Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
File: b92d2073-fe74-4c3d-87a9-37106f766cba.roa (raw, json)
Hash identifier: HZRZIKTAFPuBuD4sIA6Iv90r+Iyz2xTFE2qckWg6drA=
Subject key identifier: 8C:06:E9:37:16:57:29:FF:A2:33:1C:A2:B9:17:CE:EF:12:47:0D:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16F479D2D7903F6D82FE88DA38C424AF304AD1BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
Signing time: Mon 31 Mar 2025 19:31:43 +0000
ROA not before: Mon 31 Mar 2025 19:31:43 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f4:79:d2:d7:90:3f:6d:82:fe:88:da:38:c4:24:af:30:4a:d1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:31:43 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:67:2f:f3:87:29:aa:ec:0b:bc:8b:00:bd:
79:4f:84:3f:2b:20:82:2a:66:04:c5:09:ac:de:43:
32:2d:74:c0:31:fe:2f:fe:17:95:ca:03:c5:0c:6b:
16:37:fb:db:42:7d:b0:f0:4f:d4:5c:98:f8:7c:12:
e9:3d:b9:5a:ba:27:fb:5f:72:fd:3c:4e:96:71:2f:
9b:b7:81:f0:3a:28:c4:e3:aa:5b:a1:2d:c2:aa:73:
a5:1d:50:67:be:a2:2d:41:df:78:bc:c7:03:d1:45:
45:a6:78:eb:ae:95:86:09:cb:a4:ae:ef:81:e9:3c:
d8:ec:41:ee:92:cb:db:04:f3:bd:69:cc:92:3c:7f:
ae:7e:fa:3c:f5:cd:e8:70:22:c7:02:07:cd:79:1f:
70:bb:fa:83:47:22:f7:b0:da:b9:bb:3d:8a:c5:b4:
b7:9b:84:52:37:30:94:d5:35:1c:c8:0a:45:f7:57:
65:ad:2c:54:d4:8b:eb:09:c2:6b:4a:9d:23:97:63:
06:d5:78:83:39:d4:9c:39:36:94:1f:07:16:5a:65:
08:4f:d5:55:80:f4:60:c8:b1:5e:a3:52:84:60:41:
aa:4d:12:9b:55:5a:c6:33:39:20:4d:34:cc:f2:fa:
57:04:c3:11:b3:78:85:8d:7a:ea:f3:cf:83:9d:48:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:E9:37:16:57:29:FF:A2:33:1C:A2:B9:17:CE:EF:12:47:0D:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8060::/48
Signature Algorithm: sha256WithRSAEncryption
0e:99:74:c0:1a:78:ac:6c:60:85:b6:fa:c7:b9:b3:a4:78:aa:
70:c7:80:01:e5:f2:b6:c3:d6:81:d1:45:8d:92:55:4f:2e:6a:
0e:c9:f8:6c:32:76:69:3e:30:ea:9e:9d:2d:40:28:a2:f8:e9:
47:96:12:df:d4:d5:be:64:1c:3e:71:ac:51:07:f0:66:6c:57:
80:6d:10:ce:e2:cd:a3:9c:7a:dc:89:23:78:76:0d:f5:f3:03:
56:d2:9a:22:1a:a1:c5:5a:6f:ce:d8:2c:1a:11:53:94:e0:f3:
b5:94:59:95:b5:90:0a:8e:fb:5f:38:66:c2:f1:36:08:c2:80:
7a:12:ab:18:e6:6f:56:1e:33:b9:cf:30:b9:cb:a8:7f:04:ed:
a0:4d:43:1e:65:54:e4:d2:be:ed:1b:0c:40:8d:b6:27:39:5f:
52:be:ff:a0:06:4d:f2:05:4c:86:0e:ac:53:04:28:ff:32:d4:
d0:7b:a4:fe:f4:f1:57:1a:cb:c0:c1:28:81:f2:0e:2d:13:a0:
68:a5:10:40:b1:fe:2c:04:f7:ee:dd:55:89:82:32:64:93:f0:
15:a5:e8:40:fe:b0:41:60:ab:71:8e:7d:f0:9b:54:79:45:f4:
43:c3:88:0a:9b:b3:3c:5a:41:83:03:01:19:ce:c9:66:3a:9f:
d3:f2:c3:c1
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUFvR50teQP22C/ojaOMQkrzBK0b8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTMxNDNaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDYyN2VjMjFjYzc2YzNhOWVlNDVjODczMjIxMjRjYmJhNGYwZTNhZjAwZDVj
ZjRlZjI0YmJhYzFkZjg3NjAyYmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMJjZy/zhymq7Au8iwC9eU+EPysggipmBMUJrN5DMi10wDH+L/4XlcoDxQxr
Fjf720J9sPBP1FyY+HwS6T25Wron+19y/TxOlnEvm7eB8DooxOOqW6EtwqpzpR1Q
Z76iLUHfeLzHA9FFRaZ4666VhgnLpK7vgek82OxB7pLL2wTzvWnMkjx/rn76PPXN
6HAixwIHzXkfcLv6g0ci97Daubs9isW0t5uEUjcwlNU1HMgKRfdXZa0sVNSL6wnC
a0qdI5djBtV4gznUnDk2lB8HFlplCE/VVYD0YMixXqNShGBBqk0Sm1VaxjM5IE00
zPL6VwTDEbN4hY166vPPg51Id1cCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSMBuk3
Flcp/6IzHKK5F87vEkcNljAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjkyZDIwNzMtZmU3NC00YzNkLTg3YTktMzcxMDZmNzY2Y2JhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACA
YDANBgkqhkiG9w0BAQsFAAOCAQEADpl0wBp4rGxghbb6x7mzpHiqcMeAAeXytsPW
gdFFjZJVTy5qDsn4bDJ2aT4w6p6dLUAoovjpR5YS39TVvmQcPnGsUQfwZmxXgG0Q
zuLNo5x63IkjeHYN9fMDVtKaIhqhxVpvztgsGhFTlODztZRZlbWQCo77XzhmwvE2
CMKAehKrGOZvVh4zuc8wucuofwTtoE1DHmVU5NK+7RsMQI22JzlfUr7/oAZN8gVM
hg6sUwQo/zLU0Huk/vTxVxrLwMEogfIOLROgaKUQQLH+LAT37t1ViYIyZJPwFaXo
QP6wQWCrcY598JtUeUX0Q8OICpuzPFpBgwMBGc7JZjqf0/LDwQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:34 2025 by rpki-client