Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
File: 834ff2b2-55b6-4011-9d9b-451a7311335d.roa (raw, json)
Hash identifier: +KVGVsZTU7umfn0MpD4I+07kuWxe2r3ZYaB8Pm4WaHo=
Subject key identifier: ED:22:71:80:15:89:FE:85:C1:5D:23:ED:FA:1D:E0:8F:0B:2E:1A:A9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 587C96D939644E3A5295850329187EB5B06F2E59
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
Signing time: Fri 11 Jul 2025 20:11:03 +0000
ROA not before: Fri 11 Jul 2025 20:11:03 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7c:96:d9:39:64:4e:3a:52:95:85:03:29:18:7e:b5:b0:6f:2e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:11:03 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=66db4690ebe8233957cc2eabe3543422abed4d46780202db2ba54bd2b15b4f08, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:31:09:99:ae:93:16:f1:5c:c4:61:35:d3:
bf:cb:4d:f6:38:0c:bc:11:5e:c4:4e:6d:97:78:55:
8a:3e:70:7a:4f:f9:45:bc:69:16:0a:4f:d0:49:42:
d7:87:0f:40:48:80:e9:e5:74:a7:b6:0f:0e:22:21:
9a:66:a0:5a:08:25:99:35:bf:58:27:da:c1:f3:40:
b6:5b:18:00:d4:cc:cd:6d:dd:d5:90:9d:36:59:c0:
8f:c7:ef:43:e2:d1:6f:ce:15:3b:3c:20:1d:1f:c0:
64:88:23:db:a7:14:56:3e:14:26:67:d6:8f:0d:df:
bf:69:ff:83:4a:fe:d3:a5:b9:b9:cf:f1:65:6e:dc:
32:05:cd:ad:00:72:3a:c9:8f:28:b4:c1:50:6b:3d:
6b:d4:2f:39:c6:f5:65:49:3f:0a:74:fc:7b:be:e3:
a5:9e:64:3c:8d:8f:08:ec:c8:ea:24:c3:88:b2:ec:
26:e8:67:b2:fe:a4:20:7b:0d:d0:25:8d:aa:40:f0:
ca:ad:73:6d:1d:3d:17:cb:4a:5e:2d:bc:bf:6b:73:
4a:41:57:a1:1d:0a:00:41:70:e1:88:8b:24:ef:5f:
99:ae:77:84:44:c7:65:eb:ee:08:b5:27:6b:ca:ac:
a2:e6:6d:fb:d7:1d:f8:d2:de:48:24:09:e6:b3:fe:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:22:71:80:15:89:FE:85:C1:5D:23:ED:FA:1D:E0:8F:0B:2E:1A:A9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/834ff2b2-55b6-4011-9d9b-451a7311335d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:b000::/40
Signature Algorithm: sha256WithRSAEncryption
c3:1f:ce:f7:a8:72:58:52:45:b6:2d:5c:a1:1d:22:49:56:84:
39:d4:0d:7a:c1:1f:6e:a4:a9:23:d2:48:13:4b:24:52:8b:5f:
ba:b5:c7:a1:74:0e:ff:b8:dc:b9:a6:90:a3:53:eb:a4:5c:bd:
9c:5b:8b:76:44:4a:ee:52:0e:20:bf:18:1f:a4:56:38:de:05:
a3:2a:59:22:13:77:7d:57:b1:03:79:80:2b:21:cd:a4:6f:53:
f9:fa:44:b6:87:72:38:da:e5:19:de:ca:ae:de:d7:b2:d6:26:
15:bb:27:92:98:0b:b8:6c:ca:37:d4:e9:44:08:3b:fa:e2:b2:
be:fe:04:4c:c6:a7:ab:1a:e0:b6:c3:a0:47:be:e6:ed:7a:41:
9e:79:08:99:29:2d:34:9b:a9:ff:80:9b:91:8e:ea:16:79:cc:
68:78:11:50:63:53:03:02:62:0d:79:b0:d9:87:c5:be:6e:49:
41:ca:ed:60:09:a5:b3:fe:11:9c:9a:d8:ef:a2:96:dc:f1:6f:
44:8c:d1:14:6c:a6:a0:ee:08:cc:b5:8c:4e:8e:64:7b:eb:39:
fa:0a:00:c8:ae:f9:8f:60:73:7b:2e:dc:38:e0:90:eb:31:30:
39:a9:c5:12:c5:de:25:ba:29:87:92:e7:e5:2e:4d:2c:8b:44:
52:1d:46:88
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWHyW2TlkTjpSlYUDKRh+tbBvLlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDExMDNaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDY2ZGI0NjkwZWJlODIzMzk1N2NjMmVhYmUzNTQzNDIyYWJlZDRkNDY3ODAy
MDJkYjJiYTU0YmQyYjE1YjRmMDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANdJMQmZrpMW8VzEYTXTv8tN9jgMvBFexE5tl3hVij5wek/5RbxpFgpP0ElC
14cPQEiA6eV0p7YPDiIhmmagWgglmTW/WCfawfNAtlsYANTMzW3d1ZCdNlnAj8fv
Q+LRb84VOzwgHR/AZIgj26cUVj4UJmfWjw3fv2n/g0r+06W5uc/xZW7cMgXNrQBy
OsmPKLTBUGs9a9QvOcb1ZUk/CnT8e77jpZ5kPI2PCOzI6iTDiLLsJuhnsv6kIHsN
0CWNqkDwyq1zbR09F8tKXi28v2tzSkFXoR0KAEFw4YiLJO9fma53hETHZevuCLUn
a8qsouZt+9cd+NLeSCQJ5rP+t1cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTtInGA
FYn+hcFdI+36HeCPCy4aqTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODM0ZmYyYjItNTViNi00MDExLTlkOWItNDUxYTczMTEzMzVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Daw
MA0GCSqGSIb3DQEBCwUAA4IBAQDDH873qHJYUkW2LVyhHSJJVoQ51A16wR9upKkj
0kgTSyRSi1+6tcehdA7/uNy5ppCjU+ukXL2cW4t2REruUg4gvxgfpFY43gWjKlki
E3d9V7EDeYArIc2kb1P5+kS2h3I42uUZ3squ3tey1iYVuyeSmAu4bMo31OlECDv6
4rK+/gRMxqerGuC2w6BHvubtekGeeQiZKS00m6n/gJuRjuoWecxoeBFQY1MDAmIN
ebDZh8W+bklByu1gCaWz/hGcmtjvopbc8W9EjNEUbKag7gjMtYxOjmR76zn6CgDI
rvmPYHN7Ltw44JDrMTA5qcUSxd4luimHkuflLk0si0RSHUaI
-----END CERTIFICATE-----
Generated at Tue Jul 22 22:24:12 2025 by rpki-client