Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
File: 819bfec2-19de-4cdb-ba40-657fff6a743e.roa (raw, json)
Hash identifier: +rmiRw+MFOS9AS8Kyr5xkuFNfLzsX+ll7WbnNbLkaP8=
Subject key identifier: 68:08:62:09:9E:9B:6C:3B:2A:3D:F5:C9:8D:0F:1B:25:4F:72:B9:19
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C2ACC11F415DD74DECBB9CBE66CCCAC53E2F2A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
Signing time: Mon 31 Mar 2025 19:51:36 +0000
ROA not before: Mon 31 Mar 2025 19:51:36 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2a:cc:11:f4:15:dd:74:de:cb:b9:cb:e6:6c:cc:ac:53:e2:f2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:51:36 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:d0:7d:df:b2:67:08:c2:23:ea:76:14:e3:
ea:34:2a:d1:cf:41:d4:af:74:f1:bd:dc:eb:06:c6:
25:1a:87:d5:1c:c8:13:53:87:90:89:4f:0a:1d:a3:
17:d5:88:97:59:14:0d:fd:36:ef:c8:e9:70:dc:fe:
0b:1a:54:5d:50:1a:9c:8a:33:93:f2:c8:14:6f:7d:
1e:99:43:68:e6:8a:3a:3b:da:25:49:ab:89:2c:5d:
c0:50:fa:05:29:30:16:ff:fc:44:d3:86:f2:6b:39:
4d:b6:c2:49:1b:82:c9:c3:af:95:b3:7b:fb:4b:a4:
e6:f7:10:26:8c:42:11:1f:bc:a0:9b:d2:c0:a9:e1:
4e:2e:3a:e5:31:fe:13:ca:19:14:52:71:13:3d:2a:
c8:9d:bf:96:28:eb:73:df:b5:93:a8:28:04:40:91:
8f:1d:de:dd:2d:9b:c6:3d:0a:5e:37:90:4e:b0:ee:
f9:f7:dc:96:90:6a:af:95:bb:fa:68:ab:9e:0a:b3:
36:d9:2a:46:53:9b:82:de:d4:b6:4d:ee:0e:aa:66:
25:98:0a:92:bb:bf:6b:06:b6:f4:51:70:03:70:c9:
c4:cd:4f:1a:ec:d6:0e:0d:fd:15:fa:63:d7:9e:1b:
4c:b3:88:23:46:2a:25:7d:90:36:51:a4:e2:c3:03:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:62:09:9E:9B:6C:3B:2A:3D:F5:C9:8D:0F:1B:25:4F:72:B9:19
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/819bfec2-19de-4cdb-ba40-657fff6a743e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:9000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:c4:40:68:db:eb:6b:8f:4f:1e:ed:09:89:6c:3f:30:cc:a4:
a3:ae:c9:16:52:66:7a:7a:74:b5:1c:f6:db:cd:91:0a:71:31:
f5:9c:14:b6:a0:fe:55:4b:9d:39:21:63:7e:73:dc:5b:0b:01:
c3:e6:09:23:e6:86:60:3c:8e:b5:c2:b0:1b:91:1e:7e:a8:c2:
14:27:1f:e4:7f:88:57:af:3b:63:ab:b3:79:ac:a5:3b:d0:15:
ad:49:03:51:f7:10:43:cd:0a:03:0d:2f:c6:6c:1e:8a:07:4f:
b6:7d:4f:00:e2:27:ab:c7:d7:5d:e0:c5:96:a8:90:02:65:be:
9f:3c:c5:e3:46:b8:59:d3:67:82:9e:f0:cd:c9:b4:64:04:96:
93:60:fc:85:60:99:65:6a:af:ae:f1:3f:4d:97:0e:33:f0:5f:
df:d1:df:38:38:60:67:98:b9:65:45:bc:25:ca:d1:f1:20:ce:
b3:a0:ab:fb:83:ea:8a:60:43:03:cc:82:d4:a9:3e:fb:d5:d4:
f7:06:70:06:a0:8f:f2:8a:ce:0c:3f:2b:4e:5e:a3:3d:ca:ff:
9e:48:d1:d5:0a:06:e2:5b:7d:cd:ba:93:5a:e3:30:de:f7:19:
f0:6e:46:77:34:ef:e8:24:1b:7f:8a:af:28:a6:40:c0:51:de:
63:fa:e5:43
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfCrMEfQV3XTey7nL5mzMrFPi8qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTUxMzZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDcxYjEwNTE4YTlhZjBhNDY5NjYyMzI5OWU4YTgwMmIyZDdiZmE0NjZhNTdh
ZmQ3OGFlMGU4MDJkMzBiYzNlMjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKqS0H3fsmcIwiPqdhTj6jQq0c9B1K908b3c6wbGJRqH1RzIE1OHkIlPCh2j
F9WIl1kUDf0278jpcNz+CxpUXVAanIozk/LIFG99HplDaOaKOjvaJUmriSxdwFD6
BSkwFv/8RNOG8ms5TbbCSRuCycOvlbN7+0uk5vcQJoxCER+8oJvSwKnhTi465TH+
E8oZFFJxEz0qyJ2/lijrc9+1k6goBECRjx3e3S2bxj0KXjeQTrDu+ffclpBqr5W7
+mirngqzNtkqRlObgt7Utk3uDqpmJZgKkru/awa29FFwA3DJxM1PGuzWDg39Ffpj
154bTLOII0YqJX2QNlGk4sMDLOsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRoCGIJ
nptsOyo99cmNDxslT3K5GTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODE5YmZlYzItMTlkZS00Y2RiLWJhNDAtNjU3ZmZmNmE3NDNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H+Q
MA0GCSqGSIb3DQEBCwUAA4IBAQALxEBo2+trj08e7QmJbD8wzKSjrskWUmZ6enS1
HPbbzZEKcTH1nBS2oP5VS505IWN+c9xbCwHD5gkj5oZgPI61wrAbkR5+qMIUJx/k
f4hXrztjq7N5rKU70BWtSQNR9xBDzQoDDS/GbB6KB0+2fU8A4ierx9dd4MWWqJAC
Zb6fPMXjRrhZ02eCnvDNybRkBJaTYPyFYJllaq+u8T9Nlw4z8F/f0d84OGBnmLll
RbwlytHxIM6zoKv7g+qKYEMDzILUqT771dT3BnAGoI/yis4MPytOXqM9yv+eSNHV
CgbiW33NupNa4zDe9xnwbkZ3NO/oJBt/iq8opkDAUd5j+uVD
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:38 2025 by rpki-client