Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf464545-0601-4fd5-a3a2-f4f3c022f248.roa
File: cf464545-0601-4fd5-a3a2-f4f3c022f248.roa (raw, json)
Hash identifier: cfOlfdEJGzrHUX61IKs+ceuUvM5KJJWYs23Bux1E0GY=
Subject key identifier: 08:D1:86:ED:3F:44:D1:F0:65:31:CC:06:BF:F7:D7:19:29:14:2E:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4062499B8B3F5874A4AE385F1264AD4EECA1157E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf464545-0601-4fd5-a3a2-f4f3c022f248.roa
Signing time: Mon 31 Mar 2025 20:10:26 +0000
ROA not before: Mon 31 Mar 2025 20:10:26 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:8040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:62:49:9b:8b:3f:58:74:a4:ae:38:5f:12:64:ad:4e:ec:a1:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:10:26 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:73:64:81:ec:91:7e:cd:34:13:71:05:2c:
4b:cf:7e:3d:2c:82:4b:6e:8c:74:b9:1f:ca:51:ec:
b0:32:28:00:86:17:98:ea:06:a0:ce:a4:2e:64:9e:
a1:dd:11:d5:b0:f3:7b:99:bc:f2:05:0e:13:8c:c0:
a3:48:4a:3d:5f:3d:f7:64:d2:08:d7:2c:27:30:c5:
85:94:47:a2:71:e8:61:79:b2:d6:f8:92:0f:11:79:
a9:18:de:83:7f:1e:1d:df:a5:20:85:82:a3:91:e5:
2d:20:44:fd:2f:2e:64:e8:7e:79:21:94:6e:ff:b1:
a8:ad:20:33:32:ae:bb:b0:bc:13:9a:2a:13:95:1f:
2c:71:66:53:df:10:8f:08:a8:ed:b7:2d:2b:6b:36:
af:fb:34:9f:20:0f:08:46:9a:db:3b:b6:cc:de:8c:
b5:f0:cb:17:d4:00:09:53:9a:6d:57:09:cd:f7:f5:
1d:cd:09:fb:2c:b3:1e:0f:26:76:d0:7e:2a:4b:81:
6c:09:68:f3:d4:66:6e:00:d7:9c:da:39:da:f0:e9:
b3:c3:cb:3e:91:20:e3:1f:40:92:13:14:68:b2:3c:
d8:51:62:df:31:86:7a:ee:8a:6f:37:4f:87:60:e8:
8c:e6:7c:6a:98:93:31:c8:ae:54:ff:98:9f:e0:67:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D1:86:ED:3F:44:D1:F0:65:31:CC:06:BF:F7:D7:19:29:14:2E:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf464545-0601-4fd5-a3a2-f4f3c022f248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:8040::/46
Signature Algorithm: sha256WithRSAEncryption
75:ad:15:f4:53:72:d2:e5:9e:4a:a5:d5:e4:e2:3a:d1:d7:8f:
9e:72:1b:b3:d7:a1:44:67:9a:a8:67:60:75:9f:1c:70:d8:ed:
9f:1c:63:36:b1:cc:b9:22:e8:35:e5:d1:4f:d2:12:09:74:b7:
4f:19:3c:c2:44:b6:76:a8:b5:ef:54:c4:79:52:91:8b:19:7c:
01:c0:a2:cf:15:1d:6d:67:05:f8:71:b9:4f:f0:16:ce:4b:cd:
29:7b:6a:8e:21:87:8d:e5:78:7c:d4:31:05:62:ff:99:63:bc:
8f:c6:eb:f6:8f:c2:30:a7:7e:03:5c:bd:e4:b2:b6:8c:f6:65:
50:2f:ca:dc:01:1c:5b:f9:06:04:c7:7c:ac:4d:12:d5:d8:fe:
c2:61:81:fb:c3:f2:97:b1:5d:31:96:93:ac:e7:88:1e:18:af:
e6:c0:3c:15:c0:d6:aa:69:2c:d8:c8:6b:da:69:49:5e:e0:fb:
ef:6d:7f:49:2f:00:c4:de:54:60:5d:00:a5:43:7a:31:38:e4:
9c:70:84:e8:ac:ed:c8:bf:fe:37:0f:f2:fb:a5:bb:ad:eb:da:
52:26:a7:b4:d0:3e:8a:31:65:3d:40:8c:f3:3f:fd:3a:6f:68:
44:64:c9:4e:34:bc:f7:b3:d5:1c:71:59:90:6b:f1:ef:4f:e3:
b5:37:4a:ef
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUQGJJm4s/WHSkrjhfEmStTuyhFX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMDEwMjZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ4N2UzMzBmNTJiZTY0YTViZTZjOTlhODU2YzllYjA1ZTQzMTViMTBjM2Q0
YjRiMTAwN2YzZGIyN2RjYzU3ZTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKUCc2SB7JF+zTQTcQUsS89+PSyCS26MdLkfylHssDIoAIYXmOoGoM6kLmSe
od0R1bDze5m88gUOE4zAo0hKPV8992TSCNcsJzDFhZRHonHoYXmy1viSDxF5qRje
g38eHd+lIIWCo5HlLSBE/S8uZOh+eSGUbv+xqK0gMzKuu7C8E5oqE5UfLHFmU98Q
jwio7bctK2s2r/s0nyAPCEaa2zu2zN6MtfDLF9QACVOabVcJzff1Hc0J+yyzHg8m
dtB+KkuBbAlo89RmbgDXnNo52vDps8PLPpEg4x9AkhMUaLI82FFi3zGGeu6KbzdP
h2DojOZ8apiTMciuVP+Yn+BnlRcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQI0Ybt
P0TR8GUxzAa/99cZKRQubjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2Y0NjQ1NDUtMDYwMS00ZmQ1LWEzYTItZjRmM2MwMjJmMjQ4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DWA
QDANBgkqhkiG9w0BAQsFAAOCAQEAda0V9FNy0uWeSqXV5OI60dePnnIbs9ehRGea
qGdgdZ8ccNjtnxxjNrHMuSLoNeXRT9ISCXS3Txk8wkS2dqi171TEeVKRixl8AcCi
zxUdbWcF+HG5T/AWzkvNKXtqjiGHjeV4fNQxBWL/mWO8j8br9o/CMKd+A1y95LK2
jPZlUC/K3AEcW/kGBMd8rE0S1dj+wmGB+8Pyl7FdMZaTrOeIHhiv5sA8FcDWqmks
2Mhr2mlJXuD7721/SS8AxN5UYF0ApUN6MTjknHCE6KztyL/+Nw/y+6W7revaUian
tNA+ijFlPUCM8z/9Om9oRGTJTjS897PVHHFZkGvx70/jtTdK7w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:26 2025 by rpki-client