Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
File: 9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa (raw, json)
Hash identifier: PSDLc1wMfqR1aHz7t0c/wDdjGxrsnKVFju1cUE+TJRA=
Subject key identifier: 74:90:41:0B:7C:CC:8B:1B:1A:5E:F5:04:40:BE:38:21:BD:71:5A:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3432E59847DA1BEE4740E495ED6BB1AECFB4E2C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
Signing time: Mon 12 May 2025 16:10:10 +0000
ROA not before: Mon 12 May 2025 16:10:10 +0000
ROA not after: Mon 16 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:32:e5:98:47:da:1b:ee:47:40:e4:95:ed:6b:b1:ae:cf:b4:e2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 12 16:10:10 2025 GMT
Not After : Jun 16 23:59:59 2025 GMT
Subject: serialNumber=b601f09f8f206c0541136a061247f8ad5435d1f0a659384de1f0becce97af739, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:28:5e:73:94:48:ee:57:5b:e9:77:2e:d3:
73:7f:d5:d9:d0:a5:ee:19:d3:24:64:de:1e:4b:40:
4e:de:a3:3b:63:76:6a:55:ee:fa:20:d8:de:f4:5d:
11:d5:15:29:11:80:39:cb:30:93:f0:55:f2:96:16:
96:60:c4:2d:01:bc:c8:d2:48:d4:b3:61:4f:f9:1c:
58:3c:60:a4:c6:0a:32:e7:c8:83:60:c9:50:48:b6:
c1:51:ae:a3:5c:36:d2:ef:68:1c:83:07:1b:49:f0:
e4:e6:79:c4:af:dd:bd:78:bc:6d:9f:fd:36:74:d6:
71:a3:5e:8d:bb:01:76:4b:78:f4:51:9f:2a:cc:46:
77:ff:ba:0e:8f:24:ec:f2:a3:27:c7:37:31:e9:dd:
c3:65:7b:6a:72:14:c9:e1:d3:d4:a8:6b:4c:12:a9:
a2:85:20:f9:cf:e0:d4:bb:26:f5:4a:43:ab:c2:4c:
b3:22:70:5d:a0:03:d1:a3:d6:79:1d:25:32:4b:d9:
e8:35:30:0a:8a:e3:c0:b7:c7:84:4d:ba:5a:eb:50:
f3:a8:a7:c4:d6:4e:ce:b9:a0:e0:81:43:82:c1:f7:
35:b0:79:7a:1e:03:3f:be:52:b6:b9:7c:fa:0d:c5:
12:55:f6:89:da:da:77:ba:6d:dd:65:7a:6d:b7:33:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:90:41:0B:7C:CC:8B:1B:1A:5E:F5:04:40:BE:38:21:BD:71:5A:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9397285f-ddbe-4525-ac62-a96d2fbb5cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:2d:19:cf:02:d5:18:0d:dc:0d:5e:5c:c0:d3:a0:4c:4f:4d:
ad:6f:b2:b2:7d:63:8f:c9:44:b1:98:05:72:38:b5:75:0c:7f:
8c:8b:91:a0:11:a1:ea:59:f9:e4:57:84:6f:29:0f:2d:e4:f1:
f8:04:b0:87:d9:5f:6f:ee:b0:09:60:74:99:15:89:9f:96:57:
75:69:92:d7:7a:32:08:55:e7:f3:03:c2:9f:b0:a0:61:10:dd:
6e:6b:1d:f8:17:ec:9e:aa:f3:a9:63:87:20:57:6f:75:2a:f3:
c8:45:51:41:aa:91:35:4e:89:62:91:5e:9a:0a:4c:8c:f9:e8:
55:d4:48:03:b9:9e:14:7f:cd:49:6c:a0:8c:cf:35:32:53:c7:
44:5c:f0:14:a9:4c:0a:69:e2:2a:a1:43:92:74:78:39:18:fc:
7c:be:53:bf:5b:1a:f2:2e:d2:7c:11:48:2f:90:6b:3f:44:ce:
fe:b2:e1:d7:e4:83:77:97:c5:c9:e1:b5:c0:de:53:8e:61:78:
b6:0d:78:b0:c1:2c:d0:eb:f6:f7:ab:86:9a:f9:92:5f:5f:5a:
db:59:bf:0c:85:a4:5b:9a:e7:60:5c:74:9c:cc:56:8c:a8:d1:
66:60:74:8a:e3:83:8c:0a:0b:db:89:79:4c:39:c7:e1:17:2d:
6b:5e:a7:fe
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUNDLlmEfaG+5HQOSV7Wuxrs+04sMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MTIxNjEwMTBaFw0yNTA2MTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGI2MDFmMDlmOGYyMDZjMDU0MTEzNmEwNjEyNDdmOGFkNTQzNWQxZjBhNjU5
Mzg0ZGUxZjBiZWNjZTk3YWY3MzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALWHKF5zlEjuV1vpdy7Tc3/V2dCl7hnTJGTeHktATt6jO2N2alXu+iDY3vRd
EdUVKRGAOcswk/BV8pYWlmDELQG8yNJI1LNhT/kcWDxgpMYKMufIg2DJUEi2wVGu
o1w20u9oHIMHG0nw5OZ5xK/dvXi8bZ/9NnTWcaNejbsBdkt49FGfKsxGd/+6Do8k
7PKjJ8c3Mendw2V7anIUyeHT1KhrTBKpooUg+c/g1Lsm9UpDq8JMsyJwXaAD0aPW
eR0lMkvZ6DUwCorjwLfHhE26WutQ86inxNZOzrmg4IFDgsH3NbB5eh4DP75Strl8
+g3FElX2idrad7pt3WV6bbczom8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR0kEEL
fMyLGxpe9QRAvjghvXFamjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTM5NzI4NWYtZGRiZS00NTI1LWFjNjItYTk2ZDJmYmI1Y2Q5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLAgQDAN
BgkqhkiG9w0BAQsFAAOCAQEAuS0ZzwLVGA3cDV5cwNOgTE9NrW+ysn1jj8lEsZgF
cji1dQx/jIuRoBGh6ln55FeEbykPLeTx+ASwh9lfb+6wCWB0mRWJn5ZXdWmS13oy
CFXn8wPCn7CgYRDdbmsd+BfsnqrzqWOHIFdvdSrzyEVRQaqRNU6JYpFemgpMjPno
VdRIA7meFH/NSWygjM81MlPHRFzwFKlMCmniKqFDknR4ORj8fL5Tv1sa8i7SfBFI
L5BrP0TO/rLh1+SDd5fFyeG1wN5TjmF4tg14sMEs0Ov296uGmvmSX19a21m/DIWk
W5rnYFx0nMxWjKjRZmB0iuODjAoL24l5TDnH4Rcta16n/g==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:58 2025 by rpki-client