Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
File: 25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa (raw, json)
Hash identifier: PbNmkfoMSQDqMG2Vc2EhppHorXUxiupHUJhPFAKWo0Q=
Subject key identifier: 42:7B:B0:F1:82:00:F7:8F:CC:AE:98:E1:9E:E2:EC:71:8E:88:08:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CAF7B3D19DB037C383C61B613399F9260AF6ED2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
Signing time: Fri 25 Apr 2025 19:11:10 +0000
ROA not before: Fri 25 Apr 2025 19:11:10 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:20c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:af:7b:3d:19:db:03:7c:38:3c:61:b6:13:39:9f:92:60:af:6e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:11:10 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=73a95cb24ed706834028af30b41aef01b51528920028cdb47ebbc82b73442da9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:9f:a4:60:3a:ef:1c:63:6a:06:d9:40:43:
88:14:a2:d2:8d:5f:96:0a:6b:a2:bd:9f:31:3a:da:
4f:a0:af:72:17:c1:35:86:c2:8b:89:eb:00:ad:7b:
dd:33:e1:b9:e5:f4:ad:5a:5d:5a:20:91:f2:71:7b:
89:26:8d:9a:d7:8a:15:4e:fd:3a:00:f2:ef:df:a3:
dc:19:ff:b3:72:d4:1a:34:cf:13:d7:c7:e5:77:a5:
f4:cc:3c:18:40:a4:c8:4d:90:3d:36:33:ef:0c:84:
00:00:55:54:9d:66:e8:4f:01:65:2b:80:12:2b:14:
b0:fe:ee:59:a8:8d:f0:90:6b:fe:ca:64:48:f1:77:
b3:0a:ce:50:c2:1b:24:ff:77:60:a0:38:96:3a:fd:
10:eb:6d:ce:1f:ec:bc:b5:0b:c5:4f:6a:ed:62:14:
37:93:db:49:f0:36:54:58:ee:c8:44:2a:07:75:2a:
8e:3a:a9:61:20:db:1f:8b:75:51:8f:a7:ed:0e:49:
cc:16:12:ae:9e:82:c1:44:c6:b2:56:63:fa:ce:b6:
32:b0:7a:01:1c:24:2b:69:35:10:a2:47:46:03:86:
05:95:e3:70:81:33:d2:63:fe:f7:a6:a4:ea:34:18:
a2:ce:2f:61:3f:a8:70:77:79:a4:88:16:a3:a2:3f:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:B0:F1:82:00:F7:8F:CC:AE:98:E1:9E:E2:EC:71:8E:88:08:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/25e5dc44-9b73-42f2-b6d1-c0f559b533bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
75:fa:50:99:81:c6:30:de:be:f0:c8:2b:5a:f3:92:ca:64:54:
35:7a:d7:4a:53:36:da:65:44:c1:f0:e9:90:f3:63:c6:00:22:
6a:38:33:31:1b:e5:67:2f:a8:19:8a:82:5d:18:20:d4:51:ab:
e2:69:97:41:c6:82:a9:ca:eb:45:98:da:f8:c1:66:0e:0e:87:
d1:bd:6f:91:f2:6f:86:7b:70:3d:d4:93:0a:c2:7b:64:94:52:
79:a5:6a:ed:e6:03:f0:51:64:cd:6a:67:d2:a7:a1:b2:34:9d:
d8:e2:5e:5e:b3:20:b3:3b:0a:2a:53:92:5b:28:35:1f:77:ea:
00:f8:41:2e:67:3d:58:69:be:a4:63:47:64:1c:f5:59:f9:cf:
82:ea:61:f2:cb:77:d4:5b:71:31:0b:93:02:3e:81:30:fa:e7:
b9:a7:24:8d:62:6d:17:47:43:09:76:8c:45:6a:e0:f2:82:d5:
50:54:3d:2b:42:44:2b:2a:34:10:da:8c:ef:f0:76:d1:43:fe:
60:f3:bc:0d:3e:f6:13:1e:24:07:44:8c:6e:cb:3a:86:84:34:
d7:ed:64:5d:5b:37:1a:55:ee:8c:49:3f:f4:af:19:a1:0c:2d:
4f:ab:20:b7:cb:06:01:51:13:4f:ca:6c:f5:74:71:a2:b1:87:
b1:3a:e8:58
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDK97PRnbA3w4PGG2EzmfkmCvbtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxOTExMTBaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDczYTk1Y2IyNGVkNzA2ODM0MDI4YWYzMGI0MWFlZjAxYjUxNTI4OTIwMDI4
Y2RiNDdlYmJjODJiNzM0NDJkYTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIznn6RgOu8cY2oG2UBDiBSi0o1flgpror2fMTraT6CvchfBNYbCi4nrAK17
3TPhueX0rVpdWiCR8nF7iSaNmteKFU79OgDy79+j3Bn/s3LUGjTPE9fH5Xel9Mw8
GECkyE2QPTYz7wyEAABVVJ1m6E8BZSuAEisUsP7uWaiN8JBr/spkSPF3swrOUMIb
JP93YKA4ljr9EOttzh/svLULxU9q7WIUN5PbSfA2VFjuyEQqB3UqjjqpYSDbH4t1
UY+n7Q5JzBYSrp6CwUTGslZj+s62MrB6ARwkK2k1EKJHRgOGBZXjcIEz0mP+96ak
6jQYos4vYT+ocHd5pIgWo6I/Re8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRCe7Dx
ggD3j8yumOGe4uxxjogIrTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MjVlNWRjNDQtOWI3My00MmYyLWI2ZDEtYzBmNTU5YjUzM2JkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Hcg
wDANBgkqhkiG9w0BAQsFAAOCAQEAdfpQmYHGMN6+8MgrWvOSymRUNXrXSlM22mVE
wfDpkPNjxgAiajgzMRvlZy+oGYqCXRgg1FGr4mmXQcaCqcrrRZja+MFmDg6H0b1v
kfJvhntwPdSTCsJ7ZJRSeaVq7eYD8FFkzWpn0qehsjSd2OJeXrMgszsKKlOSWyg1
H3fqAPhBLmc9WGm+pGNHZBz1WfnPguph8st31FtxMQuTAj6BMPrnuackjWJtF0dD
CXaMRWrg8oLVUFQ9K0JEKyo0ENqM7/B20UP+YPO8DT72Ex4kB0SMbss6hoQ01+1k
XVs3GlXujEk/9K8ZoQwtT6sgt8sGAVETT8ps9XRxorGHsTroWA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:18 2025 by rpki-client