Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
File: 22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa (raw, json)
Hash identifier: HnxegX0c5RurhKMqOnYj+zy35LxUpYcfMs3e51HOxgc=
Subject key identifier: 4B:3E:C4:B2:16:0F:8A:CB:FB:0F:D7:1B:15:85:13:73:E6:2D:3A:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6DC125F8D52DF4D4CB7F49490C1CEBF6772B800D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c1:25:f8:d5:2d:f4:d4:cb:7f:49:49:0c:1c:eb:f6:77:2b:80:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:f5:c1:00:a2:17:93:93:bf:71:50:39:d5:
7e:70:5b:65:b0:03:dd:c2:51:c0:1c:fe:4b:3e:45:
0f:f2:19:99:75:bf:34:9c:28:83:a3:94:fe:65:46:
cc:53:23:21:63:79:32:a3:14:ce:50:27:ef:80:1a:
64:cd:e8:73:7b:80:9b:0b:ba:f9:30:b3:d7:31:7c:
61:d5:e7:9f:95:d6:d3:63:a4:65:22:b0:24:21:cd:
84:3b:be:d6:bd:34:ea:87:7b:57:3f:6a:f3:59:3f:
92:69:94:ec:0b:13:f5:cf:4e:69:19:47:7f:b3:85:
5b:dd:d1:45:67:6e:8a:e5:5f:94:e5:55:25:20:92:
8d:a7:53:78:6a:c2:eb:c6:d0:10:31:b5:48:74:31:
d4:26:ca:27:c1:23:d1:6c:65:35:25:48:23:43:0d:
d1:9e:69:47:06:87:a9:af:54:df:18:37:3d:37:88:
cd:85:d4:8c:4d:1a:16:2e:1e:a5:a2:29:5a:f1:b4:
e3:52:6d:2d:5d:d4:14:d7:ca:61:e6:05:3a:41:ac:
45:68:f3:8a:e9:d6:dc:18:28:d0:3c:2d:2f:ad:f8:
2f:81:ff:7e:2c:95:2a:9a:03:c4:c4:f4:94:d4:82:
8c:77:9e:e4:6f:26:29:c0:fb:c4:e8:7a:69:1b:4b:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:C4:B2:16:0F:8A:CB:FB:0F:D7:1B:15:85:13:73:E6:2D:3A:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/22cb20bc-8063-4169-9e4b-a3ad29aeedc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:4000::/40
Signature Algorithm: sha256WithRSAEncryption
57:83:c6:b0:e8:18:e1:44:f4:b1:b9:ec:ef:0a:ac:6a:24:09:
4c:92:39:c0:ff:02:e4:a9:57:80:3d:59:76:ad:d6:4a:d7:11:
87:0b:5d:68:5a:1c:52:2d:fc:26:d0:c0:5a:25:72:3e:84:e1:
7a:ff:e2:b9:cd:80:3a:4a:45:6b:d6:80:ac:c5:58:2b:82:c6:
8f:7a:43:bf:72:1d:68:c3:c9:61:5c:b3:30:33:ec:eb:04:77:
25:0e:68:ef:44:7e:03:08:cc:63:42:bc:16:a8:34:b4:b3:d4:
9e:2a:af:45:cc:c3:fb:64:c5:87:36:e8:2a:00:be:40:77:6f:
e8:76:0f:52:cd:9f:41:8e:7e:c5:a2:be:fe:13:1e:69:9b:9f:
25:b9:4c:f3:78:6a:1a:41:40:cb:09:d6:35:88:68:fe:4c:24:
1b:9f:91:a1:f1:3c:43:ed:d4:d6:c1:f9:af:00:3e:27:06:df:
56:19:36:69:21:e7:26:6b:27:3e:d9:57:37:ff:43:e1:ba:1e:
e4:ec:7d:bd:9d:8a:e9:cd:03:ae:53:d4:65:04:b9:28:ed:75:
d4:56:e1:e8:f7:6c:69:32:3e:9c:18:30:7a:ec:25:5b:71:22:
fc:7c:78:96:74:85:2b:e8:4d:e1:38:f0:42:c8:b5:ea:ee:ec:
53:4a:2b:7d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUbcEl+NUt9NTLf0lJDBzr9ncrgA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAyMDUwMDAwMDBaFw0yNTAzMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDhiNmJhYzk2Y2I4MjE0ZTM3NzIwZGFiYjUzY2VjMDMxNTNmYWQzOTc0YzU5
ZjBjYWFlMmQ0MDU2OTIyMTQ4OTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI369cEAoheTk79xUDnVfnBbZbAD3cJRwBz+Sz5FD/IZmXW/NJwog6OU/mVG
zFMjIWN5MqMUzlAn74AaZM3oc3uAmwu6+TCz1zF8YdXnn5XW02OkZSKwJCHNhDu+
1r006od7Vz9q81k/kmmU7AsT9c9OaRlHf7OFW93RRWduiuVflOVVJSCSjadTeGrC
68bQEDG1SHQx1CbKJ8Ej0WxlNSVII0MN0Z5pRwaHqa9U3xg3PTeIzYXUjE0aFi4e
paIpWvG041JtLV3UFNfKYeYFOkGsRWjziunW3Bgo0DwtL634L4H/fiyVKpoDxMT0
lNSCjHee5G8mKcD7xOh6aRtLp6MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRLPsSy
Fg+Ky/sP1xsVhRNz5i067zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjJjYjIwYmMtODA2My00MTY5LTllNGItYTNhZDI5YWVlZGM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FBA
MA0GCSqGSIb3DQEBCwUAA4IBAQBXg8aw6BjhRPSxuezvCqxqJAlMkjnA/wLkqVeA
PVl2rdZK1xGHC11oWhxSLfwm0MBaJXI+hOF6/+K5zYA6SkVr1oCsxVgrgsaPekO/
ch1ow8lhXLMwM+zrBHclDmjvRH4DCMxjQrwWqDS0s9SeKq9FzMP7ZMWHNugqAL5A
d2/odg9SzZ9Bjn7For7+Ex5pm58luUzzeGoaQUDLCdY1iGj+TCQbn5Gh8TxD7dTW
wfmvAD4nBt9WGTZpIecmayc+2Vc3/0Phuh7k7H29nYrpzQOuU9RlBLko7XXUVuHo
92xpMj6cGDB67CVbcSL8fHiWdIUr6E3hOPBCyLXq7uxTSit9
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:20 2025 by rpki-client