Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
File: 1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa (raw, json)
Hash identifier: EAVvVkVvm4douJZvjbgr5/u4MKytOusqTwj6Acd7RmQ=
Subject key identifier: 09:DC:CA:47:5D:14:66:69:A4:15:D2:D3:C0:19:59:F8:5B:C8:78:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44E704635A1172F62ED1240034C8FF3E7D3A2357
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
Signing time: Wed 16 Apr 2025 19:22:22 +0000
ROA not before: Wed 16 Apr 2025 19:22:22 +0000
ROA not after: Wed 21 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e7:04:63:5a:11:72:f6:2e:d1:24:00:34:c8:ff:3e:7d:3a:23:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 16 19:22:22 2025 GMT
Not After : May 21 23:59:59 2025 GMT
Subject: serialNumber=a1c8e2642a30caf15703de4aab2012372403f13c85472639ff689f7c26acfc9d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:42:2c:a7:a1:4d:82:55:ae:fb:59:4b:a3:
c7:7e:af:70:21:b2:e6:9d:f6:f7:fd:b7:f0:1d:84:
27:c2:a0:a7:d7:74:ad:b6:2e:e6:40:8a:00:1d:ec:
a3:29:7a:c3:03:d9:5e:f3:15:1e:bd:a4:81:bf:b1:
56:98:fa:4d:fc:02:e7:32:1f:25:ae:7b:a2:ec:22:
96:1e:ee:f6:9b:e6:f2:15:3e:e2:4d:a2:aa:e0:f9:
10:3b:e0:1a:30:27:74:65:31:65:c5:db:73:c0:52:
26:02:b2:cb:50:e7:ad:70:78:92:3a:88:11:2b:5e:
53:ef:b6:b0:93:0d:cd:ae:e5:d2:d3:44:2a:a6:31:
38:ba:b1:3f:1b:ed:ab:c0:46:9b:f2:af:e6:59:30:
21:ed:41:38:4f:73:21:d9:f5:cd:86:44:e6:53:65:
a4:02:d1:a3:44:40:e6:f0:6f:2f:04:72:81:6c:24:
f9:97:25:97:b3:9c:18:a0:9d:c1:10:25:37:e0:d9:
65:82:62:af:f2:53:f5:4d:b7:57:63:c0:6a:96:43:
a1:9b:85:ba:ec:76:c1:41:e2:f5:cf:48:90:dc:b2:
3e:a1:91:32:70:15:77:6b:ef:cc:74:6b:49:5f:ea:
a9:9c:8a:b8:fb:8e:9c:c5:0d:70:e1:f2:31:0d:c8:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DC:CA:47:5D:14:66:69:A4:15:D2:D3:C0:19:59:F8:5B:C8:78:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1e62f8d3-a799-4cf1-86a5-f65d4f494f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:83:e2:72:ad:2e:9b:6e:f8:82:38:b8:c4:1c:57:a0:51:5c:
d2:57:fb:dc:68:49:05:1b:73:57:39:69:26:eb:32:28:fd:cc:
ab:20:dc:ab:eb:5c:1e:52:d9:88:c2:20:58:d6:fe:88:46:fc:
93:84:b0:24:8a:60:30:dc:c4:58:4a:30:37:92:43:2b:73:e3:
1d:6e:94:21:e2:3a:25:18:0d:d7:a9:5f:aa:d0:04:e6:85:dd:
e4:a8:f7:60:47:4b:eb:ed:b0:ba:b9:e2:03:55:c5:25:88:ae:
f1:26:ba:0f:2e:d3:a9:e0:e8:ce:27:dc:a6:45:eb:7f:53:c3:
36:6a:7e:8e:d7:d9:ee:7c:2b:cd:3a:19:d5:e5:e7:06:43:cd:
ef:d5:57:f5:0d:bb:f8:cf:d4:14:16:96:50:7f:a1:b9:ed:8c:
27:3d:d3:56:32:a6:ac:4f:59:3c:75:50:af:d6:8e:b7:1a:05:
db:d3:56:fd:d6:45:83:6a:1f:24:f1:92:c6:a1:b1:58:90:1f:
28:fc:c3:05:38:dc:53:ec:6f:b2:9f:44:b1:84:aa:5f:fb:95:
63:9d:98:3e:ff:51:af:1e:49:36:b8:4b:d1:51:54:99:46:cf:
4e:62:d9:f1:f2:92:cd:a0:f0:41:67:b6:f1:7e:54:73:05:d6:
7d:b6:69:89
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUROcEY1oRcvYu0SQANMj/Pn06I1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MTYxOTIyMjJaFw0yNTA1MjEyMzU5NTlaMHoxSTBHBgNV
BAUTQGExYzhlMjY0MmEzMGNhZjE1NzAzZGU0YWFiMjAxMjM3MjQwM2YxM2M4NTQ3
MjYzOWZmNjg5ZjdjMjZhY2ZjOWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOhzQiynoU2CVa77WUujx36vcCGy5p329/238B2EJ8Kgp9d0rbYu5kCKAB3s
oyl6wwPZXvMVHr2kgb+xVpj6TfwC5zIfJa57ouwilh7u9pvm8hU+4k2iquD5EDvg
GjAndGUxZcXbc8BSJgKyy1DnrXB4kjqIESteU++2sJMNza7l0tNEKqYxOLqxPxvt
q8BGm/Kv5lkwIe1BOE9zIdn1zYZE5lNlpALRo0RA5vBvLwRygWwk+Zcll7OcGKCd
wRAlN+DZZYJir/JT9U23V2PAapZDoZuFuux2wUHi9c9IkNyyPqGRMnAVd2vvzHRr
SV/qqZyKuPuOnMUNcOHyMQ3IDtUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQJ3MpH
XRRmaaQV0tPAGVn4W8h4kzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MWU2MmY4ZDMtYTc5OS00Y2YxLTg2YTUtZjY1ZDRmNDk0ZjA0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HQg
MA0GCSqGSIb3DQEBCwUAA4IBAQCsg+JyrS6bbviCOLjEHFegUVzSV/vcaEkFG3NX
OWkm6zIo/cyrINyr61weUtmIwiBY1v6IRvyThLAkimAw3MRYSjA3kkMrc+MdbpQh
4jolGA3XqV+q0ATmhd3kqPdgR0vr7bC6ueIDVcUliK7xJroPLtOp4OjOJ9ymRet/
U8M2an6O19nufCvNOhnV5ecGQ83v1Vf1Dbv4z9QUFpZQf6G57YwnPdNWMqasT1k8
dVCv1o63GgXb01b91kWDah8k8ZLGobFYkB8o/MMFONxT7G+yn0SxhKpf+5VjnZg+
/1GvHkk2uEvRUVSZRs9OYtnx8pLNoPBBZ7bxflRzBdZ9tmmJ
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:32 2025 by rpki-client