Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a025e69-9e3e-460c-9734-42e9bd14485c.roa
File: 7a025e69-9e3e-460c-9734-42e9bd14485c.roa (raw, json)
Hash identifier: a6/LY0pNoqQmsQnYzg0RKKViseIsNvGA3fOWPDMgzCg=
Subject key identifier: E8:1A:F7:19:A4:C0:A9:2A:75:4A:4C:E5:92:3F:2C:FD:33:2A:D2:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2B13F11727AAEE880992F84AB0DDA59811A97264
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a025e69-9e3e-460c-9734-42e9bd14485c.roa
Signing time: Tue 01 Jul 2025 15:10:58 +0000
ROA not before: Tue 01 Jul 2025 15:10:58 +0000
ROA not after: Tue 05 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:13:f1:17:27:aa:ee:88:09:92:f8:4a:b0:dd:a5:98:11:a9:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 1 15:10:58 2025 GMT
Not After : Aug 5 23:59:59 2025 GMT
Subject: serialNumber=b7ede85108bcc3c24045a8b1e58e41d59df002c8d5fa8d08e1f5a57c86841a4c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:e0:0b:b5:4b:c1:76:00:7f:cc:27:3a:78:
32:f2:8e:f6:13:44:5b:bb:bd:f8:5a:29:f7:d1:69:
69:2c:2b:6a:eb:44:91:56:38:a8:29:5d:be:ef:4c:
ce:76:49:b8:c0:28:bc:e1:02:a1:2e:83:7d:f7:3b:
6f:8c:95:2a:07:51:d1:45:3b:18:9e:9c:db:94:49:
7e:70:91:e8:aa:04:e7:fa:53:75:f7:ed:5e:f1:b7:
6a:ea:41:fb:60:ac:78:0d:85:85:53:a8:43:30:3c:
e7:2e:56:84:e2:6f:80:17:04:d8:ac:3b:57:58:e8:
b2:82:7b:da:07:74:b2:db:81:1d:16:dd:65:15:03:
0a:8d:d7:69:6a:46:fc:62:4b:a3:a3:ab:0b:e7:dc:
57:80:e7:f0:f9:af:57:c4:38:b8:aa:43:45:99:69:
6b:f3:1f:5d:86:e7:4c:57:29:82:0e:de:d7:1b:25:
78:c1:e0:aa:6c:38:8a:95:cc:3d:da:b9:58:8c:ee:
a5:bb:bd:a8:48:21:6d:bc:45:10:5d:73:e1:9f:11:
70:7c:96:c9:6f:f4:a2:8a:09:9d:63:d9:dd:f3:5a:
68:a7:05:f6:6c:33:49:91:91:27:28:4e:12:ba:52:
3b:b5:2b:60:9d:d3:e6:09:04:5c:99:33:9b:6a:84:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1A:F7:19:A4:C0:A9:2A:75:4A:4C:E5:92:3F:2C:FD:33:2A:D2:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a025e69-9e3e-460c-9734-42e9bd14485c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6000::/40
Signature Algorithm: sha256WithRSAEncryption
b1:e5:39:54:56:f1:d4:5f:07:28:47:dd:31:5d:01:ec:14:2b:
13:2d:60:2c:22:85:9b:59:c7:02:5d:b3:da:49:06:86:09:b6:
cf:64:bb:31:2a:a6:19:6b:bd:6a:c4:06:bb:03:3e:ea:09:7e:
c3:a3:9c:38:c2:9e:44:80:9a:59:05:0b:c3:20:2d:6d:87:74:
af:62:30:55:35:15:e1:40:ae:27:81:d7:52:92:f1:14:65:7e:
a3:ed:4f:f9:2b:bf:76:fe:45:fa:1f:32:a9:21:68:c4:2e:86:
0d:14:bd:27:58:e3:69:8b:c5:86:1e:f5:b5:26:38:71:94:63:
77:ce:76:c9:4e:50:69:4c:fb:b9:5a:0e:67:13:4d:08:b4:cc:
6a:00:16:8c:93:ea:71:14:7f:33:ef:26:53:db:33:43:1f:41:
54:b9:6a:7d:43:f8:30:51:9e:81:e7:98:97:9c:82:40:f5:63:
94:a2:75:c3:b1:b2:54:01:d1:fd:a1:ba:c0:ca:70:36:7b:af:
cc:ed:75:79:fd:4e:67:f1:19:ee:a5:7f:b5:05:10:d8:58:2d:
88:a0:54:b1:85:a1:94:a2:cd:bc:97:5c:80:30:ba:34:82:3e:
c5:33:6e:87:71:e9:25:e6:d5:72:7b:1d:c7:9f:63:03:67:1b:
37:09:55:ff
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKxPxFyeq7ogJkvhKsN2lmBGpcmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MDExNTEwNThaFw0yNTA4MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGI3ZWRlODUxMDhiY2MzYzI0MDQ1YThiMWU1OGU0MWQ1OWRmMDAyYzhkNWZh
OGQwOGUxZjVhNTdjODY4NDFhNGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOQa4Au1S8F2AH/MJzp4MvKO9hNEW7u9+Fop99FpaSwrautEkVY4qCldvu9M
znZJuMAovOECoS6Dffc7b4yVKgdR0UU7GJ6c25RJfnCR6KoE5/pTdfftXvG3aupB
+2CseA2FhVOoQzA85y5WhOJvgBcE2Kw7V1josoJ72gd0stuBHRbdZRUDCo3XaWpG
/GJLo6OrC+fcV4Dn8PmvV8Q4uKpDRZlpa/MfXYbnTFcpgg7e1xsleMHgqmw4ipXM
Pdq5WIzupbu9qEghbbxFEF1z4Z8RcHyWyW/0oooJnWPZ3fNaaKcF9mwzSZGRJyhO
ErpSO7UrYJ3T5gkEXJkzm2qER48CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBToGvcZ
pMCpKnVKTOWSPyz9MyrS5TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2EwMjVlNjktOWUzZS00NjBjLTk3MzQtNDJlOWJkMTQ0ODVjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DBg
MA0GCSqGSIb3DQEBCwUAA4IBAQCx5TlUVvHUXwcoR90xXQHsFCsTLWAsIoWbWccC
XbPaSQaGCbbPZLsxKqYZa71qxAa7Az7qCX7Do5w4wp5EgJpZBQvDIC1th3SvYjBV
NRXhQK4ngddSkvEUZX6j7U/5K792/kX6HzKpIWjELoYNFL0nWONpi8WGHvW1Jjhx
lGN3znbJTlBpTPu5Wg5nE00ItMxqABaMk+pxFH8z7yZT2zNDH0FUuWp9Q/gwUZ6B
55iXnIJA9WOUonXDsbJUAdH9obrAynA2e6/M7XV5/U5n8RnupX+1BRDYWC2IoFSx
haGUos28l1yAMLo0gj7FM26Hcekl5tVyex3Hn2MDZxs3CVX/
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:59:48 2025 by rpki-client