Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
File: 4078cff6-9b34-4f16-903f-c7817d86bf50.roa (raw, json)
Hash identifier: AuhUbUKn5iZj5CN3KyU2w2f69zxPSEHfa/UnhOKKwdY=
Subject key identifier: F8:31:CF:A4:F5:DE:0F:65:45:50:5F:DF:D2:D7:FB:E5:35:37:D2:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7EE72F303C96316866F8ECB88088D0422AC5E988
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
Signing time: Fri 25 Apr 2025 18:20:21 +0000
ROA not before: Fri 25 Apr 2025 18:20:21 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e7:2f:30:3c:96:31:68:66:f8:ec:b8:80:88:d0:42:2a:c5:e9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:20:21 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=fca864485d78257c5168d10aae94c618ad262e5e9ccd476a5b44eaeb8b12eaa9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:5b:77:32:8b:c4:95:e6:24:8a:c1:d6:b9:
93:60:54:df:ea:0f:19:17:f9:3e:c9:c7:09:0e:2b:
58:19:0e:93:f6:b3:12:4a:ef:b1:50:82:7d:da:1b:
f6:23:8d:15:7c:ae:95:3d:fa:9e:59:bd:b0:fb:39:
b4:9c:ec:f9:e2:ed:48:fd:ea:f0:9b:a3:a0:3a:4e:
9d:2c:a3:fe:88:3e:ce:30:cd:85:10:0b:e0:f5:f2:
fe:fe:3c:46:c6:6a:07:ea:fe:a7:d7:1b:35:88:0a:
e4:7f:10:b0:29:55:e3:cb:c0:24:5f:bf:be:13:c8:
eb:79:0c:39:d0:57:e5:1f:b4:0d:85:42:c2:db:59:
19:1b:7f:9c:28:75:56:a2:7c:df:25:aa:d0:5a:03:
d6:1c:03:40:75:67:b4:f1:48:af:d0:a6:31:2b:95:
a0:b5:22:97:4b:07:04:87:c2:05:03:14:1f:39:af:
05:a2:ff:72:c1:c3:90:1f:38:41:b4:73:79:8e:88:
d1:78:c5:6d:6a:f8:6b:db:e4:91:66:91:72:44:fe:
a0:ca:d8:a3:d0:11:12:30:a7:5b:bc:86:76:ff:43:
6c:28:82:54:ae:9f:df:6e:c1:90:7c:18:1e:76:63:
58:2b:4d:57:a6:53:c6:8a:b0:3c:51:a6:08:c9:fe:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:31:CF:A4:F5:DE:0F:65:45:50:5F:DF:D2:D7:FB:E5:35:37:D2:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4078cff6-9b34-4f16-903f-c7817d86bf50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a080::/48
Signature Algorithm: sha256WithRSAEncryption
71:5a:f8:8f:05:91:2f:95:79:f7:a3:da:3f:0e:ad:14:d6:e8:
e2:e0:b6:e6:dd:31:94:d8:be:12:48:4d:db:f9:f3:c5:3d:1f:
00:ef:b5:71:cb:e1:59:e7:4a:53:29:0b:78:9a:6e:68:b5:e5:
80:06:4a:18:8b:7e:59:25:e7:96:e2:88:05:ad:1e:0c:0c:65:
65:e7:d6:96:3a:14:8a:c0:86:d5:4d:d4:f2:87:65:6a:8b:fe:
26:b1:af:8b:dd:52:63:64:09:dc:9b:51:81:bb:d7:a0:bf:4e:
8f:b6:d5:ba:9a:8a:4f:92:58:6d:6c:5a:79:57:bb:34:bf:8e:
65:dc:91:9a:58:f7:e5:8d:2f:3e:93:14:0f:03:88:aa:6d:a6:
da:2e:90:1e:83:0a:7a:69:6b:7a:fb:7a:ca:90:34:ab:42:b6:
28:1d:07:eb:4c:5f:bd:af:ae:6e:a9:72:1c:23:eb:db:01:fc:
b4:0a:21:20:9d:72:aa:b6:ed:ca:9d:70:8f:3d:c2:74:61:92:
35:f2:d9:f0:91:35:41:b6:f9:44:8e:a8:61:5e:30:ee:b6:0f:
72:a1:af:c5:1a:e3:f3:ab:34:cb:a0:27:42:38:16:3f:75:6f:
5f:f5:0c:25:c6:82:8b:b4:c0:c0:6d:7d:b5:d4:d4:44:03:ad:
89:d6:4e:20
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUfucvMDyWMWhm+Oy4gIjQQirF6YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxODIwMjFaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGZjYTg2NDQ4NWQ3ODI1N2M1MTY4ZDEwYWFlOTRjNjE4YWQyNjJlNWU5Y2Nk
NDc2YTViNDRlYWViOGIxMmVhYTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQIW3cyi8SV5iSKwda5k2BU3+oPGRf5PsnHCQ4rWBkOk/azEkrvsVCCfdob
9iONFXyulT36nlm9sPs5tJzs+eLtSP3q8JujoDpOnSyj/og+zjDNhRAL4PXy/v48
RsZqB+r+p9cbNYgK5H8QsClV48vAJF+/vhPI63kMOdBX5R+0DYVCwttZGRt/nCh1
VqJ83yWq0FoD1hwDQHVntPFIr9CmMSuVoLUil0sHBIfCBQMUHzmvBaL/csHDkB84
QbRzeY6I0XjFbWr4a9vkkWaRckT+oMrYo9AREjCnW7yGdv9DbCiCVK6f327BkHwY
HnZjWCtNV6ZTxoqwPFGmCMn+9qkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT4Mc+k
9d4PZUVQX9/S1/vlNTfScTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDA3OGNmZjYtOWIzNC00ZjE2LTkwM2YtYzc4MTdkODZiZjUwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H+g
gDANBgkqhkiG9w0BAQsFAAOCAQEAcVr4jwWRL5V596PaPw6tFNbo4uC25t0xlNi+
EkhN2/nzxT0fAO+1ccvhWedKUykLeJpuaLXlgAZKGIt+WSXnluKIBa0eDAxlZefW
ljoUisCG1U3U8odlaov+JrGvi91SY2QJ3JtRgbvXoL9Oj7bVupqKT5JYbWxaeVe7
NL+OZdyRmlj35Y0vPpMUDwOIqm2m2i6QHoMKemlrevt6ypA0q0K2KB0H60xfva+u
bqlyHCPr2wH8tAohIJ1yqrbtyp1wjz3CdGGSNfLZ8JE1Qbb5RI6oYV4w7rYPcqGv
xRrj86s0y6AnQjgWP3VvX/UMJcaCi7TAwG19tdTURAOtidZOIA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:04 2025 by rpki-client