Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/117f6e2e-2cfa-4aaf-9a5c-97d19f1e24db.roa
File: 117f6e2e-2cfa-4aaf-9a5c-97d19f1e24db.roa (raw, json)
Hash identifier: BoPMn8vbpqzT9wW98+PHBB2F39MMRfZ6KNfybiqDOhg=
Subject key identifier: A5:78:09:ED:A8:79:C1:88:EC:E3:71:DD:7F:B1:9A:1F:0A:E5:EA:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 771E3EB5FAE14A3070E94246CD76392CFB45F14E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/117f6e2e-2cfa-4aaf-9a5c-97d19f1e24db.roa
Signing time: Fri 25 Apr 2025 19:20:17 +0000
ROA not before: Fri 25 Apr 2025 19:20:17 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:a0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1e:3e:b5:fa:e1:4a:30:70:e9:42:46:cd:76:39:2c:fb:45:f1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:20:17 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=6ca55cf2cd09d31442889e512441c433a3db55eda796c05aefd5267caa6d0d9a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:19:51:bd:01:90:9a:6f:2f:3d:77:30:a8:
45:3d:63:fb:17:ae:c3:3c:95:aa:3b:a0:95:25:e3:
2b:4c:d6:62:14:5f:fc:63:38:0b:f5:09:79:6b:a4:
a0:1a:11:ef:30:7c:d4:b0:d1:e5:c9:1d:54:f6:8b:
8d:e4:fa:a0:bf:0d:9a:23:b5:f7:75:c8:42:c7:49:
4f:d8:ff:e5:30:1e:ea:d7:cd:6b:cd:6c:2e:08:b8:
26:85:08:0a:d7:99:7c:b2:d8:21:a9:4c:2c:3b:6e:
31:f4:ea:c4:53:f5:76:8e:db:b2:7c:a5:11:5d:0a:
f3:e0:f8:05:22:24:ad:86:2f:3e:3c:c6:9b:a1:37:
67:c0:12:da:5a:fa:95:21:22:5e:dc:23:c6:b7:15:
13:19:8a:13:97:f9:19:ed:b2:60:a9:c0:1b:c1:60:
6d:03:8d:59:cf:f6:03:b9:2b:9f:8b:67:40:ca:cd:
ad:65:ed:8e:d5:ad:2e:82:a7:44:b6:d8:50:e2:f8:
5b:fb:f7:dc:0c:55:eb:30:57:e2:6d:61:8e:52:2a:
d2:c4:c1:35:45:cf:e9:83:21:a2:d3:3b:7e:ed:25:
3d:1b:f5:6d:76:87:e8:ae:50:42:37:8e:57:e9:34:
e3:4f:b6:93:10:7f:3c:db:cf:60:73:55:d5:ff:9b:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:78:09:ED:A8:79:C1:88:EC:E3:71:DD:7F:B1:9A:1F:0A:E5:EA:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/117f6e2e-2cfa-4aaf-9a5c-97d19f1e24db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:a0c0::/46
Signature Algorithm: sha256WithRSAEncryption
6d:b1:fb:0c:65:d1:dd:d0:fd:25:47:53:dc:11:c3:7a:cf:f2:
5a:0a:81:bb:8f:9c:84:79:04:b3:82:7b:57:a9:1f:3a:43:a4:
b8:c3:9c:15:3a:55:94:73:3f:a5:4f:7a:55:9a:f2:ec:d7:9f:
b2:77:0d:ae:39:57:e4:e9:23:9a:bd:c6:a9:86:85:83:4b:70:
bf:28:0f:d9:37:66:51:b8:3c:98:0e:03:17:a9:d2:2b:57:97:
81:bb:55:e5:d4:48:7e:6e:2f:7a:08:8c:5e:d2:e5:1c:f6:b0:
79:45:69:06:db:bb:ee:0e:76:68:ea:c8:bd:bb:64:a6:fe:3f:
ad:57:d4:a8:49:74:5f:3e:65:b9:e9:29:c1:63:9a:68:13:ab:
1c:77:71:0d:45:c1:35:57:54:8f:00:4e:5e:7e:e8:69:ab:ec:
c9:ab:1c:d3:47:92:c5:74:0e:da:9d:1c:a9:6e:9d:c9:04:cf:
36:f7:61:19:d2:bc:f4:76:6a:85:65:b9:cf:34:48:59:73:70:
5f:d1:32:ac:b8:a2:a0:63:3c:93:9f:ee:f2:67:79:f5:98:a3:
df:a9:0e:ff:2e:bd:52:67:c2:92:f7:e0:50:9b:53:3f:57:c5:
eb:25:94:85:61:ed:ac:c4:68:3c:58:21:95:72:07:d7:2e:2f:
61:3b:34:5c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUdx4+tfrhSjBw6UJGzXY5LPtF8U4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxOTIwMTdaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDZjYTU1Y2YyY2QwOWQzMTQ0Mjg4OWU1MTI0NDFjNDMzYTNkYjU1ZWRhNzk2
YzA1YWVmZDUyNjdjYWE2ZDBkOWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKY5GVG9AZCaby89dzCoRT1j+xeuwzyVqjuglSXjK0zWYhRf/GM4C/UJeWuk
oBoR7zB81LDR5ckdVPaLjeT6oL8NmiO193XIQsdJT9j/5TAe6tfNa81sLgi4JoUI
CteZfLLYIalMLDtuMfTqxFP1do7bsnylEV0K8+D4BSIkrYYvPjzGm6E3Z8AS2lr6
lSEiXtwjxrcVExmKE5f5Ge2yYKnAG8FgbQONWc/2A7krn4tnQMrNrWXtjtWtLoKn
RLbYUOL4W/v33AxV6zBX4m1hjlIq0sTBNUXP6YMhotM7fu0lPRv1bXaH6K5QQjeO
V+k040+2kxB/PNvPYHNV1f+bSH0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSleAnt
qHnBiOzjcd1/sZofCuXqqzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTE3ZjZlMmUtMmNmYS00YWFmLTlhNWMtOTdkMTlmMWUyNGRiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Heg
wDANBgkqhkiG9w0BAQsFAAOCAQEAbbH7DGXR3dD9JUdT3BHDes/yWgqBu4+chHkE
s4J7V6kfOkOkuMOcFTpVlHM/pU96VZry7NefsncNrjlX5Okjmr3GqYaFg0twvygP
2TdmUbg8mA4DF6nSK1eXgbtV5dRIfm4vegiMXtLlHPaweUVpBtu77g52aOrIvbtk
pv4/rVfUqEl0Xz5luekpwWOaaBOrHHdxDUXBNVdUjwBOXn7oaavsyasc00eSxXQO
2p0cqW6dyQTPNvdhGdK89HZqhWW5zzRIWXNwX9EyrLiioGM8k5/u8md59Zij36kO
/y69UmfCkvfgUJtTP1fF6yWUhWHtrMRoPFghlXIH1y4vYTs0XA==
-----END CERTIFICATE-----
Generated at Mon May 5 18:40:32 2025 by rpki-client