Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0588f7a2-2477-4be0-87d6-89d1a4c7df08.roa
File: 0588f7a2-2477-4be0-87d6-89d1a4c7df08.roa (raw, json)
Hash identifier: MZVhITe9u7c+NuhLjjkRrOK2OdYA578aEpfuaTwd/Z8=
Subject key identifier: DD:E2:48:51:AE:25:42:13:3F:BF:2E:5F:68:61:A2:21:3B:88:5E:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 778C8781E0135C87DF181846D4969FC25C108BFE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0588f7a2-2477-4be0-87d6-89d1a4c7df08.roa
Signing time: Fri 16 May 2025 17:40:06 +0000
ROA not before: Fri 16 May 2025 17:40:06 +0000
ROA not after: Fri 20 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8c:87:81:e0:13:5c:87:df:18:18:46:d4:96:9f:c2:5c:10:8b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 16 17:40:06 2025 GMT
Not After : Jun 20 23:59:59 2025 GMT
Subject: serialNumber=70266ed51852796abd00a6f4c228a0b1e853a09c6ccc430b79c4592d303ceabc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:a5:8e:3e:b4:41:ea:b6:e4:6c:1b:2f:8d:
d7:3e:55:8c:a8:02:96:cf:58:4e:f1:66:c7:ed:ae:
81:2f:d6:10:28:0e:5f:8d:fa:71:56:cf:b3:e6:34:
6e:f2:3c:13:8a:43:8a:d6:ed:94:33:1d:8b:a0:e6:
71:fa:6c:e9:7b:68:d3:c0:d4:7d:f0:55:3d:4c:e4:
68:45:c8:fb:c1:d4:a9:4d:58:32:1d:f8:2b:20:d5:
16:de:47:6f:a5:5c:01:89:64:4f:fc:bc:ed:1c:f3:
ad:3f:21:e5:26:a7:15:b6:08:61:c7:4b:10:a3:5a:
11:f4:fe:40:58:c3:11:c5:31:76:40:3a:01:b7:1f:
7f:b2:ae:b5:1f:a0:cc:06:44:09:ee:9b:cd:0e:14:
cd:e0:a3:3c:61:22:78:30:9c:bf:b8:cf:e3:ee:aa:
af:be:e4:68:bc:55:0a:89:d3:18:dc:1c:5a:5f:95:
d7:1e:b7:1b:c0:94:4f:17:92:01:cb:f8:e6:3e:57:
4a:3e:36:3e:2e:e3:51:93:98:54:64:4d:88:fb:bf:
e4:6b:27:60:19:05:83:b3:fe:ec:68:79:4e:97:b8:
ea:b5:8d:27:94:94:8a:29:31:6b:04:37:9a:36:5a:
81:f8:5b:93:b0:15:69:36:24:3e:64:04:95:67:7e:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E2:48:51:AE:25:42:13:3F:BF:2E:5F:68:61:A2:21:3B:88:5E:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0588f7a2-2477-4be0-87d6-89d1a4c7df08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:800::/40
Signature Algorithm: sha256WithRSAEncryption
0e:b3:af:70:d8:d5:23:34:6a:51:f3:10:ad:6c:18:56:21:4c:
06:16:da:85:6c:35:54:6f:80:ab:3f:69:e6:55:ae:19:92:ee:
27:9b:85:17:97:e8:13:09:41:6b:d5:38:df:cc:c7:0a:82:40:
bd:db:2e:d8:ab:f8:60:fb:ad:ea:fd:3a:c1:0c:0b:a7:a0:11:
35:f2:34:29:ce:be:c6:2b:3d:38:96:46:72:18:cc:e8:8c:00:
db:70:a1:5e:a4:b8:f3:cd:cc:d3:c2:4f:ae:e3:aa:f8:ea:10:
3e:39:fa:4d:b3:67:0f:8b:4d:31:01:23:78:e7:36:de:f7:aa:
10:0d:65:06:2e:22:d8:46:9c:4a:a9:67:26:8b:ab:84:c3:dd:
f2:42:19:56:92:c0:f3:2e:46:ab:86:1c:12:b0:b0:f4:99:c9:
ad:e0:8f:7c:2e:4e:86:27:a6:57:87:c9:97:db:bb:88:b9:7d:
ad:55:99:4d:6a:1f:c2:d6:7c:9c:53:0a:88:b3:73:21:7a:b3:
48:52:2d:be:85:82:12:b0:6b:c4:f3:27:14:a5:61:4b:fb:28:
d7:a7:38:3a:cd:f1:f8:f3:03:07:73:72:ba:cf:12:0c:89:86:
ed:d3:da:4b:97:41:2f:76:1a:e5:37:25:6c:3b:dd:94:36:17:
e0:de:58:db
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUd4yHgeATXIffGBhG1JafwlwQi/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MTYxNzQwMDZaFw0yNTA2MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQDcwMjY2ZWQ1MTg1Mjc5NmFiZDAwYTZmNGMyMjhhMGIxZTg1M2EwOWM2Y2Nj
NDMwYjc5YzQ1OTJkMzAzY2VhYmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALGXpY4+tEHqtuRsGy+N1z5VjKgCls9YTvFmx+2ugS/WECgOX436cVbPs+Y0
bvI8E4pDitbtlDMdi6Dmcfps6Xto08DUffBVPUzkaEXI+8HUqU1YMh34KyDVFt5H
b6VcAYlkT/y87RzzrT8h5SanFbYIYcdLEKNaEfT+QFjDEcUxdkA6Abcff7KutR+g
zAZECe6bzQ4UzeCjPGEieDCcv7jP4+6qr77kaLxVConTGNwcWl+V1x63G8CUTxeS
Acv45j5XSj42Pi7jUZOYVGRNiPu/5GsnYBkFg7P+7Gh5Tpe46rWNJ5SUiikxawQ3
mjZagfhbk7AVaTYkPmQElWd+nusCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTd4khR
riVCEz+/Ll9oYaIhO4heEjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDU4OGY3YTItMjQ3Ny00YmUwLTg3ZDYtODlkMWE0YzdkZjA4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HcI
MA0GCSqGSIb3DQEBCwUAA4IBAQAOs69w2NUjNGpR8xCtbBhWIUwGFtqFbDVUb4Cr
P2nmVa4Zku4nm4UXl+gTCUFr1TjfzMcKgkC92y7Yq/hg+63q/TrBDAunoBE18jQp
zr7GKz04lkZyGMzojADbcKFepLjzzczTwk+u46r46hA+OfpNs2cPi00xASN45zbe
96oQDWUGLiLYRpxKqWcmi6uEw93yQhlWksDzLkarhhwSsLD0mcmt4I98Lk6GJ6ZX
h8mX27uIuX2tVZlNah/C1nycUwqIs3MherNIUi2+hYISsGvE8ycUpWFL+yjXpzg6
zfH48wMHc3K6zxIMiYbt09pLl0EvdhrlNyVsO92UNhfg3ljb
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:07 2025 by rpki-client