Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/207860c2-8f39-42e7-9631-e06b6a545c7d.roa
File: 207860c2-8f39-42e7-9631-e06b6a545c7d.roa (raw, json)
Hash identifier: ghF/JQN86JVdQTh2aUGdWviiDM++imdYOV2gOYL7fR0=
Subject key identifier: E3:A5:24:E7:37:5A:EC:C3:3F:D3:54:17:3E:17:BE:30:5F:DE:36:79
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67FFBA002B09ACAB3C273C292864B5D864C450A2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/207860c2-8f39-42e7-9631-e06b6a545c7d.roa
Signing time: Mon 31 Mar 2025 19:31:37 +0000
ROA not before: Mon 31 Mar 2025 19:31:37 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ff:ba:00:2b:09:ac:ab:3c:27:3c:29:28:64:b5:d8:64:c4:50:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:31:37 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:e1:05:f4:43:ae:95:4c:ec:6e:e8:4b:4a:
de:50:de:c0:d4:fb:7e:cf:70:75:d4:ad:e2:1b:51:
a8:49:a9:8f:06:a5:ef:08:6e:59:37:4d:3d:f9:10:
4a:87:a5:e7:dd:a5:89:21:1f:a7:89:84:dc:0a:19:
40:4e:e3:04:3e:28:31:4f:6c:eb:df:fd:7b:12:11:
fe:66:95:81:d9:17:38:cc:b7:e7:58:d4:e2:e5:9b:
c7:50:46:9d:5e:c9:cb:69:bb:1e:45:54:91:2e:7d:
86:b8:55:db:a6:e8:40:86:42:43:7d:1f:e4:00:3e:
7a:a9:78:bf:ac:21:b3:07:a5:a1:73:4c:ae:90:82:
d3:77:79:76:d0:d6:2d:08:3a:d9:a6:54:26:34:ad:
b1:6b:41:01:50:5a:5c:67:d3:1d:95:43:ed:11:43:
bc:78:01:97:c8:91:24:b5:a1:4f:c1:be:77:44:7e:
3f:4d:88:d4:a9:a3:db:c0:3e:fb:71:a2:b6:d7:fe:
84:36:9c:3d:47:9a:cb:c2:c8:03:9d:c1:09:66:8c:
5d:40:bd:0b:8b:a6:9f:57:ee:bf:b5:c8:99:06:f6:
e0:6d:30:03:d8:39:e1:3b:b3:a2:e6:03:81:d6:09:
a4:a8:4e:de:48:cc:e4:ca:44:fb:2b:b5:d0:b9:f2:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:24:E7:37:5A:EC:C3:3F:D3:54:17:3E:17:BE:30:5F:DE:36:79
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/207860c2-8f39-42e7-9631-e06b6a545c7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
8e:f2:93:fc:78:7c:01:8d:d0:81:1e:20:1b:90:0e:8f:e6:fa:
df:f5:d5:a1:6d:25:96:92:ac:b0:69:2f:4a:8c:47:a1:3e:87:
91:8f:f9:e2:22:37:96:c6:3b:45:66:f5:29:76:5a:f2:ce:02:
41:51:f8:e4:26:0f:62:52:b1:2b:af:29:af:e4:34:02:18:a5:
8e:b2:d1:4e:db:d1:63:0e:c3:13:88:06:e9:57:8d:89:a6:c2:
d1:3d:94:27:02:87:b8:9f:30:da:65:97:30:e0:6c:f4:5a:a7:
a0:99:85:42:43:a4:f9:35:7f:72:a5:56:aa:4d:0f:40:4e:7e:
3e:48:0c:e1:88:7a:15:2c:28:b1:01:7f:02:3e:28:0e:11:5b:
13:8c:82:20:9f:48:08:75:6a:ba:80:44:9f:b7:e5:4f:b1:d8:
1e:24:2a:37:b0:10:92:d0:5a:f2:47:37:35:d4:62:c7:3e:83:
f0:d8:68:99:0f:bc:d4:d8:f2:8e:1b:fb:33:20:71:d6:ba:dc:
10:38:8a:dc:33:11:7b:d6:9d:4b:fb:ad:81:75:b0:7b:89:f4:
3d:f1:ef:62:57:fb:60:6b:80:42:49:e3:17:0e:0c:3e:fa:bf:
86:2a:67:0a:55:68:b4:8d:46:b3:af:c3:ca:f0:2d:16:35:91:
ad:53:8b:09
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUZ/+6ACsJrKs8JzwpKGS12GTEUKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTMxMzdaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDA3OTNjNjFhMjlmMjI3MTQ5ZDE0NmU4ZTkzMmEyNzA0ODQxNzEzZGI5Zjlh
Y2ZiZWNiNmU0MmE3ZmIxYTNjMzYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMzV4QX0Q66VTOxu6EtK3lDewNT7fs9wddSt4htRqEmpjwal7whuWTdNPfkQ
Soel592liSEfp4mE3AoZQE7jBD4oMU9s69/9exIR/maVgdkXOMy351jU4uWbx1BG
nV7Jy2m7HkVUkS59hrhV26boQIZCQ30f5AA+eql4v6whsweloXNMrpCC03d5dtDW
LQg62aZUJjStsWtBAVBaXGfTHZVD7RFDvHgBl8iRJLWhT8G+d0R+P02I1Kmj28A+
+3Gittf+hDacPUeay8LIA53BCWaMXUC9C4umn1fuv7XImQb24G0wA9g54TuzouYD
gdYJpKhO3kjM5MpE+yu10LnyuMsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTjpSTn
N1rswz/TVBc+F74wX942eTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjA3ODYwYzItOGYzOS00MmU3LTk2MzEtZTA2YjZhNTQ1YzdkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DFg
wDANBgkqhkiG9w0BAQsFAAOCAQEAjvKT/Hh8AY3QgR4gG5AOj+b63/XVoW0llpKs
sGkvSoxHoT6HkY/54iI3lsY7RWb1KXZa8s4CQVH45CYPYlKxK68pr+Q0AhiljrLR
TtvRYw7DE4gG6VeNiabC0T2UJwKHuJ8w2mWXMOBs9FqnoJmFQkOk+TV/cqVWqk0P
QE5+PkgM4Yh6FSwosQF/Aj4oDhFbE4yCIJ9ICHVquoBEn7flT7HYHiQqN7AQktBa
8kc3NdRixz6D8NhomQ+81Njyjhv7MyBx1rrcEDiK3DMRe9adS/utgXWwe4n0PfHv
Ylf7YGuAQknjFw4MPvq/hipnClVotI1Gs6/DyvAtFjWRrVOLCQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:48 2025 by rpki-client