Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9f52cd3-6be7-41a5-94ab-8d2e1de12593.roa
File: a9f52cd3-6be7-41a5-94ab-8d2e1de12593.roa (raw, json)
Hash identifier: t0cXoNBiOi6RUerQwIxEQ6IOhh45a8TjqKwFIvfm96A=
Subject key identifier: 0E:4A:4F:1B:56:52:0E:54:AC:6E:9F:41:60:E5:A5:32:BD:07:1C:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 174E61E4E8689059FEFAEB07470FEA9AF08E8353
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9f52cd3-6be7-41a5-94ab-8d2e1de12593.roa
Signing time: Mon 31 Mar 2025 19:31:05 +0000
ROA not before: Mon 31 Mar 2025 19:31:05 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:4e:61:e4:e8:68:90:59:fe:fa:eb:07:47:0f:ea:9a:f0:8e:83:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:31:05 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e4:ca:7a:90:bc:5f:57:c2:4f:84:2d:67:6a:
66:ca:9f:fd:cd:c7:41:e1:3c:29:ff:3c:b6:1c:6f:
e6:8d:48:72:e1:b4:cf:69:44:11:eb:72:af:7c:8f:
be:80:72:40:de:34:85:4d:c3:c3:c1:3f:8b:26:96:
39:71:3f:48:cf:86:df:1c:4f:ef:ed:c7:31:95:b5:
7c:88:a1:78:c6:8a:fb:d7:03:d3:70:a4:30:dd:08:
37:b0:cb:52:07:9d:ec:6f:01:f5:07:37:44:28:a8:
be:3f:50:62:9f:1f:5d:b2:5e:89:9a:64:0e:fd:2a:
42:2f:47:f0:5a:39:32:d0:b8:6d:2d:37:7e:f3:e5:
3b:4b:c6:32:d9:37:88:48:5e:ab:f6:b5:00:c6:64:
92:b7:b6:c3:4a:15:b8:57:95:a6:5a:10:91:97:b8:
ba:0b:31:66:8a:11:15:5d:0d:3c:6c:ba:d9:5e:fd:
f3:e1:10:d9:d3:5f:7b:62:2d:a4:0a:8b:17:0d:b0:
2c:bb:8a:00:62:6c:36:a4:f8:47:ab:40:2d:df:70:
ee:38:42:a7:9c:ea:0c:4d:2d:ee:ca:c9:27:76:a4:
41:ed:32:00:0f:a3:55:14:62:79:fa:59:d1:44:cb:
cf:1a:25:9f:68:29:57:5d:5d:ee:a0:6f:23:67:84:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:4F:1B:56:52:0E:54:AC:6E:9F:41:60:E5:A5:32:BD:07:1C:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9f52cd3-6be7-41a5-94ab-8d2e1de12593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:4040::/48
Signature Algorithm: sha256WithRSAEncryption
83:d3:01:5a:e6:a7:06:78:5d:06:e1:98:3e:54:84:7d:bf:82:
96:08:c8:98:dc:b1:09:cc:af:3e:2a:a1:14:23:3f:89:ec:39:
61:56:1c:eb:ef:f8:39:c5:86:f5:41:5f:79:7f:0d:c0:57:7d:
82:5a:67:d9:05:bd:11:cf:70:e3:86:d4:20:08:ea:7e:94:16:
96:82:ba:bb:19:46:fc:4f:2d:27:34:1c:c6:85:64:75:2c:7b:
71:66:6c:96:b0:26:c0:b4:66:56:d3:66:cd:62:c2:58:b4:e4:
47:1c:b9:50:9b:65:50:f6:49:43:c6:d9:2d:c3:f8:3d:0e:38:
e3:6e:80:45:bc:16:39:dd:83:fa:11:eb:00:e7:84:f2:51:76:
b4:90:47:9a:cb:ed:94:29:9d:c3:23:2b:ae:6f:b1:3c:83:d8:
92:e0:72:0f:6f:08:2c:5b:90:34:3f:d7:10:b7:56:22:62:6a:
8a:07:7a:c2:93:fd:ab:76:a0:2b:63:a8:12:f7:b6:9b:3a:dd:
94:f9:49:ff:d3:6f:74:b3:79:82:06:42:ba:22:ec:46:c2:70:
22:df:73:be:93:a3:1e:f9:f6:12:de:f0:ba:e9:b5:11:da:3a:
43:3b:55:d2:5e:54:66:15:c6:3a:14:6d:4e:78:28:fd:68:4d:
5d:c6:72:ea
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUF05h5OhokFn++usHRw/qmvCOg1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTMxMDVaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDhhZjM0NWU1ODA1ZDA3MThjODlhZjAxMmUxOGUyNWY4N2YxZmQ3ZjYzY2I5
YWM0ZTQ2YjIwYWE5YjQ3ZTQ0NzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANvkynqQvF9Xwk+ELWdqZsqf/c3HQeE8Kf88thxv5o1IcuG0z2lEEetyr3yP
voByQN40hU3Dw8E/iyaWOXE/SM+G3xxP7+3HMZW1fIiheMaK+9cD03CkMN0IN7DL
Uged7G8B9Qc3RCiovj9QYp8fXbJeiZpkDv0qQi9H8Fo5MtC4bS03fvPlO0vGMtk3
iEheq/a1AMZkkre2w0oVuFeVploQkZe4ugsxZooRFV0NPGy62V798+EQ2dNfe2It
pAqLFw2wLLuKAGJsNqT4R6tALd9w7jhCp5zqDE0t7srJJ3akQe0yAA+jVRRiefpZ
0UTLzxoln2gpV11d7qBvI2eE0dUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQOSk8b
VlIOVKxun0Fg5aUyvQccgzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTlmNTJjZDMtNmJlNy00MWE1LTk0YWItOGQyZTFkZTEyNTkzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HRA
QDANBgkqhkiG9w0BAQsFAAOCAQEAg9MBWuanBnhdBuGYPlSEfb+ClgjImNyxCcyv
PiqhFCM/iew5YVYc6+/4OcWG9UFfeX8NwFd9glpn2QW9Ec9w44bUIAjqfpQWloK6
uxlG/E8tJzQcxoVkdSx7cWZslrAmwLRmVtNmzWLCWLTkRxy5UJtlUPZJQ8bZLcP4
PQ44426ARbwWOd2D+hHrAOeE8lF2tJBHmsvtlCmdwyMrrm+xPIPYkuByD28ILFuQ
ND/XELdWImJqigd6wpP9q3agK2OoEve2mzrdlPlJ/9NvdLN5ggZCuiLsRsJwIt9z
vpOjHvn2Et7wuum1Edo6QztV0l5UZhXGOhRtTngo/WhNXcZy6g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:45 2025 by rpki-client