Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
File: 10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa (raw, json)
Hash identifier: 1sTAq7YzsEecZ0qbZ3gflej5oSbRpu5SJAgHVIoLUYU=
Subject key identifier: 20:F7:05:AE:61:A5:EB:50:3D:A0:63:7E:80:2E:D7:2A:DA:2F:B0:87
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D10BB3C950CE48EAF73ECFEAC5723E53DD33F17
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
Signing time: Tue 20 May 2025 19:51:54 +0000
ROA not before: Tue 20 May 2025 19:51:54 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:20c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:10:bb:3c:95:0c:e4:8e:af:73:ec:fe:ac:57:23:e5:3d:d3:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:51:54 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=49870d239a4450fda4d82aa76d74078720feba7eab703dc080544be807ebd9bb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:0d:1e:15:29:62:ae:73:27:41:92:39:e4:
7e:1d:c9:ae:24:04:7b:65:da:77:13:5e:37:cb:a6:
14:37:38:be:a5:5b:e0:d5:e0:99:a1:87:23:b0:b8:
6e:a4:91:c8:6b:82:6a:c8:c8:5b:d7:9f:66:d9:cc:
be:64:3b:20:6c:5f:f5:71:14:a9:28:30:bc:1f:33:
9a:7b:56:33:82:b1:0e:c5:bf:7b:51:3d:dc:6c:d5:
31:68:65:5e:c5:df:42:1e:80:71:4f:58:33:7c:30:
2b:4e:01:f7:00:e6:1e:82:b9:a9:7b:f2:48:2d:90:
bb:29:a6:0a:f3:f9:8e:9b:b6:b8:88:c2:cd:2e:a4:
e6:bb:a0:48:97:c9:0e:aa:d6:8c:67:95:4e:56:1b:
a3:f9:45:14:9d:f5:ad:6f:6c:e8:1b:a3:db:6e:1f:
ac:da:e0:6c:ad:0b:eb:f7:a5:e0:b4:45:48:2c:01:
3f:6a:3a:be:69:3d:08:8b:41:e0:9b:73:24:05:b7:
e5:ba:9e:27:de:a6:1c:9d:5b:49:d9:78:ad:87:29:
5c:46:71:18:8b:fd:83:f0:73:69:57:62:d2:95:f7:
72:ed:0c:23:e2:4a:78:f8:c8:8b:25:63:d6:86:2e:
06:5c:b4:a0:4a:b2:a0:93:c8:9a:0e:d0:0b:b9:02:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:05:AE:61:A5:EB:50:3D:A0:63:7E:80:2E:D7:2A:DA:2F:B0:87
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
32:27:42:6e:3b:76:38:84:6f:b0:3a:57:0c:21:1a:06:c4:94:
73:aa:d1:6a:50:88:3a:d2:3c:ee:8f:8f:8b:76:13:db:05:5f:
df:c5:97:0c:7a:87:e8:de:be:8b:e5:07:a2:08:4f:33:f1:e8:
0b:a8:8e:06:93:54:8c:d8:01:52:9a:98:cd:9a:b2:5c:6a:e4:
85:69:be:9f:da:6e:3f:62:a6:47:1a:80:7e:8a:d9:69:87:2a:
d7:d7:ac:1a:e9:e7:5a:4e:2e:8f:6b:4b:c2:04:8d:bf:0c:ba:
65:74:c0:fd:24:0b:19:2c:b2:45:e2:1b:e7:a3:ee:da:f4:e9:
ff:8c:62:2c:87:0d:0d:26:4d:c1:6d:0e:04:db:12:8b:da:68:
fc:e4:01:6c:a6:44:1e:c9:58:09:ee:b5:43:e6:aa:c8:7b:72:
e8:ad:6d:24:2f:7b:45:d5:23:ad:42:f1:0b:d7:53:f4:b0:dc:
98:2d:3f:7c:e0:ea:58:36:11:af:82:09:f3:37:1c:e6:81:14:
23:85:a4:f1:29:8d:fe:df:e9:41:ff:e6:a2:2d:1f:23:f4:fb:
d9:8b:04:d2:7c:18:e6:13:70:49:83:ba:d0:8d:21:31:03:c9:
f2:e1:35:f1:07:92:54:bd:dd:2d:a8:dc:0b:af:a9:b6:b1:89:
9f:f4:10:4c
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfRC7PJUM5I6vc+z+rFcj5T3TPxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTUxNTRaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ5ODcwZDIzOWE0NDUwZmRhNGQ4MmFhNzZkNzQwNzg3MjBmZWJhN2VhYjcw
M2RjMDgwNTQ0YmU4MDdlYmQ5YmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJp9DR4VKWKucydBkjnkfh3JriQEe2XadxNeN8umFDc4vqVb4NXgmaGHI7C4
bqSRyGuCasjIW9efZtnMvmQ7IGxf9XEUqSgwvB8zmntWM4KxDsW/e1E93GzVMWhl
XsXfQh6AcU9YM3wwK04B9wDmHoK5qXvySC2QuymmCvP5jpu2uIjCzS6k5rugSJfJ
DqrWjGeVTlYbo/lFFJ31rW9s6Buj224frNrgbK0L6/el4LRFSCwBP2o6vmk9CItB
4JtzJAW35bqeJ96mHJ1bSdl4rYcpXEZxGIv9g/BzaVdi0pX3cu0MI+JKePjIiyVj
1oYuBly0oEqyoJPImg7QC7kCoM8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQg9wWu
YaXrUD2gY36ALtcq2i+whzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTBhYzVkMjEtYWM3OS00NjBiLTllMjAtNWZmYTM2NmNhMGVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DUg
wDANBgkqhkiG9w0BAQsFAAOCAQEAMidCbjt2OIRvsDpXDCEaBsSUc6rRalCIOtI8
7o+Pi3YT2wVf38WXDHqH6N6+i+UHoghPM/HoC6iOBpNUjNgBUpqYzZqyXGrkhWm+
n9puP2KmRxqAforZaYcq19esGunnWk4uj2tLwgSNvwy6ZXTA/SQLGSyyReIb56Pu
2vTp/4xiLIcNDSZNwW0OBNsSi9po/OQBbKZEHslYCe61Q+aqyHty6K1tJC97RdUj
rULxC9dT9LDcmC0/fODqWDYRr4IJ8zcc5oEUI4Wk8SmN/t/pQf/moi0fI/T72YsE
0nwY5hNwSYO60I0hMQPJ8uE18QeSVL3dLajcC6+ptrGJn/QQTA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:30 2025 by rpki-client