Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58380c09-9a88-4034-951d-fc94a6187f3a.roa
File: 58380c09-9a88-4034-951d-fc94a6187f3a.roa (raw, json)
Hash identifier: RyDBiXjhswO+wGEI4V2brEgnguxFsLV1Oy5SCNjFGLA=
Subject key identifier: A3:7D:C0:B4:E8:12:A4:AB:89:DD:E2:2A:9A:BD:6C:85:B2:BF:54:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13D8367415CBBA3364A316784EA3F77D82379813
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58380c09-9a88-4034-951d-fc94a6187f3a.roa
Signing time: Mon 31 Mar 2025 19:21:26 +0000
ROA not before: Mon 31 Mar 2025 19:21:26 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d8:36:74:15:cb:ba:33:64:a3:16:78:4e:a3:f7:7d:82:37:98:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:21:26 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:bf:a3:a9:86:f1:e3:77:14:62:7c:80:ff:
35:35:da:5d:fd:ec:13:e3:11:dd:70:4d:7a:7a:28:
0a:69:91:63:1f:ac:61:43:4c:ca:6f:22:55:26:de:
35:21:1b:ca:8b:e7:2f:b3:e2:7c:34:98:30:fb:31:
95:e6:22:69:2c:12:fa:b0:61:f1:4e:6e:da:15:27:
61:74:bb:40:32:54:37:16:dd:d3:32:f9:2b:50:df:
f8:ad:ea:72:df:d4:c5:24:b2:56:5f:2d:0a:fd:39:
38:3b:90:d2:0f:ed:ba:6e:f3:26:ae:91:a0:9e:40:
da:02:54:6c:2c:45:5f:fd:b7:f9:fe:6c:7b:3a:38:
ce:89:ef:e8:8f:82:da:67:97:7f:74:c1:5c:2a:31:
17:f8:a1:79:50:bf:bf:c4:50:cf:69:0a:43:f6:bd:
7e:57:ce:46:19:be:96:c0:7c:50:ee:3b:2a:6f:05:
6b:85:18:5a:39:b0:c5:e9:95:20:2d:88:a5:22:d1:
63:5c:a8:9b:7c:a4:b8:65:03:fe:6d:b4:7b:aa:1d:
ee:70:1d:8a:7b:94:3d:f4:22:88:4d:90:14:e6:51:
a0:00:95:a1:1e:8f:be:45:6c:a4:5d:9b:87:7a:72:
0c:1a:27:76:9b:8a:4b:fd:04:0e:cb:fa:6d:d9:92:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7D:C0:B4:E8:12:A4:AB:89:DD:E2:2A:9A:BD:6C:85:B2:BF:54:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58380c09-9a88-4034-951d-fc94a6187f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
22:bb:7a:f0:31:1a:62:3e:27:23:7a:35:23:51:e1:0d:bf:6f:
90:21:dc:5a:76:f4:69:43:9a:c1:ee:d5:91:f5:b8:91:40:74:
8a:d4:d9:bc:2c:4a:2e:53:0a:06:98:1a:90:59:31:e1:b9:7c:
94:1f:90:00:79:de:e8:39:10:ac:6d:c1:e3:e2:cd:ed:72:4d:
20:2a:45:3f:af:98:58:2e:26:a6:f6:82:5f:3a:7e:42:3d:59:
63:cd:a0:35:72:ce:0b:b8:fe:7c:63:41:a1:fa:77:e0:5e:33:
16:91:e6:94:a3:c5:49:18:ed:80:1a:5f:ff:a2:2e:38:aa:82:
6f:e4:64:5f:76:90:66:74:b3:8f:77:16:05:07:9f:5d:d6:d3:
7d:7b:a0:b5:57:22:cb:d8:f8:96:ee:a3:b6:49:46:22:4b:23:
ad:69:c5:e4:1b:ae:7b:35:5c:25:c0:0f:15:95:ad:1b:e7:67:
df:e1:bb:5c:e3:5d:fc:82:99:ad:78:4b:39:fb:a6:b8:c0:31:
8e:7e:2d:e9:80:34:41:5d:d0:96:ea:bb:ae:33:d1:a2:f8:98:
86:89:6e:3f:f7:9b:1c:d2:98:a9:57:71:34:f4:35:05:fe:6b:
51:3c:91:49:5b:8b:5c:7a:c9:4c:55:ed:90:90:79:2e:53:54:
a7:e6:4c:ab
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUE9g2dBXLujNkoxZ4TqP3fYI3mBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTIxMjZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk3NDZlMWM1Y2ExZDM5NjQ2MGEwOTI2Y2M3Yzg3N2IwNTZmZDdlNDU5NGJj
M2RjZGQyNWVmNWJiMjU5YzViZGUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK5Jv6OphvHjdxRifID/NTXaXf3sE+MR3XBNenooCmmRYx+sYUNMym8iVSbe
NSEbyovnL7PifDSYMPsxleYiaSwS+rBh8U5u2hUnYXS7QDJUNxbd0zL5K1Df+K3q
ct/UxSSyVl8tCv05ODuQ0g/tum7zJq6RoJ5A2gJUbCxFX/23+f5sezo4zonv6I+C
2meXf3TBXCoxF/iheVC/v8RQz2kKQ/a9flfORhm+lsB8UO47Km8Fa4UYWjmwxemV
IC2IpSLRY1yom3ykuGUD/m20e6od7nAdinuUPfQiiE2QFOZRoACVoR6PvkVspF2b
h3pyDBondpuKS/0EDsv6bdmS32kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSjfcC0
6BKkq4nd4iqavWyFsr9UGzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTgzODBjMDktOWE4OC00MDM0LTk1MWQtZmM5NGE2MTg3ZjNhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HTA
wDANBgkqhkiG9w0BAQsFAAOCAQEAIrt68DEaYj4nI3o1I1HhDb9vkCHcWnb0aUOa
we7VkfW4kUB0itTZvCxKLlMKBpgakFkx4bl8lB+QAHne6DkQrG3B4+LN7XJNICpF
P6+YWC4mpvaCXzp+Qj1ZY82gNXLOC7j+fGNBofp34F4zFpHmlKPFSRjtgBpf/6Iu
OKqCb+RkX3aQZnSzj3cWBQefXdbTfXugtVciy9j4lu6jtklGIksjrWnF5BuuezVc
JcAPFZWtG+dn3+G7XONd/IKZrXhLOfumuMAxjn4t6YA0QV3Qluq7rjPRoviYholu
P/ebHNKYqVdxNPQ1Bf5rUTyRSVuLXHrJTFXtkJB5LlNUp+ZMqw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:52 2025 by rpki-client