Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
File: b2048b1c-363b-4b59-9d56-dc72187194a3.roa (raw, json)
Hash identifier: a71C1tNmmt2Tl5EsIAaV5rfyr+AxcryJ7vTiljTza/E=
Subject key identifier: 18:9A:32:51:3C:50:9D:21:21:0C:98:16:68:DD:CB:A4:BC:58:FA:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6A2EB7A69B64255D2310F285637B853A7974CCDE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
Signing time: Mon 12 May 2025 16:10:15 +0000
ROA not before: Mon 12 May 2025 16:10:15 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:2e:b7:a6:9b:64:25:5d:23:10:f2:85:63:7b:85:3a:79:74:cc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:10:15 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=40999c58e435c28a7a5d5f70cb66a8fdbdb67c71ba2bca0677fd53ae86890686, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:cc:4e:76:08:c9:ea:2a:0c:16:73:c5:22:
11:29:29:90:f8:f0:2b:01:13:c6:c5:0d:17:6c:aa:
4f:c4:92:95:88:4a:03:dc:8a:7f:9a:e5:da:fa:c8:
de:e7:94:dc:64:bf:51:0d:c5:74:52:9d:d8:9f:d7:
b7:7e:61:35:82:81:41:ca:45:95:08:ec:53:d9:2c:
4e:e9:0f:69:78:94:ba:62:78:c3:25:ea:8b:d3:12:
e4:11:15:39:5a:d5:fd:ff:82:9e:96:c4:16:95:39:
f6:96:9f:3d:7e:c2:9b:18:12:d2:25:a2:29:ff:78:
e3:8d:52:c5:d2:d6:ab:95:38:0b:f8:47:a0:66:7d:
a4:11:c4:a5:28:96:4d:f4:ef:63:45:fb:19:c5:de:
c1:4c:87:52:1f:8f:e1:95:75:f4:44:a2:dd:98:b1:
6a:42:69:b5:4d:4a:8b:f5:b7:83:6e:0f:f0:72:ec:
b7:6c:c3:89:d7:31:a0:48:e3:71:bf:de:5a:44:01:
13:0f:e5:99:83:d1:64:a4:d7:3f:ef:d5:b0:fd:30:
2e:44:80:4e:2b:d0:5d:fb:9b:cb:0e:57:cc:52:75:
f3:ee:e0:cb:49:cc:ab:55:57:75:cc:42:1a:eb:bc:
d7:7d:5a:44:c3:3d:cb:90:47:9c:af:6b:29:f1:85:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9A:32:51:3C:50:9D:21:21:0C:98:16:68:DD:CB:A4:BC:58:FA:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.20.0/22
Signature Algorithm: sha256WithRSAEncryption
23:43:92:f8:0b:12:65:bf:51:78:eb:0e:bb:d6:40:da:cb:bd:
9c:db:a0:9f:c0:62:25:b3:50:24:df:a7:eb:de:b9:93:6b:32:
fd:76:5f:22:3c:2f:4d:a9:8e:57:8a:92:f1:8a:f9:f4:a0:18:
df:fc:9e:74:5f:6e:02:c0:c5:83:52:c6:9b:ad:56:21:c2:0c:
8c:ec:1a:31:55:aa:bd:53:02:60:ea:57:58:6a:d6:c1:26:97:
34:fa:52:e1:03:1e:17:77:2e:89:66:61:73:5c:de:e4:0e:7e:
00:c5:fc:00:20:d5:90:7a:b9:5a:b1:ed:fe:d8:2b:aa:2a:a1:
a2:2d:32:58:37:95:7d:dd:a7:23:4a:e3:d7:a5:20:4a:1d:c1:
0f:6e:d8:db:d6:e5:8d:fa:e2:df:4b:60:45:94:ca:f7:3e:8c:
86:c3:28:fe:25:cf:6b:3a:a6:58:f3:e5:29:b2:3e:42:8d:1b:
ff:9c:68:95:e1:5c:ca:f9:eb:83:25:0c:cd:22:c6:44:d6:0d:
32:b4:fa:50:75:aa:4d:2d:26:6a:77:61:f3:ef:84:3d:af:2e:
5f:a7:d9:f3:9c:26:64:99:1c:0d:28:24:20:f6:6b:08:6e:8f:
de:31:78:9a:d7:be:85:bd:7e:00:1b:23:6f:f1:72:ca:12:1d:
4f:33:d2:39
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUai63pptkJV0jEPKFY3uFOnl0zN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MTIxNjEwMTVaFw0yNTA2MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQwOTk5YzU4ZTQzNWMyOGE3YTVkNWY3MGNiNjZhOGZkYmRiNjdjNzFiYTJi
Y2EwNjc3ZmQ1M2FlODY4OTA2ODYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMBhzE52CMnqKgwWc8UiESkpkPjwKwETxsUNF2yqT8SSlYhKA9yKf5rl2vrI
3ueU3GS/UQ3FdFKd2J/Xt35hNYKBQcpFlQjsU9ksTukPaXiUumJ4wyXqi9MS5BEV
OVrV/f+CnpbEFpU59pafPX7CmxgS0iWiKf94441SxdLWq5U4C/hHoGZ9pBHEpSiW
TfTvY0X7GcXewUyHUh+P4ZV19ESi3ZixakJptU1Ki/W3g24P8HLst2zDidcxoEjj
cb/eWkQBEw/lmYPRZKTXP+/VsP0wLkSATivQXfubyw5XzFJ18+7gy0nMq1VXdcxC
Guu8131aRMM9y5BHnK9rKfGFOKsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQYmjJR
PFCdISEMmBZo3cukvFj6tTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjIwNDhiMWMtMzYzYi00YjU5LTlkNTYtZGM3MjE4NzE5NGEzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArAiFDAN
BgkqhkiG9w0BAQsFAAOCAQEAI0OS+AsSZb9ReOsOu9ZA2su9nNugn8BiJbNQJN+n
6965k2sy/XZfIjwvTamOV4qS8Yr59KAY3/yedF9uAsDFg1LGm61WIcIMjOwaMVWq
vVMCYOpXWGrWwSaXNPpS4QMeF3cuiWZhc1ze5A5+AMX8ACDVkHq5WrHt/tgrqiqh
oi0yWDeVfd2nI0rj16UgSh3BD27Y29bljfri30tgRZTK9z6MhsMo/iXPazqmWPPl
KbI+Qo0b/5xoleFcyvnrgyUMzSLGRNYNMrT6UHWqTS0mandh8++EPa8uX6fZ85wm
ZJkcDSgkIPZrCG6P3jF4mte+hb1+ABsjb/FyyhIdTzPSOQ==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:50 2025 by rpki-client