Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: mUeaJVj+F1IflZhDC+RWLSZZZBvT7RGBEQ2SL20xD2c=
Subject key identifier: C7:D8:E7:FA:65:A9:92:6F:EF:D6:DB:51:26:0A:23:A6:16:03:FF:94
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0ED5E987D332079EF119E12D452321CE453E4270
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Mon 14 Jul 2025 15:30:15 +0000
ROA not before: Mon 14 Jul 2025 15:30:15 +0000
ROA not after: Mon 18 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d5:e9:87:d3:32:07:9e:f1:19:e1:2d:45:23:21:ce:45:3e:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 14 15:30:15 2025 GMT
Not After : Aug 18 23:59:59 2025 GMT
Subject: serialNumber=fb8c200e48635d3cda048d36629aa7f99d729b59f2d3c3a32720d7fd3bd7d19e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:04:27:05:ea:d4:e1:99:22:38:5e:ac:01:
b7:4a:d6:d4:de:c4:f2:10:21:83:4c:0e:7c:58:be:
06:99:c3:eb:fc:e1:e2:58:45:d6:f5:c2:c2:a5:03:
8a:3a:53:62:ee:66:7e:62:c9:e6:31:44:c7:dd:5c:
22:d4:00:15:90:39:ac:aa:f4:a5:8e:65:c1:99:22:
02:fb:89:8a:85:36:53:a3:ba:7e:b2:6a:ed:91:7f:
cb:51:c9:6e:54:a4:21:1e:14:88:4f:d9:f1:5a:2e:
1e:52:66:31:3e:e1:bb:bc:98:18:0d:da:ae:dd:b7:
40:10:21:75:95:25:bb:80:9b:dc:b5:ab:77:fe:a4:
c5:51:13:1c:aa:ab:bd:fb:62:74:ef:4c:fc:c3:8e:
ff:8e:e0:7f:a9:96:8f:ef:9f:d5:50:03:e3:cc:64:
7f:f8:1c:4b:af:34:0a:02:22:dc:ce:d0:ca:e0:3f:
1e:34:fe:92:6a:60:df:34:c2:e0:f4:b7:96:08:05:
d6:e5:58:15:43:20:a3:1c:d4:c1:76:ad:2d:23:c3:
75:79:14:41:cc:13:1e:c3:92:84:e6:d2:1b:e7:66:
de:b2:fc:e4:6c:30:70:90:4e:16:27:cf:b4:9b:a8:
12:a3:e9:15:98:dd:44:b4:32:d6:c4:93:a4:ee:2f:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D8:E7:FA:65:A9:92:6F:EF:D6:DB:51:26:0A:23:A6:16:03:FF:94
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:42:f7:bf:a1:e1:46:9d:53:60:d6:44:e9:8a:f4:1d:03:15:
45:e8:dd:9b:44:43:dc:9e:f2:33:0e:14:83:df:c8:e0:e5:09:
71:a9:57:96:dd:7a:f7:c6:b8:74:81:c6:02:b5:12:65:ba:66:
06:d8:af:35:27:4a:0d:14:fc:d5:f6:e4:a6:ab:68:2c:27:a0:
66:9e:a9:f1:4e:69:22:30:7a:83:81:24:2a:e0:ec:79:57:bb:
e8:da:46:77:2d:91:e9:ef:66:2f:35:63:f0:83:2c:30:64:3f:
09:e6:1b:ce:27:1f:1b:c2:01:92:60:e7:85:0b:e6:13:d6:a2:
8a:83:61:41:a8:1b:77:54:57:36:e7:85:b5:df:6c:18:a6:87:
cc:d1:be:c1:0f:2b:39:5c:fc:1c:7f:f7:3e:eb:19:dc:ac:f9:
86:13:d5:94:ed:7d:cf:00:78:e0:ab:ab:d9:38:0a:02:41:5f:
3c:fd:c6:63:bc:65:c0:ce:74:a2:8b:d4:29:10:da:fb:86:94:
d7:d9:f2:bf:e8:10:2d:61:88:1d:ea:39:38:c4:5b:c9:71:54:
aa:0b:12:e8:38:76:f8:62:90:f8:aa:2c:ac:5e:2b:4b:12:4d:
0c:c9:25:48:ae:05:07:f8:7b:90:51:b3:ff:b1:3e:71:24:da:
7f:56:cb:31
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUDtXph9MyB57xGeEtRSMhzkU+QnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTQxNTMwMTVaFw0yNTA4MTgyMzU5NTlaMHoxSTBHBgNV
BAUTQGZiOGMyMDBlNDg2MzVkM2NkYTA0OGQzNjYyOWFhN2Y5OWQ3MjliNTlmMmQz
YzNhMzI3MjBkN2ZkM2JkN2QxOWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALNSBCcF6tThmSI4XqwBt0rW1N7E8hAhg0wOfFi+BpnD6/zh4lhF1vXCwqUD
ijpTYu5mfmLJ5jFEx91cItQAFZA5rKr0pY5lwZkiAvuJioU2U6O6frJq7ZF/y1HJ
blSkIR4UiE/Z8VouHlJmMT7hu7yYGA3art23QBAhdZUlu4Cb3LWrd/6kxVETHKqr
vftidO9M/MOO/47gf6mWj++f1VAD48xkf/gcS680CgIi3M7QyuA/HjT+kmpg3zTC
4PS3lggF1uVYFUMgoxzUwXatLSPDdXkUQcwTHsOShObSG+dm3rL85GwwcJBOFifP
tJuoEqPpFZjdRLQy1sSTpO4veMsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTH2Of6
ZamSb+/W21EmCiOmFgP/lDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTJmMTQyZjItYmQxYy00Mjk1LWEwMDgtZWZjZGUwNGNlYjE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA099EDAN
BgkqhkiG9w0BAQsFAAOCAQEAq0L3v6HhRp1TYNZE6Yr0HQMVRejdm0RD3J7yMw4U
g9/I4OUJcalXlt1698a4dIHGArUSZbpmBtivNSdKDRT81fbkpqtoLCegZp6p8U5p
IjB6g4EkKuDseVe76NpGdy2R6e9mLzVj8IMsMGQ/CeYbzicfG8IBkmDnhQvmE9ai
ioNhQagbd1RXNueFtd9sGKaHzNG+wQ8rOVz8HH/3PusZ3Kz5hhPVlO19zwB44Kur
2TgKAkFfPP3GY7xlwM50oovUKRDa+4aU19nyv+gQLWGIHeo5OMRbyXFUqgsS6Dh2
+GKQ+KosrF4rSxJNDMklSK4FB/h7kFGz/7E+cSTaf1bLMQ==
-----END CERTIFICATE-----
Generated at Thu Jul 24 00:00:18 2025 by rpki-client