Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
File: 11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa (raw, json)
Hash identifier: IHVAMEirJLLZLZVHDA6r4Hn1t51ncHfpPRN5aq77sPE=
Subject key identifier: 33:3C:2E:10:09:A9:33:94:83:E9:38:84:DD:A1:28:36:9B:30:5D:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 48C632900749A30156B87C854A3F2E20C2748E93
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
Signing time: Fri 25 Apr 2025 20:20:13 +0000
ROA not before: Fri 25 Apr 2025 20:20:13 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c6:32:90:07:49:a3:01:56:b8:7c:85:4a:3f:2e:20:c2:74:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:20:13 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=d5b95237bc51143a98c07570c172560d0f85e418f74ae4f00a17586940063aa1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:cc:28:25:e2:37:52:fb:68:25:42:a8:3c:
6f:4a:59:be:a5:24:6a:0f:6b:77:da:0e:87:9a:e7:
e0:fb:6e:96:ff:f8:53:61:06:dd:f3:d8:73:d8:67:
66:9f:92:18:d7:c9:45:da:2e:af:87:d1:8b:b0:b7:
1e:61:e1:7b:60:d9:fb:cd:0f:98:e4:8f:dd:7c:a3:
0e:b5:da:d5:ec:13:dd:2b:27:ba:90:d0:4d:6f:70:
eb:9f:52:c3:f8:33:5e:06:45:7d:a0:a6:9a:94:de:
ff:65:88:77:8f:74:09:b8:e3:20:e9:e8:ce:d3:bc:
7a:96:eb:96:7b:ad:b3:0d:4c:8c:e9:50:e0:14:9f:
bc:2f:02:b1:69:97:b0:d0:29:26:6c:0e:6b:33:93:
3f:46:90:20:3a:d4:78:2e:9f:30:de:6a:f2:21:0e:
72:cd:7e:91:36:fe:3b:b2:8d:4a:7a:c4:32:74:78:
b4:04:64:b6:9e:51:4a:a4:f9:5f:44:2b:ea:7e:6b:
3a:38:57:bf:4a:31:fa:9d:77:61:7f:63:b6:e4:92:
55:0d:72:27:81:e6:51:3e:ef:a1:03:ae:94:8f:0a:
76:61:e1:06:64:99:3d:04:61:d6:ee:66:b2:b1:ed:
a0:6a:73:cf:12:bf:f6:ec:78:ca:37:cc:1f:66:07:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:2E:10:09:A9:33:94:83:E9:38:84:DD:A1:28:36:9B:30:5D:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/11c150fc-dcb5-402c-9bf0-5a46c2b58d35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b:800::/37
Signature Algorithm: sha256WithRSAEncryption
5c:46:33:a5:d1:e6:0b:36:13:c4:f4:03:65:ed:7c:55:58:e8:
84:a4:92:44:6a:05:35:22:c1:95:39:58:3b:66:45:5f:f4:29:
70:18:50:c2:85:a1:ae:d4:3e:e3:58:f2:39:c5:23:c6:81:ac:
9c:74:99:a8:93:09:4f:b6:b7:55:3a:b9:cb:a4:82:73:bb:81:
00:be:46:d7:ed:4a:c3:a1:4b:c3:ba:bc:bd:2c:2c:92:55:3f:
7f:82:06:c5:d4:66:89:66:1e:e9:c0:3c:79:60:99:5f:da:d0:
0a:60:f3:9b:5e:09:ed:ab:c8:6f:4f:a1:00:d5:63:8d:75:e9:
03:9b:0d:1d:2a:60:ca:92:d8:be:ea:72:77:40:ab:c5:5e:63:
b6:72:ee:0b:14:3e:71:5c:61:54:d8:cf:fd:48:f8:db:e8:62:
d1:63:31:77:5a:1a:0a:f0:2c:5c:19:ce:f0:14:7f:64:44:5c:
7c:88:27:5f:62:07:bf:59:ef:e4:e2:f7:ac:11:17:37:37:e1:
45:31:15:6c:ca:13:9b:46:5d:23:5d:34:d3:9b:a8:eb:18:1e:
9c:07:7f:4e:3f:b3:87:a2:bb:e2:16:05:80:6a:42:ae:69:c0:
d0:63:43:8a:3f:12:80:28:e5:df:bc:69:91:e8:30:37:57:d9:
d1:0c:af:31
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUSMYykAdJowFWuHyFSj8uIMJ0jpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUyMDIwMTNaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1Yjk1MjM3YmM1MTE0M2E5OGMwNzU3MGMxNzI1NjBkMGY4NWU0MThmNzRh
ZTRmMDBhMTc1ODY5NDAwNjNhYTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhozCgl4jdS+2glQqg8b0pZvqUkag9rd9oOh5rn4Ptulv/4U2EG3fPYc9hn
Zp+SGNfJRdour4fRi7C3HmHhe2DZ+80PmOSP3XyjDrXa1ewT3SsnupDQTW9w659S
w/gzXgZFfaCmmpTe/2WId490CbjjIOnoztO8epbrlnutsw1MjOlQ4BSfvC8CsWmX
sNApJmwOazOTP0aQIDrUeC6fMN5q8iEOcs1+kTb+O7KNSnrEMnR4tARktp5RSqT5
X0Qr6n5rOjhXv0ox+p13YX9jtuSSVQ1yJ4HmUT7voQOulI8KdmHhBmSZPQRh1u5m
srHtoGpzzxK/9ux4yjfMH2YHvIcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQzPC4Q
CakzlIPpOITdoSg2mzBdZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTFjMTUwZmMtZGNiNS00MDJjLTliZjAtNWE0NmMyYjU4ZDM1LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0BsI
MA0GCSqGSIb3DQEBCwUAA4IBAQBcRjOl0eYLNhPE9ANl7XxVWOiEpJJEagU1IsGV
OVg7ZkVf9ClwGFDChaGu1D7jWPI5xSPGgaycdJmokwlPtrdVOrnLpIJzu4EAvkbX
7UrDoUvDury9LCySVT9/ggbF1GaJZh7pwDx5YJlf2tAKYPObXgntq8hvT6EA1WON
dekDmw0dKmDKkti+6nJ3QKvFXmO2cu4LFD5xXGFU2M/9SPjb6GLRYzF3WhoK8Cxc
Gc7wFH9kRFx8iCdfYge/We/k4vesERc3N+FFMRVsyhObRl0jXTTTm6jrGB6cB39O
P7OHorviFgWAakKuacDQY0OKPxKAKOXfvGmR6DA3V9nRDK8x
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:30 2025 by rpki-client