Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
File: c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa (raw, json)
Hash identifier: ZbGnJSzgP60ERUmXU20R61+H/GjvYUwrJzEMkEXEGXM=
Subject key identifier: 0A:3B:F0:97:A6:AE:EF:CE:55:F5:66:D4:CC:26:BA:CC:D8:40:92:FD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5B4658A2C1C4709809557349DD0DC7531C583EDF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
Signing time: Mon 31 Mar 2025 20:51:06 +0000
ROA not before: Mon 31 Mar 2025 20:51:06 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:46:58:a2:c1:c4:70:98:09:55:73:49:dd:0d:c7:53:1c:58:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:51:06 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:02:2f:e4:a0:9a:fc:a1:c8:b3:be:72:73:
d9:fe:f8:e8:5f:28:26:c7:10:f6:d4:52:48:1f:73:
30:04:21:9c:c9:a6:80:a1:66:2f:78:c0:a4:44:1a:
9e:ec:b6:d9:20:df:32:5a:d1:e8:8e:d3:ac:55:d6:
61:eb:48:ba:6c:24:7b:dd:3a:3c:11:fa:ae:fe:ef:
e3:af:c3:c6:3e:5b:9e:19:82:18:ad:26:11:14:b0:
9d:ca:60:82:b7:ce:41:62:a6:e1:14:51:45:f9:4a:
f3:da:c3:25:d9:a5:f1:d2:e2:38:4d:60:93:bf:14:
98:b0:0b:b7:79:2c:58:b8:9f:c9:2d:d9:bd:78:56:
34:b1:5a:f6:53:b0:a9:10:cb:15:a8:85:d6:0a:06:
c7:0c:4d:99:6a:df:7d:01:98:c4:45:7c:8a:8f:dd:
29:fc:98:72:1e:71:b8:75:f5:c3:9a:61:fb:c7:77:
c2:3a:34:9b:74:d6:66:7d:02:e1:2e:10:69:73:52:
e5:a8:9f:bc:68:94:47:37:48:64:6c:9f:44:ad:ac:
26:e6:32:34:38:01:43:07:9d:50:62:30:ee:e0:86:
e9:b4:94:45:8a:9e:a4:a9:9d:06:1b:81:2e:cd:60:
51:4b:5c:bb:36:fb:d9:c5:32:94:c8:d7:bd:6c:80:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3B:F0:97:A6:AE:EF:CE:55:F5:66:D4:CC:26:BA:CC:D8:40:92:FD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c39dd71c-f22c-4bb4-9c6f-dfc8c6a02ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:a000::/40
Signature Algorithm: sha256WithRSAEncryption
03:39:1d:ab:09:e7:35:de:b9:8f:5a:f9:64:3c:84:4a:2f:6f:
eb:2e:8b:3b:b6:4c:69:f9:aa:41:09:ba:13:f5:38:13:12:6f:
1d:53:0c:90:c6:b7:3c:e9:8f:d6:4c:15:f8:0c:43:1a:56:2b:
32:4e:72:8e:62:bb:6e:ca:5d:0f:a4:b2:57:40:4d:e7:9b:da:
01:9a:ba:86:f6:8f:9c:6c:1a:ae:45:34:54:cc:7b:04:06:37:
f8:d2:ae:e5:b1:58:d7:ff:e1:18:d8:be:37:9f:66:2f:68:e6:
4e:8a:94:2a:80:7c:d3:40:33:43:3f:e9:e2:41:d2:d8:e7:45:
23:c1:49:56:fa:a3:e7:c4:52:2a:7f:96:6f:6c:1f:52:f5:eb:
7a:d9:39:3d:d7:50:b7:f0:86:28:68:9c:f3:6b:86:f8:73:36:
75:a3:d3:84:f8:53:37:a6:1a:34:ca:d3:e6:d6:8b:4c:7a:3c:
71:b0:0f:77:1f:ae:f9:b0:3f:34:28:bc:ce:5f:a4:8f:0d:45:
d5:ec:d5:86:81:f2:7f:91:12:70:44:de:60:2e:18:6e:44:a1:
db:41:50:1d:23:9a:58:b2:05:4d:d6:b9:63:1f:d9:e7:b8:dc:
a3:1e:0f:70:7c:09:01:fc:a4:eb:f2:08:2f:d5:a6:50:56:11:
24:48:e4:68
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUW0ZYosHEcJgJVXNJ3Q3HUxxYPt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMDUxMDZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ2OTk0OWJkOGUwYjIzOWFkMGNhMDg4YjFjYjUxOTgxZWEzNmFiYzFlMDU5
YzJiM2JkN2UwMTBmMjJmZWQ0NGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALalAi/koJr8ocizvnJz2f746F8oJscQ9tRSSB9zMAQhnMmmgKFmL3jApEQa
nuy22SDfMlrR6I7TrFXWYetIumwke906PBH6rv7v46/Dxj5bnhmCGK0mERSwncpg
grfOQWKm4RRRRflK89rDJdml8dLiOE1gk78UmLALt3ksWLifyS3ZvXhWNLFa9lOw
qRDLFaiF1goGxwxNmWrffQGYxEV8io/dKfyYch5xuHX1w5ph+8d3wjo0m3TWZn0C
4S4QaXNS5aifvGiURzdIZGyfRK2sJuYyNDgBQwedUGIw7uCG6bSURYqepKmdBhuB
Ls1gUUtcuzb72cUylMjXvWyAResCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQKO/CX
pq7vzlX1ZtTMJrrM2ECS/TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzM5ZGQ3MWMtZjIyYy00YmI0LTljNmYtZGZjOGM2YTAyZmZkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H6g
MA0GCSqGSIb3DQEBCwUAA4IBAQADOR2rCec13rmPWvlkPIRKL2/rLos7tkxp+apB
CboT9TgTEm8dUwyQxrc86Y/WTBX4DEMaVisyTnKOYrtuyl0PpLJXQE3nm9oBmrqG
9o+cbBquRTRUzHsEBjf40q7lsVjX/+EY2L43n2YvaOZOipQqgHzTQDNDP+niQdLY
50UjwUlW+qPnxFIqf5ZvbB9S9et62Tk911C38IYoaJzza4b4czZ1o9OE+FM3pho0
ytPm1otMejxxsA93H675sD80KLzOX6SPDUXV7NWGgfJ/kRJwRN5gLhhuRKHbQVAd
I5pYsgVN1rljH9nnuNyjHg9wfAkB/KTr8ggv1aZQVhEkSORo
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:01 2025 by rpki-client