Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
File: 10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa (raw, json)
Hash identifier: 3Nem0eJFR9W82GBYmDpal4iemLDKbkp2y5DBVniWiNI=
Subject key identifier: 94:64:FF:6C:F8:D8:FA:74:5B:F1:9D:A2:8E:F7:FF:17:C4:24:22:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 73026F9157F6168D2F6B2C4CA1FA672363675268
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
Signing time: Fri 25 Apr 2025 19:41:09 +0000
ROA not before: Fri 25 Apr 2025 19:41:09 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:20c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:02:6f:91:57:f6:16:8d:2f:6b:2c:4c:a1:fa:67:23:63:67:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:41:09 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=8de75917f71e4f9379f679c2f565e31cfd426eca05d312a4583eba3dcb9bcfb6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:58:6f:35:7a:51:db:15:54:db:ec:0d:8f:
e3:c1:57:da:d7:34:64:19:24:d6:ce:ee:fb:16:23:
78:df:f6:36:bb:28:09:aa:53:47:a4:96:2c:81:cc:
ab:b6:78:88:8f:c2:fa:be:74:4d:31:22:d7:a5:fd:
e0:56:96:d2:1f:99:70:c6:57:c5:88:6e:50:91:cd:
08:4e:ee:ee:d7:69:6f:d0:84:54:43:67:fb:9c:ce:
70:44:19:11:6a:c1:90:1f:0d:dc:10:df:ad:31:75:
e4:54:cf:63:d0:28:6f:92:3a:f3:2d:84:4e:e7:6d:
c5:15:fb:c7:47:3e:e9:8d:d2:19:68:4e:95:af:aa:
8d:e9:17:17:7b:a2:4e:fe:72:de:33:cc:4f:2f:2c:
e1:f6:5f:60:62:a1:a8:24:fb:a2:34:df:df:ed:e8:
fd:d3:cb:32:6d:d1:e7:05:d2:48:6e:0e:fb:33:c3:
0f:56:2f:7b:44:e5:58:f3:20:2a:1a:e8:c1:4f:86:
6f:3a:a3:24:74:70:48:b3:d7:b4:94:d5:9f:bb:df:
97:d0:65:84:8e:77:b5:b3:36:8c:45:b8:06:b1:ba:
4b:65:4e:55:9d:82:c0:e9:e4:e1:0a:29:2b:1b:ba:
fe:63:4c:02:f6:14:ae:5f:05:2e:a8:4b:af:5f:89:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:64:FF:6C:F8:D8:FA:74:5B:F1:9D:A2:8E:F7:FF:17:C4:24:22:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10ac5d21-ac79-460b-9e20-5ffa366ca0ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
c9:38:f2:fc:d8:63:9d:5d:96:45:2a:39:0c:0b:c2:2d:2b:57:
bb:e5:64:3c:09:3d:db:7f:8f:f2:fe:91:c6:fa:99:bb:91:7e:
41:32:bb:d6:1f:fa:ad:51:b8:e3:06:ed:39:e6:1c:08:5b:5d:
da:cd:b5:1a:12:0a:0d:28:a2:09:91:e4:0b:db:a4:7d:a9:f2:
d1:2c:b9:20:b4:64:a3:b1:78:90:e3:5b:74:bd:38:8c:8b:15:
4e:de:6d:a9:b6:c0:14:35:a4:10:96:2f:f4:4b:6c:62:2b:4b:
42:41:13:e9:90:ae:57:52:5b:35:ce:bc:e9:a1:a2:e9:f2:be:
5d:e3:b0:5d:f7:c3:79:ae:15:ec:b5:73:26:89:be:f3:65:3f:
ad:24:d4:7a:ea:da:b1:56:dc:1c:22:ed:48:a5:21:ed:a9:ef:
10:a4:51:0b:44:30:8c:50:41:78:cc:d3:67:e5:53:01:cf:43:
62:f3:1e:1a:bb:4c:5f:ea:50:64:e9:f0:6b:be:2e:27:56:c0:
59:f0:37:03:6f:93:4e:ee:6c:e2:c6:a7:16:c2:6d:ae:c8:e0:
e2:18:be:3c:ac:0c:b0:9d:94:07:55:f9:33:48:78:c2:b4:30:
4c:28:ec:e3:37:09:20:d7:53:f6:d0:23:98:aa:87:ba:df:3a:
50:9a:fd:5d
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcwJvkVf2Fo0vayxMofpnI2NnUmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxOTQxMDlaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDhkZTc1OTE3ZjcxZTRmOTM3OWY2NzljMmY1NjVlMzFjZmQ0MjZlY2EwNWQz
MTJhNDU4M2ViYTNkY2I5YmNmYjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKFyWG81elHbFVTb7A2P48FX2tc0ZBkk1s7u+xYjeN/2NrsoCapTR6SWLIHM
q7Z4iI/C+r50TTEi16X94FaW0h+ZcMZXxYhuUJHNCE7u7tdpb9CEVENn+5zOcEQZ
EWrBkB8N3BDfrTF15FTPY9Aob5I68y2ETudtxRX7x0c+6Y3SGWhOla+qjekXF3ui
Tv5y3jPMTy8s4fZfYGKhqCT7ojTf3+3o/dPLMm3R5wXSSG4O+zPDD1Yve0TlWPMg
KhrowU+GbzqjJHRwSLPXtJTVn7vfl9BlhI53tbM2jEW4BrG6S2VOVZ2CwOnk4Qop
Kxu6/mNMAvYUrl8FLqhLr1+J/ykCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSUZP9s
+Nj6dFvxnaKO9/8XxCQi+TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTBhYzVkMjEtYWM3OS00NjBiLTllMjAtNWZmYTM2NmNhMGVkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DUg
wDANBgkqhkiG9w0BAQsFAAOCAQEAyTjy/NhjnV2WRSo5DAvCLStXu+VkPAk923+P
8v6RxvqZu5F+QTK71h/6rVG44wbtOeYcCFtd2s21GhIKDSiiCZHkC9ukfany0Sy5
ILRko7F4kONbdL04jIsVTt5tqbbAFDWkEJYv9EtsYitLQkET6ZCuV1JbNc686aGi
6fK+XeOwXffDea4V7LVzJom+82U/rSTUeurasVbcHCLtSKUh7anvEKRRC0QwjFBB
eMzTZ+VTAc9DYvMeGrtMX+pQZOnwa74uJ1bAWfA3A2+TTu5s4sanFsJtrsjg4hi+
PKwMsJ2UB1X5M0h4wrQwTCjs4zcJINdT9tAjmKqHut86UJr9XQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:36 2025 by rpki-client