Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
File: cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa (raw, json)
Hash identifier: 806Nw/Cu0QdsCfj/dGaG1yXWB6hpDxOZTmmEAPLFpKU=
Subject key identifier: 4A:A7:4F:1F:31:B3:BB:96:A0:AF:BA:FD:7E:D8:7D:2F:67:AB:8F:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15AD244DE4CCDE0BE921D8B63522657209D5FB5B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
Signing time: Mon 07 Jul 2025 18:21:03 +0000
ROA not before: Mon 07 Jul 2025 18:21:03 +0000
ROA not after: Mon 11 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ad:24:4d:e4:cc:de:0b:e9:21:d8:b6:35:22:65:72:09:d5:fb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 7 18:21:03 2025 GMT
Not After : Aug 11 23:59:59 2025 GMT
Subject: serialNumber=b4343033e4e3fadd913a1abd8b6269eb2fa2ffe0c7a53c0bb3e99cfaa3c6eea3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:94:77:47:e7:a5:da:55:1b:53:d3:ab:ee:
03:62:62:dd:c5:5a:07:f0:00:38:c2:42:3a:7e:f5:
27:6b:80:5a:2c:5c:c9:f8:08:86:4f:d4:29:90:bb:
12:13:43:cd:b7:9f:45:c1:b8:52:91:5c:64:13:a6:
6a:3d:4e:b8:15:bf:44:b9:4e:67:84:c2:f3:41:3a:
f6:d2:e9:80:4c:78:01:46:dc:2a:f0:25:c5:58:26:
66:79:1f:b6:e7:5d:66:45:7c:55:62:66:fe:77:f6:
d0:90:0f:3c:ef:07:e3:87:84:59:aa:d4:92:d9:5e:
e2:eb:48:ad:6d:4d:4a:5e:9f:df:05:0f:d9:74:e6:
d8:2a:dc:fd:a6:15:f7:4f:36:11:e7:ff:ba:e0:b0:
ba:00:f1:82:36:ed:60:d8:cc:97:30:10:ef:4d:32:
65:bd:b2:b8:61:56:f7:c5:97:2b:ff:79:1c:2b:d1:
b7:5d:46:54:16:76:28:59:78:6f:b4:dd:18:3f:27:
9d:e2:df:0b:e8:db:e2:26:19:e0:e1:be:c8:eb:8a:
bf:5a:ac:0a:30:51:78:d3:7d:ce:b8:5c:69:46:c1:
4e:42:7a:4e:db:ec:2a:63:fe:98:ba:88:82:08:e2:
0f:f1:64:7c:f1:01:f1:69:42:c9:7f:c7:8d:57:8d:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:4F:1F:31:B3:BB:96:A0:AF:BA:FD:7E:D8:7D:2F:67:AB:8F:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cd4ce5d7-1dcc-4777-b299-b0d97d3315f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:800::/40
Signature Algorithm: sha256WithRSAEncryption
3a:bf:c3:aa:02:5d:bb:04:d1:0a:61:99:6d:3c:51:8f:c9:06:
20:56:83:e4:6e:c0:f2:e6:f3:21:8d:6e:54:6d:8c:38:7e:ff:
17:89:81:37:ff:3d:c0:ad:8e:d9:8e:d9:ee:ca:c1:27:b0:fe:
9b:d3:48:11:49:0b:90:45:bd:cf:94:fa:33:e7:d8:80:2a:d1:
45:8d:d9:57:fb:e5:d9:b0:55:bf:8d:e0:9e:33:00:60:6b:4c:
b2:00:20:17:32:cb:78:9e:63:a6:19:f6:f3:60:fb:a5:10:9a:
eb:30:f5:9d:1f:98:d3:99:dc:53:b2:39:4b:72:13:4c:1f:f9:
b5:78:c4:83:eb:59:9f:5a:10:6d:63:5d:f2:34:61:fc:82:13:
66:1e:a7:f1:b6:f6:77:ce:89:28:b5:e9:f2:aa:02:29:1f:41:
f0:22:37:66:b9:5d:1e:da:fd:53:ba:4c:c6:e6:c6:36:b9:27:
0d:88:dd:57:52:e5:69:2b:dc:10:3c:be:74:fd:63:1b:6f:ee:
2d:30:2c:b6:b5:43:fb:cf:ca:11:e2:0e:03:16:b5:2d:5c:f1:
a8:45:0a:a8:ad:04:46:86:4a:af:83:0f:99:75:2d:b4:1e:1b:
31:51:52:ff:c5:8d:70:fc:7b:d0:01:a1:bd:02:a2:68:c0:94:
c6:3d:0e:61
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFa0kTeTM3gvpIdi2NSJlcgnV+1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MDcxODIxMDNaFw0yNTA4MTEyMzU5NTlaMHoxSTBHBgNV
BAUTQGI0MzQzMDMzZTRlM2ZhZGQ5MTNhMWFiZDhiNjI2OWViMmZhMmZmZTBjN2E1
M2MwYmIzZTk5Y2ZhYTNjNmVlYTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwXlHdH56XaVRtT06vuA2Ji3cVaB/AAOMJCOn71J2uAWixcyfgIhk/UKZC7
EhNDzbefRcG4UpFcZBOmaj1OuBW/RLlOZ4TC80E69tLpgEx4AUbcKvAlxVgmZnkf
tuddZkV8VWJm/nf20JAPPO8H44eEWarUktle4utIrW1NSl6f3wUP2XTm2Crc/aYV
9082Eef/uuCwugDxgjbtYNjMlzAQ700yZb2yuGFW98WXK/95HCvRt11GVBZ2KFl4
b7TdGD8nneLfC+jb4iYZ4OG+yOuKv1qsCjBReNN9zrhcaUbBTkJ6TtvsKmP+mLqI
ggjiD/FkfPEB8WlCyX/HjVeNoc0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRKp08f
MbO7lqCvuv1+2H0vZ6uP5DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Q0Y2U1ZDctMWRjYy00Nzc3LWIyOTktYjBkOTdkMzMxNWY5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HII
MA0GCSqGSIb3DQEBCwUAA4IBAQA6v8OqAl27BNEKYZltPFGPyQYgVoPkbsDy5vMh
jW5UbYw4fv8XiYE3/z3ArY7ZjtnuysEnsP6b00gRSQuQRb3PlPoz59iAKtFFjdlX
++XZsFW/jeCeMwBga0yyACAXMst4nmOmGfbzYPulEJrrMPWdH5jTmdxTsjlLchNM
H/m1eMSD61mfWhBtY13yNGH8ghNmHqfxtvZ3zokotenyqgIpH0HwIjdmuV0e2v1T
ukzG5sY2uScNiN1XUuVpK9wQPL50/WMbb+4tMCy2tUP7z8oR4g4DFrUtXPGoRQqo
rQRGhkqvgw+ZdS20HhsxUVL/xY1w/HvQAaG9AqJowJTGPQ5h
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:44:13 2025 by rpki-client