Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad2460c-8206-4534-9b9b-355c2d524858.roa
File: bad2460c-8206-4534-9b9b-355c2d524858.roa (raw, json)
Hash identifier: 0/e2vGAOVV/nIjIlpYG3JWiC7CAYNIBwxrBHCS+jaTc=
Subject key identifier: 4D:29:D3:CB:83:DA:57:4D:4B:52:74:0D:8D:21:2E:A5:85:EA:AD:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E095CC23419DDB60F34AC079943C8D457203023
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad2460c-8206-4534-9b9b-355c2d524858.roa
Signing time: Mon 31 Mar 2025 20:51:40 +0000
ROA not before: Mon 31 Mar 2025 20:51:40 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:09:5c:c2:34:19:dd:b6:0f:34:ac:07:99:43:c8:d4:57:20:30:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:51:40 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=5e9b153ba0f262dfe57f8557f31dacc3a8f40083f8c76cfe51d93be25036ff42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:44:26:a7:1b:e7:95:c5:e3:8e:03:90:40:d3:
e4:08:b4:0d:43:fd:1f:8a:48:be:20:d7:e0:bf:66:
b3:0c:ac:62:90:57:90:f9:95:de:9d:52:87:49:36:
8c:1f:d3:af:a8:02:20:ec:d3:f9:8a:ee:76:1b:d7:
34:d8:bf:16:dc:90:59:37:ec:82:db:8c:2c:3c:26:
5a:07:a7:e3:11:6d:55:66:11:62:7e:fd:38:c2:a7:
f7:4e:7e:a3:62:e1:1d:cb:1a:89:ad:21:4e:19:a4:
3b:84:62:53:c6:59:c2:46:1a:4c:c0:1e:25:35:bf:
63:fa:72:ea:66:eb:7d:a8:c1:cb:82:9d:8f:7b:71:
74:8f:06:45:95:be:85:98:cc:fb:e0:d1:a9:73:62:
73:ca:8e:33:47:7a:a4:7a:ab:c2:e2:1a:78:94:32:
a8:3d:27:83:07:81:f2:37:44:32:02:06:61:38:68:
77:fe:53:30:85:11:40:e0:9d:23:61:cf:a8:da:e6:
7a:f1:54:88:52:65:ac:b6:64:66:ea:36:be:f4:2f:
c4:52:d3:61:53:24:cf:fa:e5:ae:73:fc:b0:fe:10:
a9:0e:7b:55:88:61:aa:43:a5:f2:6a:ca:1d:d0:16:
0b:56:89:18:57:96:37:47:b7:a1:ec:fc:bb:f1:12:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:29:D3:CB:83:DA:57:4D:4B:52:74:0D:8D:21:2E:A5:85:EA:AD:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bad2460c-8206-4534-9b9b-355c2d524858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:6000::/40
Signature Algorithm: sha256WithRSAEncryption
8c:08:95:1e:35:de:bd:c2:00:62:fe:ee:f6:75:ca:2b:b8:68:
aa:2b:12:2b:d9:5e:2c:92:ef:a8:91:67:4a:e2:b0:52:9d:9c:
96:8f:72:02:d5:b4:fe:63:ed:47:a3:62:29:64:c0:37:f6:04:
f8:bc:06:d0:69:a1:df:59:c0:ad:be:2d:03:f8:5a:f8:df:27:
ac:29:f5:7d:f8:89:bf:b8:9f:3f:50:bb:4e:f1:b7:41:eb:19:
fb:99:6a:8b:9a:dc:e7:38:ba:6f:9d:16:d6:72:73:71:eb:1f:
1a:fe:c6:59:3f:b6:b9:a1:df:b5:71:f8:84:19:24:0c:18:17:
06:14:c8:fc:da:ca:7d:93:36:ea:6d:4e:a5:1f:a8:6b:22:38:
74:a7:8f:ff:ec:3b:e1:fc:37:d7:cd:54:ea:92:79:73:f3:01:
16:44:60:29:41:3d:bc:d5:93:9f:c3:ae:19:e2:8d:18:de:ae:
66:26:bd:2f:b7:13:df:2e:3b:a7:25:23:98:73:f5:8a:1b:38:
1e:ec:50:67:3e:a5:2c:07:97:58:46:cf:b0:08:33:5e:3d:1c:
0c:33:15:ed:6b:f6:21:60:05:07:e7:9b:1d:76:06:c9:ff:c0:
c1:6d:31:93:50:90:e4:05:5f:49:d2:1c:81:f6:52:6a:8d:ea:
c2:4a:1c:38
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUfglcwjQZ3bYPNKwHmUPI1FcgMCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMDUxNDBaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDVlOWIxNTNiYTBmMjYyZGZlNTdmODU1N2YzMWRhY2MzYThmNDAwODNmOGM3
NmNmZTUxZDkzYmUyNTAzNmZmNDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPlEJqcb55XF444DkEDT5Ai0DUP9H4pIviDX4L9mswysYpBXkPmV3p1Sh0k2
jB/Tr6gCIOzT+YrudhvXNNi/FtyQWTfsgtuMLDwmWgen4xFtVWYRYn79OMKn905+
o2LhHcsaia0hThmkO4RiU8ZZwkYaTMAeJTW/Y/py6mbrfajBy4Kdj3txdI8GRZW+
hZjM++DRqXNic8qOM0d6pHqrwuIaeJQyqD0ngweB8jdEMgIGYThod/5TMIURQOCd
I2HPqNrmevFUiFJlrLZkZuo2vvQvxFLTYVMkz/rlrnP8sP4QqQ57VYhhqkOl8mrK
HdAWC1aJGFeWN0e3oez8u/ESGlUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRNKdPL
g9pXTUtSdA2NIS6lheqtZzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmFkMjQ2MGMtODIwNi00NTM0LTliOWItMzU1YzJkNTI0ODU4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H5g
MA0GCSqGSIb3DQEBCwUAA4IBAQCMCJUeNd69wgBi/u72dcoruGiqKxIr2V4sku+o
kWdK4rBSnZyWj3IC1bT+Y+1Ho2IpZMA39gT4vAbQaaHfWcCtvi0D+Fr43yesKfV9
+Im/uJ8/ULtO8bdB6xn7mWqLmtznOLpvnRbWcnNx6x8a/sZZP7a5od+1cfiEGSQM
GBcGFMj82sp9kzbqbU6lH6hrIjh0p4//7Dvh/DfXzVTqknlz8wEWRGApQT281ZOf
w64Z4o0Y3q5mJr0vtxPfLjunJSOYc/WKGzge7FBnPqUsB5dYRs+wCDNePRwMMxXt
a/YhYAUH55sddgbJ/8DBbTGTUJDkBV9J0hyB9lJqjerCShw4
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:57 2025 by rpki-client