Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
File: 3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa (raw, json)
Hash identifier: 0OadqddqFfgRBAn5XhUgHXj91yBL6chPPil+wPnZtXg=
Subject key identifier: A9:7E:04:33:4F:23:A2:C9:03:6B:FB:47:D0:1E:B3:82:F1:86:32:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 297FFD00AD9FFB2C21AAA7F9ABBD3C748C70CD9C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
Signing time: Mon 31 Mar 2025 21:00:50 +0000
ROA not before: Mon 31 Mar 2025 21:00:50 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7f:fd:00:ad:9f:fb:2c:21:aa:a7:f9:ab:bd:3c:74:8c:70:cd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:00:50 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:38:c3:51:67:05:97:29:eb:13:fb:25:78:
5f:ee:2c:d9:8b:aa:52:41:54:e2:97:ff:43:66:50:
2c:9a:f5:d0:52:50:ef:e7:6f:03:15:1c:d3:8d:06:
02:82:3c:8e:63:65:57:b5:5a:85:df:c8:97:60:b7:
07:7a:a9:6a:c0:6b:24:04:e9:44:a8:9d:57:c5:0a:
d6:8f:91:84:0c:75:ec:6f:26:b6:c5:b4:e3:b7:44:
63:bb:90:15:7c:82:e1:6e:b8:69:1d:b1:ad:27:a0:
de:90:17:b4:67:61:1f:6f:4f:7e:5f:35:58:d8:01:
6b:dd:00:98:d3:89:ba:5c:ea:8d:93:b3:73:d3:29:
e8:e8:8c:f9:66:82:c7:09:9d:70:15:e9:07:35:45:
12:0d:e4:2e:02:b9:35:cf:70:83:1e:79:e6:a9:d9:
a7:94:27:b9:7d:00:2f:c6:08:d6:5c:4c:b7:35:54:
d2:3d:30:f2:30:cd:ae:c0:26:bd:c2:5a:07:29:86:
79:ad:1e:8f:10:83:35:12:1a:ce:54:08:54:db:39:
de:c8:20:88:47:4e:a1:b2:55:34:89:a5:2e:b2:d4:
82:f8:39:7a:4a:0b:f1:4f:57:68:b1:ae:0f:f2:1f:
b9:8a:58:6b:a9:86:8f:11:e6:06:14:e0:53:a5:82:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7E:04:33:4F:23:A2:C9:03:6B:FB:47:D0:1E:B3:82:F1:86:32:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036::/32
Signature Algorithm: sha256WithRSAEncryption
05:ae:ac:12:99:38:a6:f7:92:75:94:f9:cf:5b:b5:e2:79:81:
9b:d6:fe:2c:7a:f3:f9:c9:fb:18:45:b1:f7:c6:cf:11:bb:13:
ef:26:e0:47:95:c4:e0:9b:da:8b:8d:07:ad:9f:b8:8d:2b:45:
56:00:b7:2b:0f:7c:4d:94:d4:87:cc:37:3c:52:e5:5d:3b:29:
ef:a2:31:75:a4:b6:61:99:70:23:d1:db:86:98:23:11:eb:64:
dd:4f:1c:0c:cf:a1:e4:04:52:1d:ea:15:de:5d:ce:bb:1a:4e:
24:fc:08:b3:8e:67:91:ca:94:b3:60:3a:f3:22:aa:11:14:e6:
65:b3:9a:26:aa:d6:c1:49:8b:7b:8c:d8:19:53:f0:38:27:e3:
c3:35:2a:fc:8b:4f:3a:86:a2:33:62:a2:e5:4d:a2:e0:ce:17:
58:df:26:8a:f6:0c:09:c1:8c:f1:96:d6:e9:e9:bd:e0:fa:2b:
c8:26:88:36:45:aa:26:28:ea:64:dc:45:8b:ca:7b:3a:8d:90:
dc:85:d6:38:a9:76:ad:96:ad:62:5a:1c:51:a6:ad:ef:f7:0c:
03:5c:c9:65:cb:93:6f:fc:d3:12:64:ef:93:cf:95:de:49:21:
c3:58:8d:2b:cb:9a:89:e8:e1:e7:96:bb:8f:bc:27:26:bc:27:
94:35:0d:67
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUKX/9AK2f+ywhqqf5q708dIxwzZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMTAwNTBaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDhlOGJkNzE3MjcwYjBhYjQ3MjBkNTZhNGFhNWRmMDM0MTM1YWI3ODE4ZWQz
ZTc5NzM2ZDAzOTM2Yzg0ZTc4NGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ6/OMNRZwWXKesT+yV4X+4s2YuqUkFU4pf/Q2ZQLJr10FJQ7+dvAxUc040G
AoI8jmNlV7Vahd/Il2C3B3qpasBrJATpRKidV8UK1o+RhAx17G8mtsW047dEY7uQ
FXyC4W64aR2xrSeg3pAXtGdhH29Pfl81WNgBa90AmNOJulzqjZOzc9Mp6OiM+WaC
xwmdcBXpBzVFEg3kLgK5Nc9wgx555qnZp5QnuX0AL8YI1lxMtzVU0j0w8jDNrsAm
vcJaBymGea0ejxCDNRIazlQIVNs53sggiEdOobJVNImlLrLUgvg5ekoL8U9XaLGu
D/IfuYpYa6mGjxHmBhTgU6WC7q8CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBSpfgQz
TyOiyQNr+0fQHrOC8YYy+zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
M2ExNWFmMzktNjgxOC00ZWViLWJiYWYtMjgzYjdiZmZmYmE5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF0DYw
DQYJKoZIhvcNAQELBQADggEBAAWurBKZOKb3knWU+c9bteJ5gZvW/ix68/nJ+xhF
sffGzxG7E+8m4EeVxOCb2ouNB62fuI0rRVYAtysPfE2U1IfMNzxS5V07Ke+iMXWk
tmGZcCPR24aYIxHrZN1PHAzPoeQEUh3qFd5dzrsaTiT8CLOOZ5HKlLNgOvMiqhEU
5mWzmiaq1sFJi3uM2BlT8Dgn48M1KvyLTzqGojNiouVNouDOF1jfJor2DAnBjPGW
1unpveD6K8gmiDZFqiYo6mTcRYvKezqNkNyF1jipdq2WrWJaHFGmre/3DANcyWXL
k2/80xJk75PPld5JIcNYjSvLmono4eeWu4+8Jya8J5Q1DWc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:04 2025 by rpki-client