Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7e40fe2-fa32-4cf9-8684-8c3556570b30.roa
File: a7e40fe2-fa32-4cf9-8684-8c3556570b30.roa (raw, json)
Hash identifier: v4xBleIuqkNyqj0yBsof1aygiFYbUJ9eQkZpT8lV7TQ=
Subject key identifier: 0C:84:D0:F9:4F:37:A3:9E:11:1A:3A:61:6D:C6:CD:7E:75:ED:1C:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65C0D6955E670E76CB541E9AF226D44EDEDBA258
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7e40fe2-fa32-4cf9-8684-8c3556570b30.roa
Signing time: Mon 28 Apr 2025 15:40:37 +0000
ROA not before: Mon 28 Apr 2025 15:40:37 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c0:d6:95:5e:67:0e:76:cb:54:1e:9a:f2:26:d4:4e:de:db:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:40:37 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=2a0b31e651b0dd33cc8979fa21ec0fb6dd28fd635350f7ae22efcd50178f671a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:6d:ae:53:b8:df:03:96:eb:d3:5b:bc:da:
7b:b3:76:f2:78:b7:68:5d:12:df:b8:7c:f8:da:83:
75:7a:0b:6a:94:28:cb:78:1d:90:60:c9:db:39:ac:
69:a7:46:58:17:c2:5f:13:6b:05:2d:f4:be:cf:da:
82:a3:5b:06:e4:c6:1b:69:8c:07:17:2c:8f:ad:1b:
11:f0:e6:44:5e:92:bc:b3:b1:4e:65:ce:25:49:ff:
56:ab:05:b6:a6:16:f3:d1:ab:23:a5:d9:cf:bd:95:
8a:74:69:6c:4e:da:f8:02:ed:70:c5:0e:fc:90:16:
ec:1d:85:b0:27:79:7b:86:f1:b1:33:4e:66:02:f3:
cb:9f:1d:73:8b:ed:39:62:10:56:8d:51:be:92:0a:
f2:ad:84:82:16:a4:be:bd:0a:9d:84:41:2b:3a:10:
09:25:26:7a:52:45:8a:87:b3:e1:a1:56:ff:c1:e4:
ae:6d:be:df:d9:01:56:3c:d9:68:f3:c4:1b:f6:65:
f8:b5:23:9e:3a:53:fa:0f:8e:a6:6c:52:d7:51:5f:
cf:73:f9:99:7c:69:c3:3d:07:1b:70:66:ac:d2:db:
c1:42:96:64:d1:8e:00:0a:7a:82:5b:1c:c5:a0:ae:
fe:1a:38:72:ee:9c:2e:29:4b:c3:7a:4d:90:41:81:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:84:D0:F9:4F:37:A3:9E:11:1A:3A:61:6D:C6:CD:7E:75:ED:1C:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7e40fe2-fa32-4cf9-8684-8c3556570b30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:9000::/40
Signature Algorithm: sha256WithRSAEncryption
12:56:32:6d:cc:9e:1d:69:c3:a7:1c:7d:59:a6:31:d3:a6:b4:
d6:69:3f:7d:38:df:b9:50:b6:06:9b:bd:96:cf:90:9e:c9:5f:
1e:4e:7f:9e:c9:69:0b:05:66:f2:f2:43:38:2b:6d:e7:af:59:
f1:2e:17:d9:58:97:67:0f:f3:83:a6:01:da:69:65:aa:a7:11:
b4:b6:63:0f:39:15:76:68:f2:b5:5a:31:79:e7:5d:16:fa:c0:
6c:fd:ff:c5:c7:70:31:53:49:18:ed:eb:81:bf:65:c3:09:f6:
c6:e4:db:a4:41:c3:93:a1:de:78:92:df:b8:ef:45:f4:74:5f:
a5:c6:18:94:13:4d:43:16:c7:f1:dc:eb:51:e6:09:6d:8a:d3:
03:fc:ae:3e:cc:10:08:5b:26:ce:79:3e:c9:32:36:ce:e2:63:
a3:d6:94:d6:a8:ba:b9:0f:26:de:50:d4:ac:73:9b:15:85:e2:
39:35:3f:37:80:94:37:db:e5:d1:09:0b:e7:e9:c7:91:c1:29:
6a:db:f9:92:95:3f:95:7a:f6:04:4c:62:ce:35:d3:ef:c6:72:
f8:d4:c6:90:ab:3a:28:fb:d1:4b:18:0f:21:70:66:61:56:4d:
53:84:71:69:ad:66:4e:87:f5:7e:76:d8:a3:18:d0:8a:c2:c5:
24:3e:b7:99
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUZcDWlV5nDnbLVB6a8ibUTt7bolgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjgxNTQwMzdaFw0yNTA2MDIyMzU5NTlaMHoxSTBHBgNV
BAUTQDJhMGIzMWU2NTFiMGRkMzNjYzg5NzlmYTIxZWMwZmI2ZGQyOGZkNjM1MzUw
ZjdhZTIyZWZjZDUwMTc4ZjY3MWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK24ba5TuN8DluvTW7zae7N28ni3aF0S37h8+NqDdXoLapQoy3gdkGDJ2zms
aadGWBfCXxNrBS30vs/agqNbBuTGG2mMBxcsj60bEfDmRF6SvLOxTmXOJUn/VqsF
tqYW89GrI6XZz72VinRpbE7a+ALtcMUO/JAW7B2FsCd5e4bxsTNOZgLzy58dc4vt
OWIQVo1RvpIK8q2Eghakvr0KnYRBKzoQCSUmelJFioez4aFW/8Hkrm2+39kBVjzZ
aPPEG/Zl+LUjnjpT+g+OpmxS11Ffz3P5mXxpwz0HG3BmrNLbwUKWZNGOAAp6glsc
xaCu/ho4cu6cLilLw3pNkEGBABsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQMhND5
TzejnhEaOmFtxs1+de0cXzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTdlNDBmZTItZmEzMi00Y2Y5LTg2ODQtOGMzNTU2NTcwYjMwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0FmQ
MA0GCSqGSIb3DQEBCwUAA4IBAQASVjJtzJ4dacOnHH1ZpjHTprTWaT99ON+5ULYG
m72Wz5CeyV8eTn+eyWkLBWby8kM4K23nr1nxLhfZWJdnD/ODpgHaaWWqpxG0tmMP
ORV2aPK1WjF5510W+sBs/f/Fx3AxU0kY7euBv2XDCfbG5NukQcOTod54kt+470X0
dF+lxhiUE01DFsfx3OtR5gltitMD/K4+zBAIWybOeT7JMjbO4mOj1pTWqLq5Dybe
UNSsc5sVheI5NT83gJQ32+XRCQvn6ceRwSlq2/mSlT+VevYETGLONdPvxnL41MaQ
qzoo+9FLGA8hcGZhVk1ThHFprWZOh/V+dtijGNCKwsUkPreZ
-----END CERTIFICATE-----
Generated at Mon May 5 13:28:23 2025 by rpki-client