Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
File: fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa (raw, json)
Hash identifier: nWikdSUwYMP4NQXbe7a3qt+RtLu7RyB+RiR56+BM58g=
Subject key identifier: DE:5B:15:C4:29:2B:BC:7D:B0:AA:DA:9F:3E:84:7E:45:3D:98:55:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 36331E9D99D9D7E06162A00E5613142A85EAB5BC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:33:1e:9d:99:d9:d7:e0:61:62:a0:0e:56:13:14:2a:85:ea:b5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:5f:d6:b5:32:99:d2:d9:e9:64:81:dd:e6:
f4:08:d1:33:94:f8:2b:44:6a:2f:aa:3b:f2:e1:1c:
c7:42:b3:a8:1d:b9:04:be:47:1a:0e:1f:a9:3e:59:
03:38:31:ca:e9:3f:6a:f1:ed:3b:11:b4:dd:b7:ab:
17:b4:e3:10:87:3b:a8:d2:15:e7:bd:70:7e:2f:4e:
d6:7a:a1:93:cf:e1:01:52:96:f8:b5:43:a0:42:69:
2e:03:e8:a6:de:48:6d:85:7b:be:28:59:3b:41:ce:
be:11:6e:f6:8f:f7:32:b6:24:9c:6c:c7:ac:fd:76:
40:99:5a:12:40:71:f3:44:9e:0e:4b:7c:cd:12:80:
1a:21:7a:ce:90:e6:e3:b1:70:48:69:76:dd:2b:bd:
1c:91:f0:e2:e2:f6:a7:68:a1:d7:66:1b:82:de:8f:
39:6d:f7:e6:bb:5f:a1:34:29:a7:67:78:c9:82:25:
93:89:57:d2:ca:3d:35:52:29:85:27:45:7f:b6:cf:
68:91:63:12:29:e1:83:5f:db:7c:ea:1d:ff:7e:f9:
23:2d:29:93:30:22:e5:29:3d:63:da:d0:ef:4c:26:
cd:79:7f:8e:54:9d:10:19:eb:0e:c5:53:58:69:d1:
b4:43:87:0e:a6:91:56:8e:fc:7a:ee:10:5f:30:19:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:15:C4:29:2B:BC:7D:B0:AA:DA:9F:3E:84:7E:45:3D:98:55:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcc2c855-ca62-4b4c-a1c6-8b4152bc7a05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:c000::/40
Signature Algorithm: sha256WithRSAEncryption
5a:10:93:7c:8b:7b:bf:3d:fa:3c:4a:9d:cf:0a:da:58:78:d8:
e9:35:db:92:a8:c8:04:42:ce:4a:4a:5b:c1:be:bc:33:68:ca:
af:fb:ae:8e:19:77:68:da:a3:ba:5c:e0:ee:59:af:f2:5d:18:
3d:df:56:ce:db:83:34:e8:52:ad:37:63:38:57:ba:0a:9a:55:
07:40:8a:dd:d4:51:d9:23:8c:0f:44:00:6d:d0:4b:c3:bb:9d:
0e:9a:f8:d6:9e:56:13:eb:63:74:03:be:a3:88:7f:b6:18:5a:
19:57:c1:e0:39:e6:84:4d:0b:33:f2:4c:83:70:90:c2:e0:95:
dd:77:ae:fa:25:bd:2c:93:72:85:79:98:d4:49:77:a7:fd:c3:
46:35:42:d5:8a:26:30:5e:89:1f:46:56:ac:dc:db:59:5c:82:
93:0c:60:0b:7f:48:7f:72:4b:7d:6d:a3:5e:51:eb:a2:d3:c6:
1b:fb:9b:84:a2:df:83:4c:39:b7:fb:9c:51:38:38:35:6f:7b:
fc:b3:93:7c:b4:63:6c:a1:97:15:97:48:4f:0a:e3:75:66:40:
dc:52:18:08:fd:16:8a:cc:19:85:1a:94:69:ae:2d:c4:99:af:
c3:35:d9:af:1e:b7:a5:29:fa:7c:36:be:47:cc:97:28:b3:8c:
69:94:fe:c0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNjMenZnZ1+BhYqAOVhMUKoXqtbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAyMDUwMDAwMDBaFw0yNTAzMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDBmOTJjY2FkNjc1MzY0MmVlZGVkNGUzZGJlZjhjYjBiODg0YmIxYWI5YWU5
OTNmZGZiOTc3NDU4ZWVhNWEwOTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ26X9a1MpnS2elkgd3m9AjRM5T4K0RqL6o78uEcx0KzqB25BL5HGg4fqT5Z
Azgxyuk/avHtOxG03berF7TjEIc7qNIV571wfi9O1nqhk8/hAVKW+LVDoEJpLgPo
pt5IbYV7vihZO0HOvhFu9o/3MrYknGzHrP12QJlaEkBx80SeDkt8zRKAGiF6zpDm
47FwSGl23Su9HJHw4uL2p2ih12Ybgt6POW335rtfoTQpp2d4yYIlk4lX0so9NVIp
hSdFf7bPaJFjEinhg1/bfOod/375Iy0pkzAi5Sk9Y9rQ70wmzXl/jlSdEBnrDsVT
WGnRtEOHDqaRVo78eu4QXzAZ08MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTeWxXE
KSu8fbCq2p8+hH5FPZhVsjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmNjMmM4NTUtY2E2Mi00YjRjLWExYzYtOGI0MTUyYmM3YTA1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HXA
MA0GCSqGSIb3DQEBCwUAA4IBAQBaEJN8i3u/Pfo8Sp3PCtpYeNjpNduSqMgEQs5K
SlvBvrwzaMqv+66OGXdo2qO6XODuWa/yXRg931bO24M06FKtN2M4V7oKmlUHQIrd
1FHZI4wPRABt0EvDu50OmvjWnlYT62N0A76jiH+2GFoZV8HgOeaETQsz8kyDcJDC
4JXdd676Jb0sk3KFeZjUSXen/cNGNULViiYwXokfRlas3NtZXIKTDGALf0h/ckt9
baNeUeui08Yb+5uEot+DTDm3+5xRODg1b3v8s5N8tGNsoZcVl0hPCuN1ZkDcUhgI
/RaKzBmFGpRpri3Ema/DNdmvHrelKfp8Nr5HzJcos4xplP7A
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:52 2025 by rpki-client