Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
File: 76526233-4062-463b-bfd0-bbe1d12891fa.roa (raw, json)
Hash identifier: hskoyiC44bM0QDBRbX3rUESZJCQookggYPS9eRqKpuc=
Subject key identifier: 78:38:4A:9F:42:56:93:C1:ED:10:18:9C:D9:B0:DA:52:D9:B2:61:06
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76A07F9F30306200B3F514944EF5600169EB0633
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
Signing time: Fri 04 Jul 2025 18:30:18 +0000
ROA not before: Fri 04 Jul 2025 18:30:18 +0000
ROA not after: Fri 08 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a0:7f:9f:30:30:62:00:b3:f5:14:94:4e:f5:60:01:69:eb:06:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 4 18:30:18 2025 GMT
Not After : Aug 8 23:59:59 2025 GMT
Subject: serialNumber=a836018809c4b9a4181ae4b8b8d7ce19a7ebdad5721396ae945dffbd6febe8f8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:d0:2a:dd:5c:db:7a:5e:29:df:7b:39:7f:
df:1c:d6:f6:26:99:bc:bd:09:72:1f:7e:36:ed:77:
5a:6b:d2:99:26:7f:be:d3:8d:00:32:76:6a:93:6a:
28:93:a2:8d:19:a2:ea:75:97:d7:72:bc:6e:49:55:
2b:57:e7:f9:9f:91:89:cd:45:88:7b:0a:37:f6:ce:
93:b6:b5:87:22:e4:81:ef:26:b2:48:e4:a6:ba:e4:
70:e0:bb:29:dc:06:24:64:34:8c:94:19:52:c8:ab:
1f:ec:6c:a2:f0:f0:c3:17:34:0c:68:84:e1:5e:8c:
03:56:d2:07:91:c8:46:2f:fb:83:47:05:cc:8b:c0:
59:61:b5:3e:4d:c1:2a:d3:c7:d8:5c:81:29:9a:68:
63:97:08:14:57:b6:79:55:78:44:11:10:83:b2:07:
83:1a:a8:2f:92:29:17:63:bd:58:38:98:67:39:3f:
b9:2f:78:d2:77:7b:30:4c:f1:ef:33:6e:3a:87:17:
f7:b8:6e:04:6f:46:94:e8:e2:17:2f:a1:50:93:2d:
34:3e:4d:41:d6:1d:1f:bd:82:00:f0:2a:0c:9e:a2:
72:6f:35:f1:d2:e4:50:e3:83:1d:fe:57:02:b1:89:
d4:58:e2:53:36:0a:7f:d7:ca:f3:fc:ea:23:c1:f7:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:38:4A:9F:42:56:93:C1:ED:10:18:9C:D9:B0:DA:52:D9:B2:61:06
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/76526233-4062-463b-bfd0-bbe1d12891fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4010::/48
Signature Algorithm: sha256WithRSAEncryption
67:59:cd:55:7d:d3:cf:0a:c8:38:74:0f:be:37:e5:62:46:e2:
f4:75:ea:27:86:1d:7b:5f:2a:2f:73:99:55:7e:39:c4:34:d0:
fc:26:0e:ee:64:48:c9:4b:b3:b6:ed:68:97:f3:e6:da:39:02:
1a:e9:e7:a7:a0:2b:e9:e1:88:06:a2:ae:c0:31:41:ee:8b:c3:
19:09:01:ac:55:53:8b:5a:07:cc:92:0d:89:5b:f0:c4:4d:fd:
54:fd:ff:16:76:38:d5:08:52:f1:34:31:5e:4d:a7:c3:e0:44:
73:38:24:8f:61:8a:82:05:4b:ba:05:9f:1c:83:e0:75:00:d4:
cb:5d:49:88:c6:58:64:b5:4a:b9:1a:0b:bf:fe:cc:91:1e:2b:
11:7a:f9:d3:ad:09:77:00:1f:0d:47:99:f3:06:3f:d7:9b:83:
dc:62:23:53:09:6a:64:2c:59:61:23:bc:dd:3b:11:e7:0d:3f:
dd:df:6f:09:67:9d:c0:12:3d:d4:bf:ae:4b:f0:bb:8a:83:74:
36:57:ad:05:4b:05:e8:8f:d9:33:c9:b6:6d:97:ef:ac:ef:5a:
95:06:fb:5f:87:eb:20:da:14:b1:d7:38:69:13:9a:28:5f:a4:
58:b5:e8:e8:74:7d:b3:a4:62:cd:0b:9d:84:b0:8e:a8:13:dc:
ff:59:25:37
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUdqB/nzAwYgCz9RSUTvVgAWnrBjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MDQxODMwMThaFw0yNTA4MDgyMzU5NTlaMHoxSTBHBgNV
BAUTQGE4MzYwMTg4MDljNGI5YTQxODFhZTRiOGI4ZDdjZTE5YTdlYmRhZDU3MjEz
OTZhZTk0NWRmZmJkNmZlYmU4ZjgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMNh0CrdXNt6Xinfezl/3xzW9iaZvL0Jch9+Nu13WmvSmSZ/vtONADJ2apNq
KJOijRmi6nWX13K8bklVK1fn+Z+Ric1FiHsKN/bOk7a1hyLkge8mskjkprrkcOC7
KdwGJGQ0jJQZUsirH+xsovDwwxc0DGiE4V6MA1bSB5HIRi/7g0cFzIvAWWG1Pk3B
KtPH2FyBKZpoY5cIFFe2eVV4RBEQg7IHgxqoL5IpF2O9WDiYZzk/uS940nd7MEzx
7zNuOocX97huBG9GlOjiFy+hUJMtND5NQdYdH72CAPAqDJ6icm818dLkUOODHf5X
ArGJ1FjiUzYKf9fK8/zqI8H3lWkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR4OEqf
QlaTwe0QGJzZsNpS2bJhBjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NzY1MjYyMzMtNDA2Mi00NjNiLWJmZDAtYmJlMWQxMjg5MWZhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ABA
EDANBgkqhkiG9w0BAQsFAAOCAQEAZ1nNVX3TzwrIOHQPvjflYkbi9HXqJ4Yde18q
L3OZVX45xDTQ/CYO7mRIyUuztu1ol/Pm2jkCGunnp6Ar6eGIBqKuwDFB7ovDGQkB
rFVTi1oHzJINiVvwxE39VP3/FnY41QhS8TQxXk2nw+BEczgkj2GKggVLugWfHIPg
dQDUy11JiMZYZLVKuRoLv/7MkR4rEXr5060JdwAfDUeZ8wY/15uD3GIjUwlqZCxZ
YSO83TsR5w0/3d9vCWedwBI91L+uS/C7ioN0NletBUsF6I/ZM8m2bZfvrO9alQb7
X4frINoUsdc4aROaKF+kWLXo6HR9s6RizQudhLCOqBPc/1klNw==
-----END CERTIFICATE-----
Generated at Tue Jul 22 22:23:25 2025 by rpki-client