Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
File: e279c5e7-6144-440a-9f1d-2013fb96d06a.roa (raw, json)
Hash identifier: vA74VPvIDXC4KpIltOur+tmhw3PbySydHHV4H6f9RT4=
Subject key identifier: DB:51:79:78:2E:2A:24:DA:EB:A0:A2:BC:27:23:5A:EA:2D:9E:11:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 278AD775E08E683589B6F67A36784B526504E522
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
Signing time: Fri 11 Jul 2025 20:10:14 +0000
ROA not before: Fri 11 Jul 2025 20:10:14 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8a:d7:75:e0:8e:68:35:89:b6:f6:7a:36:78:4b:52:65:04:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:10:14 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=f27489c7bd3bd89cf7246a1a102b0f578499667efb3b8c01cb0a33028d8d3853, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:5a:05:cf:2e:3a:3f:ae:41:84:49:b0:50:
09:9a:60:d4:8c:f6:e7:15:d8:ec:d4:b7:11:20:79:
1e:77:77:44:a2:04:6b:90:a5:5b:19:43:93:9a:44:
4c:38:29:4d:9d:56:b1:56:79:01:d1:f2:24:32:33:
74:65:6d:fb:d7:18:57:5b:da:e8:2a:d0:49:6f:ec:
81:b0:fc:96:f0:71:ee:7d:b6:28:94:ad:ed:8c:45:
f0:db:89:9e:4a:28:58:24:3f:77:f5:19:5a:06:c8:
b5:0e:3f:c4:5e:5a:52:39:fe:b4:3b:9f:b2:86:9e:
c7:aa:a6:a1:18:ca:8d:bd:61:74:41:d5:9a:2e:62:
95:ba:91:26:65:71:ec:64:d2:78:10:d6:59:31:37:
7d:ec:0f:86:fb:13:55:d0:6c:ba:03:42:92:3c:c6:
cf:f5:3f:c3:fe:76:ee:48:77:c3:ae:08:a7:a4:2f:
f6:c8:cc:9f:50:65:be:55:68:86:38:f7:3e:b8:86:
94:35:15:d2:72:1f:13:5e:9d:61:b3:8f:76:05:0b:
6f:d0:5a:a4:e5:bf:c5:d9:7a:0f:cc:fa:79:58:9d:
8a:11:3d:d6:a5:15:dc:60:16:12:a4:c1:cc:eb:53:
d8:a0:52:ac:f6:81:ab:7e:a6:79:fb:68:0a:37:10:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:79:78:2E:2A:24:DA:EB:A0:A2:BC:27:23:5A:EA:2D:9E:11:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e279c5e7-6144-440a-9f1d-2013fb96d06a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:2000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:87:10:e9:60:09:5b:37:6b:df:a9:a7:52:4d:f7:07:da:c7:
c1:e1:c4:2f:c5:ba:d8:d7:47:49:54:10:06:48:8f:79:f6:80:
a0:24:23:c4:ee:19:a0:ee:4b:7d:d2:09:bb:1e:b5:a9:db:20:
38:a8:bb:bc:f9:ec:64:49:45:66:bf:64:0c:da:5a:0e:dc:09:
27:83:5c:91:52:62:c5:98:d3:fe:71:0c:bf:61:6b:1c:ec:ce:
77:ae:94:81:4c:87:3b:54:ff:9e:a0:1a:7b:3d:63:f4:c3:5f:
6d:d5:4b:f4:c9:25:85:e6:90:0d:0e:ff:b5:20:b3:fa:06:ca:
88:a2:a2:8a:cc:21:0d:ae:b1:fb:fe:75:8e:32:0d:64:d8:64:
79:79:7f:fe:d5:5c:53:13:8f:ef:42:44:86:a6:6c:5c:5a:4b:
83:a1:6c:a4:b5:f9:c6:de:83:1f:6e:76:5f:9f:6e:6b:a2:94:
bc:90:68:ef:d8:dd:88:c6:07:28:84:ab:3a:17:4f:09:a0:71:
e4:b1:41:d8:09:c9:e4:b2:a2:ce:62:34:24:36:bc:b4:62:35:
9e:33:ff:b7:06:4f:22:c9:8f:68:ec:5a:d2:9d:ab:01:1f:a6:
d6:0f:b8:43:98:dd:0b:e9:73:7a:0c:1f:78:1f:aa:e6:9a:f7:
3c:48:d4:3a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJ4rXdeCOaDWJtvZ6NnhLUmUE5SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA3MTEyMDEwMTRaFw0yNTA4MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQGYyNzQ4OWM3YmQzYmQ4OWNmNzI0NmExYTEwMmIwZjU3ODQ5OTY2N2VmYjNi
OGMwMWNiMGEzMzAyOGQ4ZDM4NTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjiWgXPLjo/rkGESbBQCZpg1Iz25xXY7NS3ESB5Hnd3RKIEa5ClWxlDk5pE
TDgpTZ1WsVZ5AdHyJDIzdGVt+9cYV1va6CrQSW/sgbD8lvBx7n22KJSt7YxF8NuJ
nkooWCQ/d/UZWgbItQ4/xF5aUjn+tDufsoaex6qmoRjKjb1hdEHVmi5ilbqRJmVx
7GTSeBDWWTE3fewPhvsTVdBsugNCkjzGz/U/w/527kh3w64Ip6Qv9sjMn1BlvlVo
hjj3PriGlDUV0nIfE16dYbOPdgULb9BapOW/xdl6D8z6eVidihE91qUV3GAWEqTB
zOtT2KBSrPaBq36meftoCjcQuVECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTbUXl4
Liok2uugorwnI1rqLZ4RtzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTI3OWM1ZTctNjE0NC00NDBhLTlmMWQtMjAxM2ZiOTZkMDZhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DIg
MA0GCSqGSIb3DQEBCwUAA4IBAQAchxDpYAlbN2vfqadSTfcH2sfB4cQvxbrY10dJ
VBAGSI959oCgJCPE7hmg7kt90gm7HrWp2yA4qLu8+exkSUVmv2QM2loO3Akng1yR
UmLFmNP+cQy/YWsc7M53rpSBTIc7VP+eoBp7PWP0w19t1Uv0ySWF5pANDv+1ILP6
BsqIoqKKzCENrrH7/nWOMg1k2GR5eX/+1VxTE4/vQkSGpmxcWkuDoWyktfnG3oMf
bnZfn25ropS8kGjv2N2IxgcohKs6F08JoHHksUHYCcnksqLOYjQkNry0YjWeM/+3
Bk8iyY9o7FrSnasBH6bWD7hDmN0L6XN6DB94H6rmmvc8SNQ6
-----END CERTIFICATE-----
Generated at Tue Jul 22 21:44:18 2025 by rpki-client