Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
File: c46a0827-1052-46e2-ad52-4a27d9a65f24.roa (raw, json)
Hash identifier: /G+d0Oc2CXp7h6TCBI/ax7HflwJu5+sYxIl74u1CRkc=
Subject key identifier: BE:8D:27:94:BB:8A:59:D2:E0:99:F7:4F:1B:0A:CF:CB:0C:36:4E:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A715B0B1F99723053497CF73C6F7E34C68EFBEB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
Signing time: Fri 11 Jul 2025 20:41:30 +0000
ROA not before: Fri 11 Jul 2025 20:41:30 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:71:5b:0b:1f:99:72:30:53:49:7c:f7:3c:6f:7e:34:c6:8e:fb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:41:30 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=c07286ee419b3a805d8fca2d92704f796e387fd518567b310d2d95d9fc55f609, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:31:4a:98:87:82:62:51:0e:86:01:fe:3c:
0b:ac:0c:1e:3a:4b:46:a0:b1:08:82:f2:6c:f1:80:
e1:f0:3f:31:70:b2:8d:f1:7e:0f:f1:51:b2:24:91:
e8:f3:25:e3:9f:16:7a:9a:08:7a:38:6c:fa:31:f2:
37:ad:92:8b:7e:6b:56:d1:c0:bc:0c:52:ff:6d:79:
a3:37:c6:ca:1e:8e:f3:16:4e:5f:da:48:57:12:04:
1b:06:b0:de:39:ac:0d:43:7a:d9:91:54:05:28:63:
f0:02:58:23:f3:14:93:f7:bc:fc:61:40:4b:86:e2:
eb:38:c7:07:64:ea:19:82:b8:24:b0:41:52:7c:26:
20:d4:a2:13:05:8d:ac:72:6e:cb:92:aa:97:6b:d6:
8b:7b:db:88:7a:88:32:bd:6d:18:f4:0b:9d:62:9f:
12:ab:ca:a6:a1:f3:2b:33:56:7f:89:f0:3e:8e:7f:
9c:02:8e:8b:24:aa:f0:e8:66:85:1f:33:5e:b1:96:
c0:9e:df:c8:39:a3:b5:aa:d5:41:b8:91:a7:b3:82:
9f:64:31:a0:40:f8:1d:bf:c3:7b:0c:d8:4e:06:d2:
10:bf:1c:cf:75:dc:3b:26:b0:4f:1e:ba:ec:c7:5c:
30:42:31:54:fc:10:95:c0:f9:69:9a:4d:a6:ea:ef:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8D:27:94:BB:8A:59:D2:E0:99:F7:4F:1B:0A:CF:CB:0C:36:4E:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/36
Signature Algorithm: sha256WithRSAEncryption
0e:90:de:59:c0:82:3e:15:b2:b9:de:69:3f:d6:af:0c:50:9d:
03:6b:f9:63:06:d3:d1:40:29:0c:6c:88:85:ca:9b:d7:50:71:
cb:70:8e:c2:95:da:ef:58:9f:29:7c:75:fa:7c:a8:3e:c7:ec:
16:ad:16:c6:79:7a:fd:f5:4a:38:31:5c:87:5b:f8:15:b4:3c:
21:2a:9a:58:74:da:dc:10:c3:c7:81:bb:4c:cf:81:23:a5:ba:
8d:76:ff:47:c9:f9:a4:06:4c:04:45:86:cd:83:78:86:78:35:
c0:38:90:2f:2b:ad:c5:38:fc:c6:c5:e8:e2:e6:8e:b1:c0:61:
24:df:63:45:1c:45:8c:3f:44:3a:6a:f8:ed:f8:35:ed:bb:e3:
7f:f6:17:e4:56:0d:70:ee:98:a5:43:cb:9b:1c:bd:6a:ad:08:
bd:75:48:b7:1a:d3:de:da:c4:cb:03:ca:b9:85:92:36:46:52:
f8:89:63:c5:76:55:88:36:d7:ae:1b:22:4e:da:d0:c7:0f:50:
de:c8:ad:97:11:f5:a5:54:53:bf:18:4a:9d:10:25:35:d5:16:
e1:96:71:f0:c4:a6:9a:0c:f5:5c:1d:7d:47:e3:8a:ce:d2:d9:
2d:49:39:42:c8:78:39:3a:15:24:9e:3d:f5:de:00:99:94:26:
ce:8e:9e:8c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWnFbCx+ZcjBTSXz3PG9+NMaO++swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDQxMzBaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGMwNzI4NmVlNDE5YjNhODA1ZDhmY2EyZDkyNzA0Zjc5NmUzODdmZDUxODU2
N2IzMTBkMmQ5NWQ5ZmM1NWY2MDkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALG7MUqYh4JiUQ6GAf48C6wMHjpLRqCxCILybPGA4fA/MXCyjfF+D/FRsiSR
6PMl458WepoIejhs+jHyN62Si35rVtHAvAxS/215ozfGyh6O8xZOX9pIVxIEGwaw
3jmsDUN62ZFUBShj8AJYI/MUk/e8/GFAS4bi6zjHB2TqGYK4JLBBUnwmINSiEwWN
rHJuy5Kql2vWi3vbiHqIMr1tGPQLnWKfEqvKpqHzKzNWf4nwPo5/nAKOiySq8Ohm
hR8zXrGWwJ7fyDmjtarVQbiRp7OCn2QxoED4Hb/DewzYTgbSEL8cz3XcOyawTx66
7MdcMEIxVPwQlcD5aZpNpurv2NsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS+jSeU
u4pZ0uCZ908bCs/LDDZOpDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzQ2YTA4MjctMTA1Mi00NmUyLWFkNTItNGEyN2Q5YTY1ZjI0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BQA
MA0GCSqGSIb3DQEBCwUAA4IBAQAOkN5ZwII+FbK53mk/1q8MUJ0Da/ljBtPRQCkM
bIiFypvXUHHLcI7CldrvWJ8pfHX6fKg+x+wWrRbGeXr99Uo4MVyHW/gVtDwhKppY
dNrcEMPHgbtMz4EjpbqNdv9HyfmkBkwERYbNg3iGeDXAOJAvK63FOPzGxeji5o6x
wGEk32NFHEWMP0Q6avjt+DXtu+N/9hfkVg1w7pilQ8ubHL1qrQi9dUi3GtPe2sTL
A8q5hZI2RlL4iWPFdlWINteuGyJO2tDHD1DeyK2XEfWlVFO/GEqdECU11RbhlnHw
xKaaDPVcHX1H44rO0tktSTlCyHg5OhUknj313gCZlCbOjp6M
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:44:26 2025 by rpki-client