94:2e:2d:07:3b:db:c1:
80:79:7c:27
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSmyIcJbEzs3FjdpZd3/FMn8oB4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MDExNTEwNDRaFw0yNTA4MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGE0NDNhNTlmMjEwZTZmYTQ2MmYzNmI5OGJkY2ZlMmRkOTA3NmIwMTUyOWVi
YTAxZTdiMzRmMDRlNzRhMTY1NWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOaH4qPXYQPn6jXGWyqwU+OaXEORYagqFG7Newqz4KAiMwxTsiB3dLrJiYBe
zwxOClnVTDvYRh96NtGSOm1wZO774keKHrPXE9Xqf45kEjVT8cTFeCJiHNECoUQr
Aum3rgXL2pf8evt7PNkpzjMRiELak8Hgg1DLCTQdyfp7ETe29FiVy8xPgdA/CPP2
aj4HqWQ+mgnDJ/gI2CCqk62U7iHuatr8LIdanNXhhUPys/RCCxkJCn/bHaYEYyxV
srmOc+mV4aBsxUJDa3O7i/2FlJf8BwELGQv8Hq07fuZ5FpOcZn8QCEsRbdD98fgr
ia+F0+wOha1xL/YQH70nuBt1WnUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQVgdNy
cYQhpdTs/E3MODRZ+OtHVDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTNmZGQzNTQtMGViOC00MDRiLTgyMDMtYjVlODIxMWIyYjdlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HYg
MA0GCSqGSIb3DQEBCwUAA4IBAQCzBnDV0CrvN2//kE7RmNHhjx0kWHNOrCnlofSM
1Yrz433p1v2yLXLzmu2yZLolhBAVhpQ1Tom/RinbzdUv+gK19tsGBRjTx58smdnT
tjO9UNmqnE/nLPzGsOxB6lPw/jNf6+elvb3HHKkgGb4Tr8k3/yfZc/PajJJ6lFhb
nXnkR09qgLw8MoI0OtsdOfmUYUVAkB0lSjGIm0dSRyxGLi2EMUI23DKOVGfrbgcg
8cJFypF419Xpgcc+eGvA48w3XsoBgewksZEOF3t9tP7M9DoNbxWevWsCyO+LimZs
lK1ZHwJnGQKrHs2hD1Z28pg2OWhZ0HEugpQuLQc728GAeXwn
-----END CERTIFICATE-----
Generated at Wed Jul 23 03:46:33 2025 by rpki-client