Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc8b1b19-8868-43a4-8d84-4c0b99202a0d.roa
File: fc8b1b19-8868-43a4-8d84-4c0b99202a0d.roa (raw, json)
Hash identifier: 1ktAfmhBL15zqMDNmjH8xo+hhEijWM7kPQNBY7NALZg=
Subject key identifier: 30:D3:27:B4:8A:27:20:42:09:5C:8D:D8:68:A4:FC:47:E4:A2:99:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48BD118ADDD5CA0929795C6B181B456864BDBA06
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc8b1b19-8868-43a4-8d84-4c0b99202a0d.roa
Signing time: Mon 31 Mar 2025 20:21:06 +0000
ROA not before: Mon 31 Mar 2025 20:21:06 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:bd:11:8a:dd:d5:ca:09:29:79:5c:6b:18:1b:45:68:64:bd:ba:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:21:06 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:e4:8c:9b:b3:81:9a:9c:f9:00:8c:b1:30:
d6:aa:e5:e5:47:d5:34:45:70:86:e6:a5:7f:a3:46:
36:d3:55:6e:88:16:d5:7e:da:6e:3f:9f:4a:7a:43:
8f:4f:72:9f:5e:99:37:ca:dd:42:5d:de:08:df:30:
e2:bd:8a:33:30:d4:04:56:4f:06:6b:1c:54:ff:93:
96:7c:4e:a8:5d:50:12:8a:91:3e:e7:64:3f:c7:cf:
13:56:1e:1e:2b:8c:a8:e4:3e:ab:72:06:b7:2c:ff:
37:33:6e:c6:ce:dc:50:3a:e3:c0:6c:8f:a8:70:b2:
e1:45:94:8d:19:6b:fd:fe:02:0d:9e:d6:cf:bc:3c:
e6:8e:37:87:84:d7:8b:48:40:15:11:f7:db:fb:1d:
cd:f5:4c:f0:32:58:86:18:f7:5f:59:bf:14:e4:a3:
f2:28:db:ed:f5:34:c9:5a:57:b3:6c:38:b4:14:10:
d9:ef:7a:0a:a3:d5:df:2f:84:34:e1:58:0c:44:5e:
92:42:68:98:ba:b9:2e:7b:ab:9f:76:f1:ef:d1:44:
59:02:f9:09:f9:0d:c3:d2:a1:3e:34:35:d6:37:76:
52:c1:2f:25:7b:cb:89:23:ed:42:4c:b8:bb:ec:57:
cc:4e:9b:2f:42:21:d0:4c:b7:ff:2c:09:d5:c0:4f:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D3:27:B4:8A:27:20:42:09:5C:8D:D8:68:A4:FC:47:E4:A2:99:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fc8b1b19-8868-43a4-8d84-4c0b99202a0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:6000::/40
Signature Algorithm: sha256WithRSAEncryption
1f:46:91:23:52:1a:d7:33:b7:a5:81:85:ca:4f:8c:f8:90:2d:
02:8a:ac:02:0d:7f:ad:72:90:a1:b8:94:7b:43:a0:4c:13:3a:
bd:83:33:94:42:d2:42:d3:ad:05:3f:9f:8e:b2:19:f7:84:d4:
4e:74:fc:a5:d7:f7:8f:80:7e:ab:24:eb:a8:54:7f:5d:60:9c:
d8:80:e3:ce:59:7b:b2:28:90:62:55:bd:fe:65:53:76:93:d4:
d3:e1:7c:27:9f:44:ba:c3:82:85:77:73:d1:25:af:5c:c3:55:
41:4b:b9:78:eb:fd:c7:49:0d:7b:f3:3c:bc:ff:b1:99:cc:3c:
34:66:ca:4e:4e:58:1a:3e:7a:13:b8:69:5d:14:55:76:3e:63:
e2:c9:64:8f:04:c8:2b:3a:5c:ca:2f:00:ee:89:1e:7a:49:74:
ca:04:d4:5a:3a:17:13:85:32:25:49:ee:65:33:84:73:9a:49:
b1:eb:32:a2:81:86:b8:aa:6d:c8:39:59:67:f5:55:e2:db:1c:
d6:f1:20:60:37:f2:dd:44:a2:d6:44:58:6e:4a:b7:a8:26:2e:
9a:f6:ae:ae:cd:8d:ce:a1:88:04:45:86:30:fa:5b:40:e4:83:
90:5b:fd:33:58:5e:0a:45:97:26:4b:fa:73:b4:8b:b8:4f:d0:
f3:eb:a7:49
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSL0Rit3VygkpeVxrGBtFaGS9ugYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMDIxMDZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1YzExYjQ0NjRhMjhmN2MzOTRmY2EzNjI2MDUyNmViMTA3YWJjNmRiNGZi
ZDllZDNiMjRiMDQ2YWQ5ZjgzMmYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMBm5Iybs4GanPkAjLEw1qrl5UfVNEVwhualf6NGNtNVbogW1X7abj+fSnpD
j09yn16ZN8rdQl3eCN8w4r2KMzDUBFZPBmscVP+TlnxOqF1QEoqRPudkP8fPE1Ye
HiuMqOQ+q3IGtyz/NzNuxs7cUDrjwGyPqHCy4UWUjRlr/f4CDZ7Wz7w85o43h4TX
i0hAFRH32/sdzfVM8DJYhhj3X1m/FOSj8ijb7fU0yVpXs2w4tBQQ2e96CqPV3y+E
NOFYDERekkJomLq5Lnurn3bx79FEWQL5CfkNw9KhPjQ11jd2UsEvJXvLiSPtQky4
u+xXzE6bL0Ih0Ey3/ywJ1cBPyGkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQw0ye0
iicgQglcjdhopPxH5KKZdjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmM4YjFiMTktODg2OC00M2E0LThkODQtNGMwYjk5MjAyYTBkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Htg
MA0GCSqGSIb3DQEBCwUAA4IBAQAfRpEjUhrXM7elgYXKT4z4kC0CiqwCDX+tcpCh
uJR7Q6BMEzq9gzOUQtJC060FP5+Oshn3hNROdPyl1/ePgH6rJOuoVH9dYJzYgOPO
WXuyKJBiVb3+ZVN2k9TT4Xwnn0S6w4KFd3PRJa9cw1VBS7l46/3HSQ178zy8/7GZ
zDw0ZspOTlgaPnoTuGldFFV2PmPiyWSPBMgrOlzKLwDuiR56SXTKBNRaOhcThTIl
Se5lM4Rzmkmx6zKigYa4qm3IOVln9VXi2xzW8SBgN/LdRKLWRFhuSreoJi6a9q6u
zY3OoYgERYYw+ltA5IOQW/0zWF4KRZcmS/pztIu4T9Dz66dJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:27 2025 by rpki-client