Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
File: 82baa148-3f1e-4e5f-a19f-3be140c60d34.roa (raw, json)
Hash identifier: WWWO0Ez670PEdqp17ZVeqUnURnYnGeJ7+62k9xLBqAY=
Subject key identifier: 91:BB:60:D8:92:BB:FB:D2:98:60:91:D5:ED:1F:B9:0B:D9:50:BB:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0100BD8F5C992FCEE83A7C2737A9C1337DF89FEB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
Signing time: Mon 12 May 2025 16:11:06 +0000
ROA not before: Mon 12 May 2025 16:11:06 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:00:bd:8f:5c:99:2f:ce:e8:3a:7c:27:37:a9:c1:33:7d:f8:9f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:11:06 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=116d4a50062fd66aee4c54ab37836607875d8033b5e8a5e9a7f9399f52fd2a57, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:01:70:7a:36:d5:bf:70:13:30:08:2c:0c:
59:21:2a:c1:10:27:3e:35:61:71:fa:ea:e9:92:39:
d5:17:0e:1f:86:55:cb:26:00:0d:14:ae:ee:57:46:
c9:3e:92:eb:12:61:ce:e4:05:2e:04:a5:12:18:d1:
c3:5f:21:91:94:38:8a:85:d0:84:c3:d5:97:47:ee:
e5:af:6e:ab:e6:03:80:e7:50:18:2e:86:55:37:9a:
c4:0f:48:a0:89:67:71:e0:34:55:6a:f3:9e:78:b7:
bc:a2:83:ee:6e:3d:49:c0:f0:b6:c3:7a:2b:27:66:
ad:4f:14:b2:05:5e:73:29:5d:af:d0:e3:0a:ec:87:
cc:fb:6d:d1:33:dc:7b:06:5e:0b:20:c6:59:69:24:
dc:f4:cd:54:e1:86:a8:21:e8:3f:6c:9d:02:25:a9:
34:26:a9:3b:d2:ee:25:92:17:87:67:ed:d9:95:d4:
1c:44:ae:6f:57:b0:d5:36:fe:84:07:1f:1d:1a:45:
b3:a4:84:54:af:90:d3:fa:f0:73:3a:10:66:46:c9:
fa:1e:eb:7e:cb:0c:f2:c4:9a:63:8e:fd:55:dd:09:
52:62:c6:a5:64:9c:b5:49:42:29:fc:ea:33:f2:fc:
09:10:2f:20:eb:a5:cb:66:3a:e4:2d:71:c3:cb:f2:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:60:D8:92:BB:FB:D2:98:60:91:D5:ED:1F:B9:0B:D9:50:BB:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82baa148-3f1e-4e5f-a19f-3be140c60d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:4000::/40
Signature Algorithm: sha256WithRSAEncryption
b9:b1:7a:a6:30:bb:c3:dc:df:57:e9:e7:d1:88:59:6f:61:25:
4b:64:91:78:85:5e:d5:d2:79:bb:a3:fd:52:3d:ff:9b:6c:de:
80:90:f0:e1:14:ac:b7:a9:3b:11:a1:e1:d0:19:5f:d2:ef:8a:
96:c1:fb:14:ed:7c:cb:ef:5a:6c:e5:d6:f1:63:1a:8f:77:7b:
c5:d6:e5:18:8b:74:10:ee:63:61:d3:ad:85:72:e9:75:7e:2f:
69:e8:27:5a:e4:42:25:d4:51:e9:35:39:fa:67:95:df:75:e7:
e9:82:15:67:d0:2a:13:71:4b:21:54:2a:28:2d:42:ce:44:d4:
c0:db:17:ef:e1:53:53:88:73:2d:82:66:d4:f3:34:6d:3e:7d:
d4:bb:d9:17:73:30:6c:bf:e3:d3:a8:0b:55:e2:79:b1:24:d6:
63:ba:4f:e4:c2:7a:e2:9c:74:e8:be:58:fe:82:de:64:eb:f0:
54:76:83:be:0e:e1:cf:1b:ae:48:da:57:de:d1:29:01:b1:a8:
2f:23:c7:c0:0b:e7:89:a6:c5:a6:87:70:e7:a5:68:a7:7a:ee:
7a:ff:b1:2c:2c:2a:6d:09:50:f0:8c:9a:f1:0f:f9:20:38:75:
b9:65:78:b8:af:e5:98:74:1b:c2:e7:d8:ff:c6:d4:2d:8d:dd:
99:2a:08:fa
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUAQC9j1yZL87oOnwnN6nBM334n+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MTIxNjExMDZaFw0yNTA2MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDExNmQ0YTUwMDYyZmQ2NmFlZTRjNTRhYjM3ODM2NjA3ODc1ZDgwMzNiNWU4
YTVlOWE3ZjkzOTlmNTJmZDJhNTcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANVBAXB6NtW/cBMwCCwMWSEqwRAnPjVhcfrq6ZI51RcOH4ZVyyYADRSu7ldG
yT6S6xJhzuQFLgSlEhjRw18hkZQ4ioXQhMPVl0fu5a9uq+YDgOdQGC6GVTeaxA9I
oIlnceA0VWrznni3vKKD7m49ScDwtsN6KydmrU8UsgVecyldr9DjCuyHzPtt0TPc
ewZeCyDGWWkk3PTNVOGGqCHoP2ydAiWpNCapO9LuJZIXh2ft2ZXUHESub1ew1Tb+
hAcfHRpFs6SEVK+Q0/rwczoQZkbJ+h7rfssM8sSaY479Vd0JUmLGpWSctUlCKfzq
M/L8CRAvIOuly2Y65C1xw8vyU+MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSRu2DY
krv70phgkdXtH7kL2VC7MzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODJiYWExNDgtM2YxZS00ZTVmLWExOWYtM2JlMTQwYzYwZDM0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DBA
MA0GCSqGSIb3DQEBCwUAA4IBAQC5sXqmMLvD3N9X6efRiFlvYSVLZJF4hV7V0nm7
o/1SPf+bbN6AkPDhFKy3qTsRoeHQGV/S74qWwfsU7XzL71ps5dbxYxqPd3vF1uUY
i3QQ7mNh062Fcul1fi9p6Cda5EIl1FHpNTn6Z5XfdefpghVn0CoTcUshVCooLULO
RNTA2xfv4VNTiHMtgmbU8zRtPn3Uu9kXczBsv+PTqAtV4nmxJNZjuk/kwnrinHTo
vlj+gt5k6/BUdoO+DuHPG65I2lfe0SkBsagvI8fAC+eJpsWmh3DnpWineu56/7Es
LCptCVDwjJrxD/kgOHW5ZXi4r+WYdBvC59j/xtQtjd2ZKgj6
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:31 2025 by rpki-client