Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
File: 27140a0d-612c-4da4-a60a-55c28faff6fe.roa (raw, json)
Hash identifier: xOqWplE+kHWswDR9tS00kDdqiD/TPIC9GpuJGeP32dQ=
Subject key identifier: 6B:B0:68:1A:AC:D9:0D:04:CE:DD:28:D5:E5:60:4E:AC:3A:04:21:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 22EF9BC5683EF970D8CB5F996E4FE56CADA85BDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
Signing time: Wed 02 Apr 2025 00:30:36 +0000
ROA not before: Wed 02 Apr 2025 00:30:36 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ef:9b:c5:68:3e:f9:70:d8:cb:5f:99:6e:4f:e5:6c:ad:a8:5b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:30:36 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:0b:b1:09:ed:e5:1b:b9:7f:1f:71:d0:bf:
34:25:02:e1:86:6e:02:5a:1a:65:e2:71:ce:ab:68:
cb:3e:23:87:9f:49:d3:cb:67:2e:ca:aa:f9:2c:37:
16:be:02:34:35:5d:82:64:2c:c8:22:05:5c:72:67:
d6:dc:23:3f:71:fe:07:88:f4:49:0e:76:f7:43:07:
cd:49:8e:63:ca:9a:bb:e4:8f:ec:67:12:06:70:c7:
62:67:8a:a7:f5:40:89:2d:ba:d7:51:bc:dd:17:6e:
09:83:cb:ca:7d:e7:86:9b:90:88:d7:46:84:8a:be:
31:21:e2:3e:d1:46:7c:90:04:df:0e:f5:f9:58:2e:
c3:8b:a2:f0:89:79:2b:ed:21:1c:92:64:e7:9c:e8:
c9:48:2d:f3:c1:e0:29:64:69:9c:06:a8:03:cd:e9:
85:ff:76:12:65:54:63:76:ca:63:41:20:3f:fb:6f:
a4:62:7b:9c:e8:05:5d:14:fc:6b:ce:9c:5b:ca:bd:
c5:37:8b:6e:3a:da:e2:07:c5:07:9e:d1:07:2c:f7:
88:4d:f0:05:7c:2c:48:43:8f:15:0c:4f:1d:bc:47:
54:91:13:f6:b5:52:e8:75:1a:a5:09:c8:23:57:28:
63:30:06:aa:10:09:ef:00:11:e4:63:39:b3:17:31:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B0:68:1A:AC:D9:0D:04:CE:DD:28:D5:E5:60:4E:AC:3A:04:21:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27140a0d-612c-4da4-a60a-55c28faff6fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
c6:46:c3:24:88:86:8b:af:07:f3:7c:ed:be:3a:d4:41:14:84:
86:3a:65:53:5b:07:48:64:a8:51:7c:d9:0e:37:b7:d2:bc:61:
fa:f7:1a:1f:ab:c5:cf:45:30:6b:c9:02:2a:ff:89:d1:bb:86:
52:93:d6:75:8e:b0:a8:74:8e:a0:0f:ca:d9:ee:8a:76:7c:1c:
ce:12:de:b8:a5:47:33:e4:46:89:85:74:17:2f:78:e8:5f:f7:
88:54:87:47:45:d6:93:14:04:dc:c1:f3:1e:85:ff:cf:fb:50:
e3:b2:f2:2e:1d:6a:02:25:b9:2b:ae:9a:46:eb:a6:9a:9c:b9:
a3:ba:6d:00:e4:f4:88:bf:3e:a7:49:2a:7a:7d:4a:46:91:f2:
13:5b:4b:83:55:68:d1:50:93:89:b7:6b:a2:93:4d:58:a5:70:
66:56:27:7f:cc:f3:12:77:db:0d:a6:98:c7:e9:06:f6:09:49:
c8:1c:b5:23:fe:42:42:5c:cd:b7:38:41:3c:12:61:0c:c3:50:
36:4c:b4:36:82:1f:0e:1e:b5:ac:e2:d0:47:80:e8:a3:e1:0f:
17:4e:ca:89:0c:7d:cf:9a:cd:39:1c:42:60:e1:5a:c1:20:fe:
40:a7:74:8d:b8:9e:28:0d:1d:ac:19:44:04:f8:aa:d5:1a:82:
05:59:d2:6a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIu+bxWg++XDYy1+Zbk/lbK2oW90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MDIwMDMwMzZaFw0yNTA1MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDVjNzc1YzAwOTM5MmI2YTM4MTM5ODdhNzMzOGU3ZTk3ZTA5NDlkODg1NjNk
ODEzYmIzNjA1NmE1ZTQzZDQ0ZDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMyBC7EJ7eUbuX8fcdC/NCUC4YZuAloaZeJxzqtoyz4jh59J08tnLsqq+Sw3
Fr4CNDVdgmQsyCIFXHJn1twjP3H+B4j0SQ5290MHzUmOY8qau+SP7GcSBnDHYmeK
p/VAiS2611G83RduCYPLyn3nhpuQiNdGhIq+MSHiPtFGfJAE3w71+Vguw4ui8Il5
K+0hHJJk55zoyUgt88HgKWRpnAaoA83phf92EmVUY3bKY0EgP/tvpGJ7nOgFXRT8
a86cW8q9xTeLbjra4gfFB57RByz3iE3wBXwsSEOPFQxPHbxHVJET9rVS6HUapQnI
I1coYzAGqhAJ7wAR5GM5sxcxUXcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRrsGga
rNkNBM7dKNXlYE6sOgQhJzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjcxNDBhMGQtNjEyYy00ZGE0LWE2MGEtNTVjMjhmYWZmNmZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G9Q
MA0GCSqGSIb3DQEBCwUAA4IBAQDGRsMkiIaLrwfzfO2+OtRBFISGOmVTWwdIZKhR
fNkON7fSvGH69xofq8XPRTBryQIq/4nRu4ZSk9Z1jrCodI6gD8rZ7op2fBzOEt64
pUcz5EaJhXQXL3joX/eIVIdHRdaTFATcwfMehf/P+1DjsvIuHWoCJbkrrppG66aa
nLmjum0A5PSIvz6nSSp6fUpGkfITW0uDVWjRUJOJt2uik01YpXBmVid/zPMSd9sN
ppjH6Qb2CUnIHLUj/kJCXM23OEE8EmEMw1A2TLQ2gh8OHrWs4tBHgOij4Q8XTsqJ
DH3Pms05HEJg4VrBIP5Ap3SNuJ4oDR2sGUQE+KrVGoIFWdJq
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:44 2025 by rpki-client