Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06ce6c77-e378-4729-929f-22edcdc281b7.roa
File: 06ce6c77-e378-4729-929f-22edcdc281b7.roa (raw, json)
Hash identifier: if+ivjwPiGWlGsd3R0usQoW1lsacdajGFjO3TFahXaA=
Subject key identifier: 1B:DA:BB:6B:C9:25:B0:BA:9B:DD:0E:83:59:EB:A8:0A:8D:93:11:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 02846C8225F0D37E43ABAF9214DE20D25B7AE52E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06ce6c77-e378-4729-929f-22edcdc281b7.roa
Signing time: Mon 21 Apr 2025 18:30:31 +0000
ROA not before: Mon 21 Apr 2025 18:30:31 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:84:6c:82:25:f0:d3:7e:43:ab:af:92:14:de:20:d2:5b:7a:e5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 21 18:30:31 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=1c2f30cd38d54914db1c3a72ebaac40622beb7f80150b0b60542ef9fc40428bb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:80:3e:d1:aa:7a:cc:9f:10:74:de:45:29:88:
95:6d:20:92:c2:f3:4e:19:3a:4f:b9:97:b2:8c:d0:
ef:1a:4c:9f:d9:dd:08:a0:ca:3e:f5:99:3e:df:d7:
88:59:42:6f:13:09:a1:3a:6f:f4:fe:cc:7d:8f:c2:
7e:94:61:7d:d5:24:79:05:3c:07:56:7f:8b:e3:07:
60:97:f6:e3:36:79:00:2d:e1:dd:f1:6d:48:1a:86:
59:9e:52:46:fc:c1:8c:ba:d0:65:cc:04:aa:0d:af:
8e:96:02:1d:b1:81:64:1a:22:73:56:cd:e5:25:59:
13:c1:42:8c:bd:7d:69:70:fe:ca:a8:ed:46:1f:f3:
4a:e9:d9:3b:7c:a8:88:46:81:17:cd:f2:8d:80:21:
2a:c5:ff:ae:86:1a:13:47:cf:a9:d4:22:dd:7b:26:
49:a8:b4:23:fb:8b:08:4c:22:9a:4a:cb:68:ad:ae:
9a:4e:78:82:5b:fc:ee:03:36:b0:9c:0d:46:33:88:
ca:5c:7e:d9:32:ce:cd:f2:19:1c:b8:95:3f:a5:00:
1e:92:52:f3:ae:d0:e4:de:9f:04:d8:b3:87:02:3a:
bb:ff:c2:f4:82:b8:e0:98:93:8b:6c:db:13:5e:af:
7f:1f:3a:64:4e:79:53:dc:e0:63:c3:35:74:52:33:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:BB:6B:C9:25:B0:BA:9B:DD:0E:83:59:EB:A8:0A:8D:93:11:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06ce6c77-e378-4729-929f-22edcdc281b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:880::/46
Signature Algorithm: sha256WithRSAEncryption
14:1e:ff:90:7a:56:63:08:c6:02:00:17:8c:3b:25:4a:80:19:
dd:ef:5e:f6:7d:13:83:e9:91:4b:5a:8e:86:91:24:f2:22:4a:
db:c2:3f:06:69:7b:78:a3:ec:5b:47:b1:b3:28:e5:62:46:e7:
98:04:62:5c:a7:b5:6f:23:24:22:af:10:51:1e:98:00:f1:ae:
ee:3a:85:f4:ae:98:cf:af:91:60:89:4c:67:b9:5a:8e:1c:25:
28:6b:b6:fc:56:14:8d:99:8e:a3:72:19:73:2f:71:08:2a:ee:
f3:11:0f:c3:02:6f:d0:00:88:2c:c4:62:55:81:de:65:6b:a9:
ac:f8:d7:9b:23:6e:1d:60:2e:00:7e:f4:cf:4f:67:c3:44:dd:
09:c0:ad:7e:ca:e8:fe:80:ce:e2:f6:91:be:01:c1:70:50:c6:
55:90:66:60:0b:5c:2e:39:8a:15:f1:7d:18:ac:cf:63:a7:30:
56:20:01:13:45:26:a6:54:28:b2:74:65:d9:f3:32:14:1e:16:
7f:bc:dd:dd:85:0b:57:de:71:49:d3:62:1c:4e:df:73:84:9c:
5b:e6:a6:ee:d8:d8:27:7b:45:7d:65:c5:51:a8:19:73:60:c9:
b5:c8:a6:d0:56:ca:ae:ff:05:31:6a:22:bf:c4:8e:aa:11:5c:
07:37:59:6b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUAoRsgiXw035Dq6+SFN4g0lt65S4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjExODMwMzFaFw0yNTA1MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDFjMmYzMGNkMzhkNTQ5MTRkYjFjM2E3MmViYWFjNDA2MjJiZWI3ZjgwMTUw
YjBiNjA1NDJlZjlmYzQwNDI4YmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO+APtGqesyfEHTeRSmIlW0gksLzThk6T7mXsozQ7xpMn9ndCKDKPvWZPt/X
iFlCbxMJoTpv9P7MfY/CfpRhfdUkeQU8B1Z/i+MHYJf24zZ5AC3h3fFtSBqGWZ5S
RvzBjLrQZcwEqg2vjpYCHbGBZBoic1bN5SVZE8FCjL19aXD+yqjtRh/zSunZO3yo
iEaBF83yjYAhKsX/roYaE0fPqdQi3XsmSai0I/uLCEwimkrLaK2umk54glv87gM2
sJwNRjOIylx+2TLOzfIZHLiVP6UAHpJS867Q5N6fBNizhwI6u//C9IK44JiTi2zb
E16vfx86ZE55U9zgY8M1dFIzFEUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQb2rtr
ySWwupvdDoNZ66gKjZMRuDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MDZjZTZjNzctZTM3OC00NzI5LTkyOWYtMjJlZGNkYzI4MWI3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DUI
gDANBgkqhkiG9w0BAQsFAAOCAQEAFB7/kHpWYwjGAgAXjDslSoAZ3e9e9n0Tg+mR
S1qOhpEk8iJK28I/Bml7eKPsW0exsyjlYkbnmARiXKe1byMkIq8QUR6YAPGu7jqF
9K6Yz6+RYIlMZ7lajhwlKGu2/FYUjZmOo3IZcy9xCCru8xEPwwJv0ACILMRiVYHe
ZWuprPjXmyNuHWAuAH70z09nw0TdCcCtfsro/oDO4vaRvgHBcFDGVZBmYAtcLjmK
FfF9GKzPY6cwViABE0UmplQosnRl2fMyFB4Wf7zd3YULV95xSdNiHE7fc4ScW+am
7tjYJ3tFfWXFUagZc2DJtcim0FbKrv8FMWoiv8SOqhFcBzdZaw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:21 2025 by rpki-client