Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
File: d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa (raw, json)
Hash identifier: g3cnZp6YbtEOj1GKehUxqm/xbIgifl6K5EzGu23zBBg=
Subject key identifier: AD:2B:67:04:FC:30:26:17:2C:BB:4F:F2:01:98:AC:3B:06:75:ED:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 55D41DAC1B7DE914135CC5D93402EB75224EDE2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
Signing time: Fri 11 Jul 2025 19:41:33 +0000
ROA not before: Fri 11 Jul 2025 19:41:33 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:2080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d4:1d:ac:1b:7d:e9:14:13:5c:c5:d9:34:02:eb:75:22:4e:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 19:41:33 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=c85a22804a8544d973ce2f7dadfff7969845eb310eb9b0dfdefe7900bc4325f7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:e7:d7:9c:ca:e9:2f:3b:ad:21:6b:57:ea:
77:b1:78:30:fb:d6:9a:b7:d8:ac:58:8c:9e:94:d6:
be:69:d7:7a:65:25:92:aa:2d:1e:7e:ca:81:ab:85:
3e:83:05:98:a7:f4:ed:d6:23:6f:47:f1:a6:0f:65:
52:74:3c:5d:0f:0c:85:5e:f6:94:47:d9:7d:c0:f8:
5c:27:37:da:d4:b0:ba:b2:ef:48:c5:ae:8f:0d:0d:
9c:1f:93:68:fe:09:2b:74:51:fc:5d:9a:bd:07:da:
c6:a4:74:a3:8f:99:39:ae:c8:2d:68:60:73:fa:5b:
de:cf:67:1b:df:ff:29:37:2f:24:cc:f4:4c:af:ee:
4e:8f:a1:f9:31:f3:7e:59:2b:94:f0:10:25:7c:23:
40:eb:08:fb:0d:e6:2b:30:11:ef:30:40:6d:71:fc:
02:26:4a:3c:4d:28:73:d8:8a:fb:81:64:96:1a:e6:
6c:96:b9:4a:99:58:7f:26:d7:ca:6c:8f:68:aa:f5:
b9:5a:71:ec:56:2d:46:3a:64:5a:1c:51:6b:ea:ed:
4d:49:f8:55:c9:0e:e4:e2:21:7a:83:9f:47:ff:2c:
e9:00:47:83:d8:bb:3a:7a:ff:22:8e:ef:5c:7b:a8:
47:f0:f8:5f:7c:0d:97:ba:38:7c:12:fe:4f:77:69:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2B:67:04:FC:30:26:17:2C:BB:4F:F2:01:98:AC:3B:06:75:ED:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7ad75af-5f70-4566-9e24-e9acd2e1f495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:2080::/46
Signature Algorithm: sha256WithRSAEncryption
38:68:2f:66:8f:4b:17:19:f7:6e:c8:f5:b7:b4:27:88:74:c2:
46:89:76:68:0d:f9:c4:73:7c:59:b4:f0:cf:10:8c:be:29:72:
52:09:3b:50:0a:47:98:9c:76:51:46:1d:27:4f:c5:f1:e0:e6:
0a:0f:9a:ca:6e:15:2f:a3:9e:c0:82:10:f7:dc:15:91:ae:88:
f1:80:a1:d3:0e:e3:e0:8f:67:69:b5:88:fa:03:83:3f:32:e1:
d4:f0:cc:35:92:83:33:17:f2:73:b6:61:f3:02:bb:a8:8f:31:
ff:0e:ea:c6:df:ee:b8:c6:c3:35:e4:fb:72:bb:8f:76:30:97:
51:fb:58:c5:8b:8b:23:fe:ac:35:d9:6f:3a:78:40:bf:bc:c2:
bf:39:06:eb:a7:af:0a:ca:fe:bd:34:78:fe:e8:43:f9:3b:b9:
95:5d:cd:5e:3d:70:5e:fc:f8:93:78:ab:c7:14:14:74:c7:ae:
46:bd:30:83:ee:7f:ae:02:6f:7c:23:59:d8:d4:a7:a2:d0:4c:
d3:16:52:41:88:07:0c:82:ce:db:f8:01:d4:3d:a5:23:39:4a:
a2:0e:b1:ae:b9:38:b0:02:cc:77:2c:06:72:98:b5:6d:c0:0c:
0f:46:09:06:ec:17:89:d0:f6:55:1f:17:d9:5c:25:2e:3e:18:
c6:54:31:e9
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUVdQdrBt96RQTXMXZNALrdSJO3i8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTExOTQxMzNaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGM4NWEyMjgwNGE4NTQ0ZDk3M2NlMmY3ZGFkZmZmNzk2OTg0NWViMzEwZWI5
YjBkZmRlZmU3OTAwYmM0MzI1ZjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJOS59ecyukvO60ha1fqd7F4MPvWmrfYrFiMnpTWvmnXemUlkqotHn7KgauF
PoMFmKf07dYjb0fxpg9lUnQ8XQ8MhV72lEfZfcD4XCc32tSwurLvSMWujw0NnB+T
aP4JK3RR/F2avQfaxqR0o4+ZOa7ILWhgc/pb3s9nG9//KTcvJMz0TK/uTo+h+THz
flkrlPAQJXwjQOsI+w3mKzAR7zBAbXH8AiZKPE0oc9iK+4FklhrmbJa5SplYfybX
ymyPaKr1uVpx7FYtRjpkWhxRa+rtTUn4VckO5OIheoOfR/8s6QBHg9i7Onr/Io7v
XHuoR/D4X3wNl7o4fBL+T3dpLq0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBStK2cE
/DAmFyy7T/IBmKw7BnXtNDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDdhZDc1YWYtNWY3MC00NTY2LTllMjQtZTlhY2QyZTFmNDk1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DUg
gDANBgkqhkiG9w0BAQsFAAOCAQEAOGgvZo9LFxn3bsj1t7QniHTCRol2aA35xHN8
WbTwzxCMvilyUgk7UApHmJx2UUYdJ0/F8eDmCg+aym4VL6OewIIQ99wVka6I8YCh
0w7j4I9nabWI+gODPzLh1PDMNZKDMxfyc7Zh8wK7qI8x/w7qxt/uuMbDNeT7cruP
djCXUftYxYuLI/6sNdlvOnhAv7zCvzkG66evCsr+vTR4/uhD+Tu5lV3NXj1wXvz4
k3irxxQUdMeuRr0wg+5/rgJvfCNZ2NSnotBM0xZSQYgHDILO2/gB1D2lIzlKog6x
rrk4sALMdywGcpi1bcAMD0YJBuwXidD2VR8X2VwlLj4YxlQx6Q==
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:43:40 2025 by rpki-client