Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
File: c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa (raw, json)
Hash identifier: QniikgFodgknGOBZ1GyzxClGFIx9ykpdwDcNO73rzLI=
Subject key identifier: 84:32:B6:C1:00:0A:25:DF:B5:FB:E9:55:49:AC:64:42:29:17:20:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E32824974539967F204E3AE3E9062469055A7E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
Signing time: Tue 01 Apr 2025 15:00:36 +0000
ROA not before: Tue 01 Apr 2025 15:00:36 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:32:82:49:74:53:99:67:f2:04:e3:ae:3e:90:62:46:90:55:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:00:36 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:da:bb:a1:27:a5:b1:20:8c:b1:9e:48:72:
f9:23:c2:5c:09:58:82:ad:91:19:a3:c8:69:36:fa:
bc:4c:25:02:7a:b8:21:6f:d8:a1:f5:04:e1:c9:44:
12:dd:d3:38:3b:4e:a8:2d:45:80:24:31:cf:bb:0a:
bd:93:e0:66:13:a4:02:80:07:64:25:49:9b:fb:45:
21:2b:23:20:c1:18:8a:0a:ff:a6:76:5c:9f:60:46:
b7:30:8d:43:48:0d:7d:7f:5e:86:29:cf:83:6a:7c:
4d:0e:1d:d4:b6:90:9d:ea:0d:e2:c7:32:bb:8b:ea:
82:6f:c0:fa:cb:a6:84:a6:b2:43:56:b8:6f:91:1f:
7f:ce:c1:b8:e0:a4:4f:45:6f:e8:ba:cf:f6:24:a8:
49:a9:d4:2d:15:b1:6c:15:d8:6c:84:ea:1f:86:f4:
00:ff:f3:bf:92:e1:28:5a:5f:41:11:e6:5a:88:19:
a3:46:7f:61:0d:f6:de:fd:1d:b7:16:e3:18:28:57:
cb:41:d6:da:ec:05:ed:a3:07:11:f6:da:5b:2e:f9:
70:b6:0a:0a:16:00:a9:f9:cf:ad:1e:f7:c6:47:19:
99:ca:15:88:a3:ae:31:38:58:a9:25:07:a4:59:51:
1d:19:b5:d6:d4:30:f1:f8:9d:47:a7:a9:2a:3e:d2:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:B6:C1:00:0A:25:DF:B5:FB:E9:55:49:AC:64:42:29:17:20:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4fedc04-24e0-41dc-a1f8-3bacae3d6615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ca:05:f2:b9:c3:24:57:94:c0:05:e4:6d:c8:36:98:b3:75:9a:
c0:20:64:18:91:20:66:93:10:71:c4:75:87:ae:bb:38:03:a5:
57:b4:d8:e3:a2:78:9e:0d:49:01:ed:3a:9a:19:56:68:87:9b:
35:b7:e6:9c:a7:2c:c9:43:08:75:93:0c:7c:35:99:64:2f:6d:
62:14:9e:68:b5:4d:1d:0c:c6:2f:28:b7:53:96:62:a4:96:8b:
3f:26:e6:1f:96:71:37:2f:dc:d9:99:cc:0e:f3:5f:e5:ad:6e:
fc:12:96:4d:44:15:3d:0c:c5:df:9d:8f:1f:fd:7d:71:51:c3:
40:fc:4c:41:3d:a2:b9:6e:99:f6:9d:e1:68:2d:59:a0:00:0d:
53:5a:e6:35:b5:78:b7:b8:18:2f:ef:3d:f6:24:55:a4:d4:c2:
a8:57:87:01:f0:32:ea:6a:a5:00:e3:84:15:f8:9d:e3:6a:fb:
a8:2d:fc:2a:16:68:b8:dc:a3:aa:6b:39:d8:3b:8f:7f:35:5d:
6e:df:85:33:9a:b7:d4:67:a4:13:1b:a8:b8:79:4c:21:65:27:
86:9f:e6:0c:39:7b:55:e9:36:8e:0f:5c:63:00:b2:dc:c3:01:
2f:92:0b:eb:35:9e:2a:b3:ab:1a:a1:b3:46:d1:80:6f:6a:c8:
e9:90:d0:1f
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUDjKCSXRTmWfyBOOuPpBiRpBVp+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MDExNTAwMzZaFw0yNTA1MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDRiMWEzODhlNzAyMWY3OGQ1ODkzMjIzZWI1ODEyZDVkNGM1OWIxMTgzZTFh
MmFmNGQ4OTZiMzRiZWU3MzhmNDMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMVh2ruhJ6WxIIyxnkhy+SPCXAlYgq2RGaPIaTb6vEwlAnq4IW/YofUE4clE
Et3TODtOqC1FgCQxz7sKvZPgZhOkAoAHZCVJm/tFISsjIMEYigr/pnZcn2BGtzCN
Q0gNfX9ehinPg2p8TQ4d1LaQneoN4scyu4vqgm/A+sumhKayQ1a4b5Eff87BuOCk
T0Vv6LrP9iSoSanULRWxbBXYbITqH4b0AP/zv5LhKFpfQRHmWogZo0Z/YQ323v0d
txbjGChXy0HW2uwF7aMHEfbaWy75cLYKChYAqfnPrR73xkcZmcoViKOuMThYqSUH
pFlRHRm11tQw8fidR6epKj7SDZUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSEMrbB
AAol37X76VVJrGRCKRcg/jAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzRmZWRjMDQtMjRlMC00MWRjLWExZjgtM2JhY2FlM2Q2NjE1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBU99IDAN
BgkqhkiG9w0BAQsFAAOCAQEAygXyucMkV5TABeRtyDaYs3WawCBkGJEgZpMQccR1
h667OAOlV7TY46J4ng1JAe06mhlWaIebNbfmnKcsyUMIdZMMfDWZZC9tYhSeaLVN
HQzGLyi3U5ZipJaLPybmH5ZxNy/c2ZnMDvNf5a1u/BKWTUQVPQzF352PH/19cVHD
QPxMQT2iuW6Z9p3haC1ZoAANU1rmNbV4t7gYL+899iRVpNTCqFeHAfAy6mqlAOOE
Ffid42r7qC38KhZouNyjqms52DuPfzVdbt+FM5q31GekExuouHlMIWUnhp/mDDl7
Vek2jg9cYwCy3MMBL5IL6zWeKrOrGqGzRtGAb2rI6ZDQHw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:58 2025 by rpki-client