Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/543bc67d-08f9-4a99-bf5e-68100e034395.roa
File: 543bc67d-08f9-4a99-bf5e-68100e034395.roa (raw, json)
Hash identifier: Le7KPtMMz/mR7/HTsE+tGTiOUSshD9WpIczj5Blg3+k=
Subject key identifier: 15:72:C5:0E:2F:B8:E0:40:C6:C9:AF:A1:BF:D5:EE:2A:B3:4C:6E:2A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 19967CF250D9593F2ABD6511DBEC303CD0CD28BE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/543bc67d-08f9-4a99-bf5e-68100e034395.roa
Signing time: Fri 25 Apr 2025 18:50:11 +0000
ROA not before: Fri 25 Apr 2025 18:50:11 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:96:7c:f2:50:d9:59:3f:2a:bd:65:11:db:ec:30:3c:d0:cd:28:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:50:11 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=5d295269aaedb4d74d31d04f59e1b3647f0a7e1fd8cd3d745e3e4e4c1d7d4da6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:58:76:33:f8:b3:aa:77:1e:38:bc:97:01:
31:c4:af:40:67:f8:78:52:8b:d7:93:fe:33:19:22:
39:c4:30:5c:f1:6d:83:b9:96:a9:ee:b0:6a:17:11:
7c:68:36:53:33:45:60:1b:7f:59:da:57:af:1b:e7:
4a:2e:ae:6c:4f:fb:bf:ef:a3:5e:5e:72:36:0d:b9:
47:03:22:eb:cb:1d:1e:8e:4e:d8:6b:e4:14:c7:83:
28:26:fb:c7:aa:72:cf:35:cb:d4:fd:af:51:36:57:
3c:0b:f2:40:b9:38:95:ed:2d:c2:a1:46:d5:d3:62:
c1:79:b4:17:21:b1:70:f1:9d:ee:eb:84:31:81:85:
d6:95:47:a8:2f:5e:05:98:84:2f:bc:93:3c:3f:a1:
e6:ff:39:6d:df:e8:14:5e:be:6a:9a:69:1b:2e:b1:
ab:a8:2f:cf:5f:8a:21:19:4d:fe:2a:13:90:b9:57:
d9:af:76:01:7f:76:23:40:d9:fd:1d:de:68:8b:4f:
25:9a:eb:04:42:a3:b5:e1:17:5d:96:d5:42:20:57:
ad:01:73:55:d1:e3:7c:c1:1a:2b:08:c7:2a:83:e3:
e6:ad:5f:57:9b:d5:2a:c3:a3:7c:a0:1e:0a:04:f4:
b2:b6:20:82:ec:61:3f:95:56:7f:eb:69:8f:58:e0:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:72:C5:0E:2F:B8:E0:40:C6:C9:AF:A1:BF:D5:EE:2A:B3:4C:6E:2A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/543bc67d-08f9-4a99-bf5e-68100e034395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4080::/48
Signature Algorithm: sha256WithRSAEncryption
0e:e2:b4:e3:37:5c:c6:af:e1:94:f6:0c:12:e2:36:f3:bb:96:
a4:9c:3f:9d:79:4f:34:66:88:b3:f2:b7:4e:4b:90:9d:26:4a:
4d:8c:64:22:c3:df:72:31:a7:2b:49:3c:9a:0d:af:68:6b:0c:
5c:56:24:1a:10:2f:27:1d:31:cc:22:c3:34:33:fe:9d:c5:dc:
c6:62:b7:7f:9b:f7:49:0d:fb:37:5f:56:d9:b6:81:fe:05:df:
21:9b:7c:af:af:41:b3:6e:ae:c0:ac:4a:00:f4:a0:68:5d:5f:
58:01:6c:5d:de:d5:c5:bb:2e:d4:82:e9:98:e7:48:5f:6d:37:
b3:4a:a7:15:45:6b:17:0f:e0:0e:1b:85:b1:ee:a4:8d:b4:c5:
c6:4e:ac:bc:12:3a:e6:b1:f6:cc:0b:e4:ab:3d:72:3b:ec:98:
c3:61:4d:48:94:ac:ca:6f:4a:77:8e:5b:d1:2f:0a:cb:66:d3:
6b:d6:ab:d7:53:ff:44:19:62:67:16:69:9c:e6:95:12:47:e4:
24:7f:58:81:00:40:4d:62:07:01:8c:13:ad:86:fd:33:79:43:
86:6e:75:be:ef:82:84:14:cc:8f:12:81:d3:fa:5a:00:50:14:
08:e9:e4:dd:1a:94:87:9d:48:fc:b8:a6:70:49:d2:a0:ce:88:
b9:8a:4e:ee
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUGZZ88lDZWT8qvWUR2+wwPNDNKL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxODUwMTFaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDVkMjk1MjY5YWFlZGI0ZDc0ZDMxZDA0ZjU5ZTFiMzY0N2YwYTdlMWZkOGNk
M2Q3NDVlM2U0ZTRjMWQ3ZDRkYTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALX1WHYz+LOqdx44vJcBMcSvQGf4eFKL15P+MxkiOcQwXPFtg7mWqe6wahcR
fGg2UzNFYBt/WdpXrxvnSi6ubE/7v++jXl5yNg25RwMi68sdHo5O2GvkFMeDKCb7
x6pyzzXL1P2vUTZXPAvyQLk4le0twqFG1dNiwXm0FyGxcPGd7uuEMYGF1pVHqC9e
BZiEL7yTPD+h5v85bd/oFF6+apppGy6xq6gvz1+KIRlN/ioTkLlX2a92AX92I0DZ
/R3eaItPJZrrBEKjteEXXZbVQiBXrQFzVdHjfMEaKwjHKoPj5q1fV5vVKsOjfKAe
CgT0srYgguxhP5VWf+tpj1jgxIcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQVcsUO
L7jgQMbJr6G/1e4qs0xuKjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTQzYmM2N2QtMDhmOS00YTk5LWJmNWUtNjgxMDBlMDM0Mzk1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJA
gDANBgkqhkiG9w0BAQsFAAOCAQEADuK04zdcxq/hlPYMEuI287uWpJw/nXlPNGaI
s/K3TkuQnSZKTYxkIsPfcjGnK0k8mg2vaGsMXFYkGhAvJx0xzCLDNDP+ncXcxmK3
f5v3SQ37N19W2baB/gXfIZt8r69Bs26uwKxKAPSgaF1fWAFsXd7Vxbsu1ILpmOdI
X203s0qnFUVrFw/gDhuFse6kjbTFxk6svBI65rH2zAvkqz1yO+yYw2FNSJSsym9K
d45b0S8Ky2bTa9ar11P/RBliZxZpnOaVEkfkJH9YgQBATWIHAYwTrYb9M3lDhm51
vu+ChBTMjxKB0/paAFAUCOnk3RqUh51I/LimcEnSoM6IuYpO7g==
-----END CERTIFICATE-----
Generated at Mon May 5 18:42:30 2025 by rpki-client