Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
File: ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa (raw, json)
Hash identifier: bYa/bP9+0sOkPZDlOkK2dFOz/5SCRmqVOu2sgcBRG4o=
Subject key identifier: DD:E1:44:86:EB:96:DB:85:4B:0D:54:BC:F7:EA:C3:B3:78:EB:6F:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31D034B394C580D0F910A19076CB7D5CD0CF7BCF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
Signing time: Mon 30 Jun 2025 18:00:16 +0000
ROA not before: Mon 30 Jun 2025 18:00:16 +0000
ROA not after: Mon 04 Aug 2025 23:59:59 +0000
asID: 14618
IP address blocks: 46.51.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d0:34:b3:94:c5:80:d0:f9:10:a1:90:76:cb:7d:5c:d0:cf:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jun 30 18:00:16 2025 GMT
Not After : Aug 4 23:59:59 2025 GMT
Subject: serialNumber=00bc18416f738b4f7e643e3d1b1a86039dc049aef320c707ef2b8eb70be59573, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:48:7b:17:74:82:b2:5c:2a:b9:95:21:04:
c5:3e:92:8e:a8:85:e2:19:41:7c:5b:79:5e:fe:c6:
fb:ef:73:1d:e7:3e:e6:b9:01:c2:1f:d7:98:d0:62:
0f:68:dd:ab:d6:eb:12:61:57:ae:f1:b9:1b:67:37:
fa:94:1a:3e:52:52:ca:0e:3e:40:0d:b4:2a:23:b7:
12:2c:a6:de:31:03:2f:25:92:a9:5f:b9:f8:ae:98:
7d:c5:e3:05:d1:b5:07:22:d6:96:2d:bc:f3:e8:86:
8f:a6:fe:ef:eb:12:74:a1:58:74:30:34:07:db:5d:
f7:7c:3a:52:90:c2:3c:0d:6e:ff:04:03:d6:ac:21:
90:a5:ff:08:c0:61:d9:1d:f9:df:dd:cd:10:7f:51:
2d:41:3e:fb:fa:2f:20:2c:33:c9:02:fb:5c:9b:c6:
24:2c:ef:92:4c:7d:2d:76:6e:ed:91:78:64:8b:01:
49:33:de:25:8f:e1:0e:db:ac:18:b2:e0:dd:bf:3f:
93:58:fc:71:f0:25:8d:91:34:d3:6f:a0:c4:0c:8b:
f6:48:f0:ac:1a:f8:af:9e:c4:e0:db:a8:60:a4:0f:
d0:09:d8:a3:57:4a:5e:5e:7f:2d:33:16:ef:4c:ec:
4d:bc:19:23:9e:cd:17:7e:79:5a:1b:13:8e:f3:99:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:44:86:EB:96:DB:85:4B:0D:54:BC:F7:EA:C3:B3:78:EB:6F:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad1fa1a4-44d6-4a4e-82c4-f32d315830db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
97:e4:de:03:2a:bf:ad:5d:90:59:ac:01:b5:15:d4:58:92:f2:
26:81:c6:4e:0e:87:33:91:83:11:e6:99:80:71:ae:39:03:53:
2d:9d:a3:88:c9:92:98:4a:95:5d:c1:d4:cc:33:f7:55:c9:e8:
18:22:b8:2f:7c:af:f8:1f:9a:24:f7:45:80:91:cf:70:3b:d8:
d6:32:69:cc:01:44:5c:d7:5f:85:f3:86:a3:db:9e:ac:1e:e8:
51:ff:1d:b4:a2:83:ae:cf:a1:a3:24:cd:2b:22:8a:1c:1f:02:
fc:dc:df:1a:0f:ec:45:c7:5f:3f:d7:76:18:2a:c8:f6:08:0a:
cc:f1:19:f4:f8:8a:da:68:a0:ce:ca:ec:9b:61:4f:15:10:b9:
fa:79:59:82:33:e4:d6:6b:ad:f0:ca:ac:6d:62:bb:ad:de:15:
5a:44:17:29:e5:0c:c0:ca:63:5b:ce:5b:b5:83:0f:f7:7c:ce:
37:9e:4d:c6:a1:eb:58:27:a8:d0:e7:c0:17:2b:2e:ea:a7:09:
c3:68:b0:bd:d7:61:62:5d:03:65:a1:5e:5d:c2:57:b5:46:7f:
f3:e0:58:a5:a4:ad:25:8a:d9:cb:73:56:f8:9f:b7:96:af:c1:
49:de:ad:e4:f7:92:41:da:1c:e6:74:fa:17:85:ed:cd:9b:86:
f0:e6:a1:4a
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUMdA0s5TFgND5EKGQdst9XNDPe88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA2MzAxODAwMTZaFw0yNTA4MDQyMzU5NTlaMHoxSTBHBgNV
BAUTQDAwYmMxODQxNmY3MzhiNGY3ZTY0M2UzZDFiMWE4NjAzOWRjMDQ5YWVmMzIw
YzcwN2VmMmI4ZWI3MGJlNTk1NzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKCwSHsXdIKyXCq5lSEExT6SjqiF4hlBfFt5Xv7G++9zHec+5rkBwh/XmNBi
D2jdq9brEmFXrvG5G2c3+pQaPlJSyg4+QA20KiO3Eiym3jEDLyWSqV+5+K6YfcXj
BdG1ByLWli288+iGj6b+7+sSdKFYdDA0B9td93w6UpDCPA1u/wQD1qwhkKX/CMBh
2R35393NEH9RLUE++/ovICwzyQL7XJvGJCzvkkx9LXZu7ZF4ZIsBSTPeJY/hDtus
GLLg3b8/k1j8cfAljZE002+gxAyL9kjwrBr4r57E4NuoYKQP0AnYo1dKXl5/LTMW
70zsTbwZI57NF355WhsTjvOZoiMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTd4USG
65bbhUsNVLz36sOzeOtv5DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWQxZmExYTQtNDRkNi00YTRlLTgyYzQtZjMyZDMxNTgzMGRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi4z0DAN
BgkqhkiG9w0BAQsFAAOCAQEAl+TeAyq/rV2QWawBtRXUWJLyJoHGTg6HM5GDEeaZ
gHGuOQNTLZ2jiMmSmEqVXcHUzDP3VcnoGCK4L3yv+B+aJPdFgJHPcDvY1jJpzAFE
XNdfhfOGo9uerB7oUf8dtKKDrs+hoyTNKyKKHB8C/NzfGg/sRcdfP9d2GCrI9ggK
zPEZ9PiK2migzsrsm2FPFRC5+nlZgjPk1mut8MqsbWK7rd4VWkQXKeUMwMpjW85b
tYMP93zON55NxqHrWCeo0OfAFysu6qcJw2iwvddhYl0DZaFeXcJXtUZ/8+BYpaSt
JYrZy3NW+J+3lq/BSd6t5PeSQdoc5nT6F4XtzZuG8OahSg==
-----END CERTIFICATE-----
Generated at Tue Jul 22 22:22:25 2025 by rpki-client