Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa
File: 6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa (raw, json)
Hash identifier: XvszrMV7LeQTLRtui/d3oD9cPaqQP1TkkFeTO/CPSuY=
Subject key identifier: 48:D4:01:5A:DF:DA:55:67:01:FC:E4:38:91:BB:DE:C2:C1:57:DD:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 422F97614E033D31DCD38F1AEC0C0FE1E6A77E5D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa
Signing time: Mon 31 Mar 2025 19:20:58 +0000
ROA not before: Mon 31 Mar 2025 19:20:58 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2f:97:61:4e:03:3d:31:dc:d3:8f:1a:ec:0c:0f:e1:e6:a7:7e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:20:58 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:26:02:13:11:57:40:7a:ec:c2:89:6e:1b:
ea:df:a6:c7:3f:0e:4f:71:57:f9:8b:1b:1d:7a:28:
4f:1d:19:3d:02:b7:e5:ba:3a:65:8a:d2:2e:7a:08:
a5:97:b2:55:41:48:20:f8:3a:39:a0:86:5c:04:03:
da:1f:ee:bc:e9:0b:df:7a:da:8a:44:f7:12:e4:3a:
62:97:65:1b:38:04:c5:61:a0:51:81:e4:79:22:7b:
83:38:7b:33:ff:95:7a:d2:d3:20:c7:18:29:05:94:
31:4d:81:e4:b2:37:cd:d5:5f:a2:bb:4c:d9:59:a9:
01:0d:ed:82:20:d9:ec:f8:34:be:da:f4:c3:6c:04:
f8:8a:8e:da:eb:c9:c5:f8:03:db:8c:16:3a:72:d9:
08:b9:6e:95:95:15:7a:40:a0:f2:9b:09:99:ab:f1:
3a:49:b3:30:a6:32:94:bc:33:10:ee:7d:4a:aa:8f:
94:d0:2c:00:a0:31:73:34:54:ca:9f:3f:fe:34:d1:
f9:48:e1:4f:d9:63:96:96:85:02:4c:01:b8:94:d1:
52:02:a9:79:2a:60:ec:98:1d:6d:e9:41:4b:6c:5c:
45:59:d1:1b:eb:f3:f7:29:46:e1:c5:85:52:d7:c3:
fc:90:60:82:54:33:4f:ff:a6:4b:b9:4c:99:11:7b:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:01:5A:DF:DA:55:67:01:FC:E4:38:91:BB:DE:C2:C1:57:DD:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e4d9890-b4f4-4b9e-a734-b63f515360e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4040::/48
Signature Algorithm: sha256WithRSAEncryption
33:6c:05:8d:be:97:35:3b:11:e4:cd:89:2e:56:fc:a6:b0:87:
a7:49:7d:41:61:5f:10:ee:21:fa:3c:9b:dc:93:4d:24:00:6f:
df:e1:19:49:98:48:4a:64:44:fd:8f:2a:a8:7b:85:90:47:91:
5f:bc:d5:b1:0d:19:86:c7:98:f3:af:7f:07:fc:f4:97:dc:e0:
e0:6a:d2:4e:0d:ed:1c:a4:ad:a8:25:e1:f8:48:0d:87:78:92:
b1:71:f3:d1:f8:9f:47:68:07:81:21:5e:1b:5e:b5:07:6b:f7:
53:56:77:7f:e2:9e:7e:0a:f4:c4:1e:c6:60:e2:f2:a8:d2:19:
90:1d:a5:7a:88:02:9a:43:c8:a3:dc:d9:d1:46:d7:d5:2d:72:
15:2f:aa:ee:32:95:3b:84:46:56:fa:5e:4f:dd:27:e1:85:49:
44:d4:06:15:65:1d:08:67:78:da:84:4c:64:a0:f1:9d:75:95:
07:aa:14:1f:1b:a6:18:6a:b2:3f:f4:15:27:31:fa:6a:df:81:
ee:b4:18:c0:68:ef:f6:25:2a:67:d1:f7:11:ad:1e:7b:b3:e6:
b0:b9:68:50:1a:7b:de:2d:c5:89:81:cc:66:d6:fe:a5:ce:67:
5d:6e:a0:4c:26:70:d5:59:04:cb:50:d9:90:45:7e:3f:3e:02:
3f:ca:cd:85
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUQi+XYU4DPTHc048a7AwP4eanfl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTIwNThaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk4NjlkMTczNmJiYTk1NzdiYzlkNzI2ZDE0OTJiNDQ3Yzk4ODhhMGI4NmI5
Nzg2MzVhNzIxMTk4N2QyMmMzM2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALREJgITEVdAeuzCiW4b6t+mxz8OT3FX+YsbHXooTx0ZPQK35bo6ZYrSLnoI
pZeyVUFIIPg6OaCGXAQD2h/uvOkL33raikT3EuQ6YpdlGzgExWGgUYHkeSJ7gzh7
M/+VetLTIMcYKQWUMU2B5LI3zdVfortM2VmpAQ3tgiDZ7Pg0vtr0w2wE+IqO2uvJ
xfgD24wWOnLZCLlulZUVekCg8psJmavxOkmzMKYylLwzEO59SqqPlNAsAKAxczRU
yp8//jTR+UjhT9ljlpaFAkwBuJTRUgKpeSpg7JgdbelBS2xcRVnRG+vz9ylG4cWF
UtfD/JBgglQzT/+mS7lMmRF7ZgMCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRI1AFa
39pVZwH85DiRu97CwVfdWzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmU0ZDk4OTAtYjRmNC00YjllLWE3MzQtYjYzZjUxNTM2MGUyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJA
QDANBgkqhkiG9w0BAQsFAAOCAQEAM2wFjb6XNTsR5M2JLlb8prCHp0l9QWFfEO4h
+jyb3JNNJABv3+EZSZhISmRE/Y8qqHuFkEeRX7zVsQ0ZhseY869/B/z0l9zg4GrS
Tg3tHKStqCXh+EgNh3iSsXHz0fifR2gHgSFeG161B2v3U1Z3f+Kefgr0xB7GYOLy
qNIZkB2leogCmkPIo9zZ0UbX1S1yFS+q7jKVO4RGVvpeT90n4YVJRNQGFWUdCGd4
2oRMZKDxnXWVB6oUHxumGGqyP/QVJzH6at+B7rQYwGjv9iUqZ9H3Ea0ee7PmsLlo
UBp73i3FiYHMZtb+pc5nXW6gTCZw1VkEy1DZkEV+Pz4CP8rNhQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:31 2025 by rpki-client