Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
File: 904a13d7-baa1-4bc7-b805-601d0b998680.roa (raw, json)
Hash identifier: Go+dsTprHQ1mzKLuWTtMIzjeYD1ZsAQvUEGV0tpuqmc=
Subject key identifier: DA:47:9E:28:10:FA:A9:2C:15:61:B8:34:C1:5D:E5:3A:50:BF:22:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B3E89063EF72FE02773E03E55B7BE968756A48F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
Signing time: Fri 11 Jul 2025 20:21:42 +0000
ROA not before: Fri 11 Jul 2025 20:21:42 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3e:89:06:3e:f7:2f:e0:27:73:e0:3e:55:b7:be:96:87:56:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:21:42 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=6b04cb146a8d8b7e6e2a235dd377475e9c8adb7438efb9009cc6801defec24c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:47:ac:33:ff:1f:b3:2a:d6:be:bf:1d:72:
ce:02:14:f5:f1:73:19:a1:b4:4f:5d:fb:d2:6f:d5:
ea:c9:be:11:01:ac:b6:2e:4b:9a:a0:d6:6d:12:8a:
71:51:6d:4b:b9:e4:92:92:b5:28:8a:f5:b0:37:62:
eb:f5:b6:e6:60:8e:73:70:33:4d:88:de:16:12:ac:
9a:f1:cf:21:0e:47:75:88:61:a2:2e:b4:26:9b:6f:
a4:28:a2:dd:ea:b8:1d:23:7a:05:09:69:02:6b:37:
a6:56:30:8c:37:a8:04:1a:98:0f:b8:c9:17:79:83:
a0:23:65:e0:f4:8d:23:94:c3:b6:d5:81:9b:52:2f:
10:62:32:22:c1:5d:14:23:51:bb:a5:8f:4f:bc:68:
bb:ee:44:55:45:de:cb:9b:e1:3a:10:22:ee:f3:dd:
ce:39:e9:b3:f6:36:09:19:52:2e:73:d8:32:68:af:
75:08:0c:08:e1:39:88:ba:2e:d0:e4:10:0e:ba:4f:
93:45:c8:6c:86:d2:c6:67:dc:55:79:a9:fa:06:da:
bf:a9:b0:5e:4c:fe:83:4b:7d:0f:7e:24:53:57:e9:
59:3f:f4:db:3e:46:f9:2d:bc:cd:14:66:ef:30:4e:
c6:b4:5c:e2:ad:56:1c:53:9e:1f:28:4c:d6:43:4d:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:9E:28:10:FA:A9:2C:15:61:B8:34:C1:5D:E5:3A:50:BF:22:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:8000::/40
Signature Algorithm: sha256WithRSAEncryption
b3:fd:c5:8b:bf:54:ff:11:ca:c5:c3:8b:fd:e9:13:b2:b7:c6:
cb:ab:1f:ca:01:d3:fd:5b:52:0a:95:3f:2b:47:67:d3:83:6c:
28:e1:0e:1f:ce:fb:73:01:37:d9:00:7e:bb:00:30:3f:fb:e4:
3b:2a:90:47:1c:1d:d0:7c:80:45:19:8e:34:a5:84:13:56:2a:
43:26:5a:21:26:75:1a:d6:a1:85:da:18:f0:ce:f1:40:b6:7c:
29:6a:88:c4:0c:11:1a:90:be:86:58:62:b2:10:c5:da:c6:42:
4a:94:9d:be:74:0c:d8:08:99:9e:8c:de:97:ff:fa:65:49:cf:
b9:6e:d0:49:63:c8:76:91:8e:56:bf:1f:a3:61:e6:4f:2a:64:
09:02:84:45:c4:76:c7:1c:e9:0a:f2:7c:55:2a:92:fc:85:5f:
1c:f0:e8:a5:a7:d5:a3:52:16:95:fd:58:ea:36:f5:0b:b2:53:
59:0d:32:41:ab:de:e7:73:86:31:ed:37:98:29:83:cb:dc:f6:
86:65:20:40:6d:52:49:27:e4:cf:75:49:7a:e9:cf:05:77:b2:
74:d2:5f:4e:7d:58:52:99:54:d4:63:b7:2e:4e:87:ba:7e:32:
f3:48:b4:e6:fa:79:69:d0:8d:23:5e:6e:8b:b6:82:c7:64:d1:
25:dc:65:cc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCz6JBj73L+Anc+A+Vbe+lodWpI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDIxNDJaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDZiMDRjYjE0NmE4ZDhiN2U2ZTJhMjM1ZGQzNzc0NzVlOWM4YWRiNzQzOGVm
YjkwMDljYzY4MDFkZWZlYzI0YzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANYbR6wz/x+zKta+vx1yzgIU9fFzGaG0T1370m/V6sm+EQGsti5LmqDWbRKK
cVFtS7nkkpK1KIr1sDdi6/W25mCOc3AzTYjeFhKsmvHPIQ5HdYhhoi60JptvpCii
3eq4HSN6BQlpAms3plYwjDeoBBqYD7jJF3mDoCNl4PSNI5TDttWBm1IvEGIyIsFd
FCNRu6WPT7xou+5EVUXey5vhOhAi7vPdzjnps/Y2CRlSLnPYMmivdQgMCOE5iLou
0OQQDrpPk0XIbIbSxmfcVXmp+gbav6mwXkz+g0t9D34kU1fpWT/02z5G+S28zRRm
7zBOxrRc4q1WHFOeHyhM1kNNuC8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTaR54o
EPqpLBVhuDTBXeU6UL8iCDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTA0YTEzZDctYmFhMS00YmM3LWI4MDUtNjAxZDBiOTk4NjgwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FCA
MA0GCSqGSIb3DQEBCwUAA4IBAQCz/cWLv1T/EcrFw4v96ROyt8bLqx/KAdP9W1IK
lT8rR2fTg2wo4Q4fzvtzATfZAH67ADA/++Q7KpBHHB3QfIBFGY40pYQTVipDJloh
JnUa1qGF2hjwzvFAtnwpaojEDBEakL6GWGKyEMXaxkJKlJ2+dAzYCJmejN6X//pl
Sc+5btBJY8h2kY5Wvx+jYeZPKmQJAoRFxHbHHOkK8nxVKpL8hV8c8Oilp9WjUhaV
/VjqNvULslNZDTJBq97nc4Yx7TeYKYPL3PaGZSBAbVJJJ+TPdUl66c8Fd7J00l9O
fVhSmVTUY7cuToe6fjLzSLTm+nlp0I0jXm6LtoLHZNEl3GXM
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:44:54 2025 by rpki-client