Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
File: 42b92c19-37c5-4b41-b1df-818a1569d759.roa (raw, json)
Hash identifier: o9s193x3jY5YMStDcyz4lnvqdQaiEOKsowgoEdR7vzM=
Subject key identifier: D2:8E:92:5C:08:E1:90:05:32:5F:8D:77:2F:96:FF:57:C5:8F:FB:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3696B6034F592E2099D5EAB59C1D7D153EF32FA4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
Signing time: Tue 20 May 2025 19:21:15 +0000
ROA not before: Tue 20 May 2025 19:21:15 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:96:b6:03:4f:59:2e:20:99:d5:ea:b5:9c:1d:7d:15:3e:f3:2f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:21:15 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=f78ecccb440b1b97ff3b5b3d186d23d2591097c402bf075db08a9db700b80ba5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:7a:ae:57:be:e9:bf:18:b3:83:9b:a2:ff:
3a:9e:99:73:18:a1:3d:2e:5d:f7:38:c3:59:e2:12:
48:ee:03:71:6a:d3:73:d9:98:bf:a1:a6:f7:6c:36:
a3:14:79:8f:3a:5a:09:a4:3c:dd:b7:4e:88:70:dd:
9a:ce:26:5a:6c:15:24:f8:ec:e6:e1:e2:e6:52:7f:
3d:d9:d9:b3:0e:0c:77:0c:4e:93:27:b2:c3:56:44:
47:40:e3:d8:97:ed:04:8c:3b:c6:98:21:26:34:f1:
3f:01:80:f0:18:f0:eb:83:ca:15:d1:7e:54:23:3c:
d4:9f:7f:49:ed:c1:c2:5a:50:d4:8d:92:1f:53:3c:
c9:4f:73:18:b9:32:e2:3d:cb:36:3e:74:45:96:ab:
29:bc:0b:92:ff:f6:cc:ac:17:97:47:03:48:4b:81:
20:da:d3:d8:ad:8f:56:d2:df:b6:61:1c:8c:e8:e3:
f3:93:a8:84:c6:49:c4:3d:bd:f8:2e:72:77:01:53:
46:14:23:8c:67:0a:dd:52:48:3c:2d:93:83:15:d6:
c0:89:1a:26:4a:58:2d:a4:82:ce:0a:9e:e6:50:42:
ca:a9:9c:49:ac:44:89:4c:42:22:07:f0:3e:7b:b4:
3d:a3:12:9b:78:0e:35:dc:a7:a6:40:c5:b2:c0:2f:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:92:5C:08:E1:90:05:32:5F:8D:77:2F:96:FF:57:C5:8F:FB:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2080::/46
Signature Algorithm: sha256WithRSAEncryption
1c:84:46:00:4a:21:f7:f2:99:de:ae:3e:87:5c:09:04:11:63:
e2:62:8e:8b:a2:bb:fc:98:8f:aa:e1:7b:15:f2:8f:33:23:84:
06:d9:f6:99:6e:e4:06:3b:25:34:94:b6:99:59:94:cc:88:8b:
50:1f:10:79:62:6f:8a:9a:fc:69:19:cc:4d:9c:43:ca:22:8a:
cb:2a:e4:58:0b:4c:36:50:f1:6f:50:e3:a5:39:fc:79:a2:b9:
bb:47:4b:fc:04:ce:bf:e2:60:5a:95:d8:9a:e2:33:0b:92:31:
58:a5:c7:1f:09:0c:82:25:f2:76:dd:08:57:a2:df:f2:35:b6:
7e:57:da:5a:c4:9e:d6:b0:0e:9a:c2:1d:a7:42:67:88:ac:a3:
e2:1d:94:11:e0:91:a4:3d:f9:5b:6b:b2:f1:91:af:1f:f0:c7:
86:49:d3:f5:95:da:ea:ed:f0:aa:d7:8c:47:18:9d:d5:0d:e4:
cc:b2:81:5b:39:e6:73:3f:79:98:64:be:d0:5e:c9:e0:29:33:
83:20:6b:e9:6c:c2:da:a3:54:7d:cb:fb:8b:b2:90:1f:d7:2e:
17:d5:7e:6d:b8:07:b5:78:5f:02:0e:0c:fd:32:10:e9:3d:eb:
4f:b1:61:ae:4d:a3:a3:43:f9:87:0b:35:38:73:97:81:2c:06:
38:5f:51:62
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUNpa2A09ZLiCZ1eq1nB19FT7zL6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTIxMTVaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGY3OGVjY2NiNDQwYjFiOTdmZjNiNWIzZDE4NmQyM2QyNTkxMDk3YzQwMmJm
MDc1ZGIwOGE5ZGI3MDBiODBiYTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO0aeq5Xvum/GLODm6L/Op6ZcxihPS5d9zjDWeISSO4DcWrTc9mYv6Gm92w2
oxR5jzpaCaQ83bdOiHDdms4mWmwVJPjs5uHi5lJ/PdnZsw4MdwxOkyeyw1ZER0Dj
2JftBIw7xpghJjTxPwGA8Bjw64PKFdF+VCM81J9/Se3BwlpQ1I2SH1M8yU9zGLky
4j3LNj50RZarKbwLkv/2zKwXl0cDSEuBINrT2K2PVtLftmEcjOjj85OohMZJxD29
+C5ydwFTRhQjjGcK3VJIPC2TgxXWwIkaJkpYLaSCzgqe5lBCyqmcSaxEiUxCIgfw
Pnu0PaMSm3gONdynpkDFssAvn6UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTSjpJc
COGQBTJfjXcvlv9XxY/76zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDJiOTJjMTktMzdjNS00YjQxLWIxZGYtODE4YTE1NjlkNzU5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Hsg
gDANBgkqhkiG9w0BAQsFAAOCAQEAHIRGAEoh9/KZ3q4+h1wJBBFj4mKOi6K7/JiP
quF7FfKPMyOEBtn2mW7kBjslNJS2mVmUzIiLUB8QeWJvipr8aRnMTZxDyiKKyyrk
WAtMNlDxb1DjpTn8eaK5u0dL/ATOv+JgWpXYmuIzC5IxWKXHHwkMgiXydt0IV6Lf
8jW2flfaWsSe1rAOmsIdp0JniKyj4h2UEeCRpD35W2uy8ZGvH/DHhknT9ZXa6u3w
qteMRxid1Q3kzLKBWznmcz95mGS+0F7J4CkzgyBr6WzC2qNUfcv7i7KQH9cuF9V+
bbgHtXhfAg4M/TIQ6T3rT7Fhrk2jo0P5hws1OHOXgSwGOF9RYg==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:07 2025 by rpki-client