Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01edd097-8881-46b9-b8a4-4897174f4b86.roa
File: 01edd097-8881-46b9-b8a4-4897174f4b86.roa (raw, json)
Hash identifier: 456fAM/GxkNmKkcPxe+eHtZ6mLzp2bdE3a7s26sbCFE=
Subject key identifier: 64:60:FD:D2:B7:48:3C:4F:96:96:7E:8A:76:3D:C8:C6:78:C6:90:F8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5EA2D4406D02B59216CD81652C57696C6F20EFAC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01edd097-8881-46b9-b8a4-4897174f4b86.roa
Signing time: Mon 28 Apr 2025 15:40:43 +0000
ROA not before: Mon 28 Apr 2025 15:40:43 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a2:d4:40:6d:02:b5:92:16:cd:81:65:2c:57:69:6c:6f:20:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:40:43 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=5278138fea731c8b846c6753f04deb55aca2d4627573ff8067263ac415bdbae9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:d8:dd:9e:be:08:24:63:80:42:cf:e4:a4:
f8:0f:5b:d2:01:7d:28:67:e1:a7:c3:3e:dd:d7:86:
a5:23:b5:27:8f:db:82:eb:ac:38:dc:3f:c7:27:b3:
9f:26:4f:5f:27:36:d3:31:24:75:2e:b0:3d:eb:24:
c0:cb:81:12:f0:6f:2a:53:ea:f3:dd:d4:20:89:60:
73:3f:07:40:20:4e:e8:88:6a:4b:2b:23:1d:62:db:
9c:0e:65:70:a9:71:d0:1f:d7:41:e3:a6:05:a2:21:
5f:fc:33:90:a2:a3:f7:59:3a:e6:6a:dd:b2:a6:7a:
86:58:53:9f:22:d8:15:06:74:52:a5:73:7d:04:3d:
94:2d:63:6a:8e:bc:2c:77:af:59:4a:43:07:26:1a:
3e:30:65:c2:a6:7c:12:6d:45:58:1e:28:d2:e2:d1:
6e:fe:77:49:92:86:c1:8e:c5:fc:74:d2:7f:a2:30:
03:e9:76:24:a6:af:f2:fc:7f:e5:b9:08:f5:c3:5e:
9d:d8:87:4f:a2:a3:3b:fd:c2:9b:2c:c0:a1:45:6b:
ef:8b:c4:e5:d6:e6:6b:d5:cd:5f:a5:89:d3:bc:75:
3f:9b:b5:44:0d:61:0a:8b:1e:78:0b:fe:dd:d0:53:
4b:d9:76:0f:5e:80:1a:ca:6b:07:04:34:5b:76:f8:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:FD:D2:B7:48:3C:4F:96:96:7E:8A:76:3D:C8:C6:78:C6:90:F8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/01edd097-8881-46b9-b8a4-4897174f4b86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:c000::/40
Signature Algorithm: sha256WithRSAEncryption
47:2c:19:cd:83:a1:ae:be:f1:eb:5c:29:78:f6:4b:30:d5:97:
98:60:b9:51:79:66:f5:3b:bc:9d:a8:de:b2:6f:af:c6:14:e9:
a4:c1:b3:25:fc:7f:cd:e3:2a:d3:e6:17:b2:39:c3:d4:62:c5:
80:96:e2:12:bf:3e:f9:54:db:72:a1:a4:83:5b:e4:07:b4:5a:
b6:3b:0c:35:37:7f:af:b7:e7:88:6c:f1:b0:45:d6:5a:f5:41:
d2:ba:f3:8b:07:8a:21:db:ce:25:03:97:6e:3e:03:45:35:04:
1d:d4:d6:9e:68:d6:f4:22:29:7e:38:2e:04:4c:5f:c1:f6:a6:
fd:d3:75:c4:e3:b4:a4:40:15:b1:86:b8:0a:71:87:2b:a1:e3:
ab:80:53:36:fb:73:6a:8c:37:51:1c:5c:ee:1a:7b:da:9c:0d:
3d:89:9e:bc:53:36:8d:b2:95:9d:cc:28:34:31:94:fb:ae:fa:
83:e7:61:6e:18:f2:75:2d:d2:b9:02:4c:a7:20:db:dd:ad:15:
1b:7f:4b:27:0d:02:fc:f2:9c:29:d0:dc:5a:4d:d8:a9:10:90:
ab:4d:4f:8d:37:d6:47:d1:a4:c6:ff:2b:8d:a1:73:2a:8b:df:
8d:00:ed:6a:5d:74:79:ed:a9:84:64:dc:e3:94:b7:14:17:4f:
59:99:92:2e
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXqLUQG0CtZIWzYFlLFdpbG8g76wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjgxNTQwNDNaFw0yNTA2MDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDUyNzgxMzhmZWE3MzFjOGI4NDZjNjc1M2YwNGRlYjU1YWNhMmQ0NjI3NTcz
ZmY4MDY3MjYzYWM0MTViZGJhZTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALIb2N2evggkY4BCz+Sk+A9b0gF9KGfhp8M+3deGpSO1J4/bguusONw/xyez
nyZPXyc20zEkdS6wPeskwMuBEvBvKlPq893UIIlgcz8HQCBO6IhqSysjHWLbnA5l
cKlx0B/XQeOmBaIhX/wzkKKj91k65mrdsqZ6hlhTnyLYFQZ0UqVzfQQ9lC1jao68
LHevWUpDByYaPjBlwqZ8Em1FWB4o0uLRbv53SZKGwY7F/HTSf6IwA+l2JKav8vx/
5bkI9cNendiHT6KjO/3CmyzAoUVr74vE5dbma9XNX6WJ07x1P5u1RA1hCoseeAv+
3dBTS9l2D16AGsprBwQ0W3b47w0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRkYP3S
t0g8T5aWfop2PcjGeMaQ+DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDFlZGQwOTctODg4MS00NmI5LWI4YTQtNDg5NzE3NGY0Yjg2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FnA
MA0GCSqGSIb3DQEBCwUAA4IBAQBHLBnNg6GuvvHrXCl49ksw1ZeYYLlReWb1O7yd
qN6yb6/GFOmkwbMl/H/N4yrT5heyOcPUYsWAluISvz75VNtyoaSDW+QHtFq2Oww1
N3+vt+eIbPGwRdZa9UHSuvOLB4oh284lA5duPgNFNQQd1NaeaNb0Iil+OC4ETF/B
9qb903XE47SkQBWxhrgKcYcroeOrgFM2+3NqjDdRHFzuGnvanA09iZ68UzaNspWd
zCg0MZT7rvqD52FuGPJ1LdK5AkynINvdrRUbf0snDQL88pwp0NxaTdipEJCrTU+N
N9ZH0aTG/yuNoXMqi9+NAO1qXXR57amEZNzjlLcUF09ZmZIu
-----END CERTIFICATE-----
Generated at Wed May 7 17:21:16 2025 by rpki-client