Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
File: b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa (raw, json)
Hash identifier: 8BNA8kbspTw+B/oFhQlZ7oNPD/8nuqi0r4b2P5gGnew=
Subject key identifier: C6:84:ED:55:4F:3B:01:59:24:77:D9:F3:EB:B1:86:BA:EE:39:17:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5F9EF9BDB83E680900655C55FA3B030AD2509ACE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
Signing time: Mon 12 May 2025 16:10:08 +0000
ROA not before: Mon 12 May 2025 16:10:08 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9e:f9:bd:b8:3e:68:09:00:65:5c:55:fa:3b:03:0a:d2:50:9a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:10:08 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=ba8c20882e1b41516cc019346b87f689cd1be36f2fbe918ed4b5c67d8e4c97dd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:d5:62:1a:3d:2b:70:98:3c:e8:f2:2e:17:
8a:3a:b9:57:b3:f3:d2:67:c4:fc:31:bd:ee:db:0a:
6f:06:33:30:0d:45:68:94:e1:dd:63:77:54:df:03:
fd:fd:1f:e9:e4:45:84:cc:00:7c:e7:41:9c:2b:cc:
8f:a4:88:c5:cd:91:ef:a9:cd:b6:22:90:10:69:5f:
52:d6:27:c7:29:2b:03:67:f4:73:1b:c9:fa:84:73:
53:73:cb:35:cc:02:c0:45:9b:be:0a:6d:f8:c8:fb:
6b:6f:45:f3:39:07:0b:43:8c:63:b7:e2:19:49:24:
f2:f8:86:8f:49:ad:2a:d8:71:0c:e9:91:5d:35:3f:
33:a5:5f:22:f1:f2:3c:f2:31:6b:f2:50:2b:f0:ef:
5f:7c:d5:6b:ae:90:c4:40:aa:c0:1c:a6:28:a6:1a:
6d:8b:97:51:2c:67:2d:f0:83:69:6e:90:03:e0:98:
8a:8b:b1:ec:5c:fc:05:6d:e1:93:b8:63:8a:98:74:
8e:d9:e8:4a:41:55:06:66:3b:f0:48:30:15:96:dd:
9f:72:4d:56:0c:aa:78:ab:a4:0a:8a:ae:f7:00:54:
e9:1d:5e:8f:4f:17:f4:c8:dd:87:ef:3d:4d:29:c5:
ab:71:9e:9b:d0:1e:3c:04:d4:77:bb:26:91:23:d9:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:ED:55:4F:3B:01:59:24:77:D9:F3:EB:B1:86:BA:EE:39:17:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b9ff392e-09c0-4b7c-bdd5-5fb1316e398e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b4:fe:de:fd:11:0d:1f:71:10:f3:9d:74:5d:0a:9c:2d:be:e8:
56:35:1c:4a:c7:f3:49:83:f0:ad:7c:a7:53:a7:da:ee:41:56:
da:99:6e:63:b2:a2:09:51:8f:03:62:ea:13:88:2c:f4:46:60:
a9:11:08:c6:07:56:2b:13:2e:15:1d:51:7b:a7:3f:fc:69:8c:
78:37:ef:da:c7:fe:38:81:1b:34:32:26:36:ad:c7:c0:47:69:
58:db:db:23:91:de:be:19:48:b5:11:2b:5e:2a:07:5d:2b:ca:
25:ab:b2:37:39:f3:65:1c:a5:05:79:b2:19:2b:79:f7:17:fb:
41:be:5f:7a:9b:53:9a:72:59:82:d8:32:e9:4f:bd:da:ed:4f:
62:81:a4:29:c7:af:f9:a9:ea:47:c7:51:7d:8a:f7:7d:71:a0:
a9:2d:40:f4:f6:9e:26:dc:35:e1:35:50:a2:3d:84:e2:4c:42:
49:1e:db:a8:a0:60:c2:ac:87:89:ca:ba:2e:1d:cd:48:7a:79:
66:a9:db:96:78:1e:27:9b:4c:ee:1e:a6:0a:a1:74:d2:39:88:
1c:2e:59:4d:90:9c:c0:83:e4:80:9c:73:69:c5:ca:7e:aa:c5:
db:62:39:cb:e3:41:f2:9f:71:f4:0f:a5:61:2a:dd:e5:2a:63:
e0:e5:29:7f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUX575vbg+aAkAZVxV+jsDCtJQms4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MTIxNjEwMDhaFw0yNTA2MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGJhOGMyMDg4MmUxYjQxNTE2Y2MwMTkzNDZiODdmNjg5Y2QxYmUzNmYyZmJl
OTE4ZWQ0YjVjNjdkOGU0Yzk3ZGQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMya1WIaPStwmDzo8i4Xijq5V7Pz0mfE/DG97tsKbwYzMA1FaJTh3WN3VN8D
/f0f6eRFhMwAfOdBnCvMj6SIxc2R76nNtiKQEGlfUtYnxykrA2f0cxvJ+oRzU3PL
NcwCwEWbvgpt+Mj7a29F8zkHC0OMY7fiGUkk8viGj0mtKthxDOmRXTU/M6VfIvHy
PPIxa/JQK/DvX3zVa66QxECqwBymKKYabYuXUSxnLfCDaW6QA+CYioux7Fz8BW3h
k7hjiph0jtnoSkFVBmY78EgwFZbdn3JNVgyqeKukCoqu9wBU6R1ej08X9Mjdh+89
TSnFq3Gem9AePATUd7smkSPZiSsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTGhO1V
TzsBWSR32fPrsYa67jkXQjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjlmZjM5MmUtMDljMC00YjdjLWJkZDUtNWZiMTMxNmUzOThlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbAgQDAN
BgkqhkiG9w0BAQsFAAOCAQEAtP7e/RENH3EQ8510XQqcLb7oVjUcSsfzSYPwrXyn
U6fa7kFW2pluY7KiCVGPA2LqE4gs9EZgqREIxgdWKxMuFR1Re6c//GmMeDfv2sf+
OIEbNDImNq3HwEdpWNvbI5HevhlItRErXioHXSvKJauyNznzZRylBXmyGSt59xf7
Qb5feptTmnJZgtgy6U+92u1PYoGkKcev+anqR8dRfYr3fXGgqS1A9PaeJtw14TVQ
oj2E4kxCSR7bqKBgwqyHicq6Lh3NSHp5ZqnblngeJ5tM7h6mCqF00jmIHC5ZTZCc
wIPkgJxzacXKfqrF22I5y+NB8p9x9A+lYSrd5Spj4OUpfw==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:25:23 2025 by rpki-client