Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4277ae08-1702-42db-870f-5d701ebda87a.roa
File: 4277ae08-1702-42db-870f-5d701ebda87a.roa (raw, json)
Hash identifier: jls85cLRuV6OM5EOb6wFgvMDX4uLyhTEDUmSkwuwB78=
Subject key identifier: B5:07:27:C7:45:A2:41:B2:AA:AA:94:16:1F:77:A9:7E:9A:0E:14:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EB0E39414D2F493F5000D21B3B3F6C03436C041
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4277ae08-1702-42db-870f-5d701ebda87a.roa
Signing time: Tue 20 May 2025 19:40:15 +0000
ROA not before: Tue 20 May 2025 19:40:15 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:5040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b0:e3:94:14:d2:f4:93:f5:00:0d:21:b3:b3:f6:c0:34:36:c0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:40:15 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=a3e2ba09860b957df4550cf165cff2a39efb83f8d9a0b95462bc8cfcbb59ac01, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:af:36:e1:4e:e8:5e:45:57:2e:29:f0:e6:
16:ec:d2:23:cb:20:58:00:bf:45:03:6f:ee:81:5c:
82:08:8b:52:5c:f9:c1:17:16:84:91:61:45:c4:28:
e2:94:82:71:7a:8f:9a:1b:e1:8a:bd:96:c1:d7:38:
26:ba:3e:11:59:3a:29:e4:4f:24:08:01:87:ee:0a:
dc:c8:cc:da:38:ea:20:38:eb:ec:0d:be:c6:ed:1c:
46:bf:f7:46:95:f7:60:cf:95:4a:5b:77:63:cd:b1:
56:df:95:d4:6a:b9:b6:27:09:42:28:93:6c:5e:ee:
ec:04:9c:68:30:df:ee:ec:c6:7c:4b:01:26:dd:ef:
56:d8:89:6a:14:3f:b3:16:ba:80:76:83:33:fa:ad:
51:46:85:22:88:92:47:f0:34:9c:45:52:7c:9f:77:
c3:ed:ce:43:8b:15:0e:14:c7:e5:48:fb:ea:b5:34:
f6:be:f7:75:b3:de:1b:e4:34:5f:b2:f4:96:32:f0:
31:80:70:c8:df:c8:d9:88:84:45:10:3f:e3:5d:3e:
66:a0:86:b3:e6:59:46:8e:09:68:57:d9:2c:18:5a:
fa:6a:2f:42:e0:60:03:1d:11:1e:c4:56:d5:aa:33:
8b:09:54:b5:a8:4c:4c:5f:2e:c7:01:67:4a:c3:0a:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:27:C7:45:A2:41:B2:AA:AA:94:16:1F:77:A9:7E:9A:0E:14:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4277ae08-1702-42db-870f-5d701ebda87a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:5040::/46
Signature Algorithm: sha256WithRSAEncryption
be:b2:c2:ec:8a:96:03:b4:90:5c:28:44:3d:5f:25:69:58:f0:
e4:79:84:9e:50:82:ba:f6:27:45:d0:69:2c:d4:e8:f0:98:1b:
66:4c:b2:3f:61:f8:c5:85:c1:19:7e:1c:ab:dc:d3:d5:1e:09:
f9:6f:bb:97:86:4e:49:50:15:5e:0b:4c:e8:53:62:aa:d0:3b:
9f:ef:92:4d:c3:9e:fc:ab:03:17:0c:b5:3b:01:ba:c6:00:07:
75:bf:d8:b7:3b:6e:1b:b3:bd:00:b0:c1:ab:6e:cc:27:bb:b7:
23:a3:bc:41:68:64:9a:90:12:e3:80:5b:03:5f:8e:45:51:2d:
ea:b1:ae:9e:4d:91:8a:28:4f:3e:73:31:3d:d1:5b:b7:d7:af:
a8:3b:da:d6:c1:95:6d:c8:8d:81:0d:c3:e9:e6:bf:a0:28:c5:
e4:ce:b6:ed:4d:c5:af:07:18:2b:d5:74:77:d9:4e:32:09:70:
aa:f1:19:35:d7:d3:8d:af:f1:e8:e4:3f:83:66:3f:41:f8:13:
6e:3f:71:a7:c0:c9:5f:3e:7b:5c:2c:3d:56:0f:19:4e:3e:d7:
8b:41:bb:7c:fc:0e:46:84:73:a5:cd:bb:02:c4:d7:b6:99:96:
ca:eb:61:18:63:5b:51:10:17:de:8e:c8:02:cf:92:a4:14:e6:
09:f3:00:a0
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDrDjlBTS9JP1AA0hs7P2wDQ2wEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTQwMTVaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGEzZTJiYTA5ODYwYjk1N2RmNDU1MGNmMTY1Y2ZmMmEzOWVmYjgzZjhkOWEw
Yjk1NDYyYmM4Y2ZjYmI1OWFjMDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMsLrzbhTuheRVcuKfDmFuzSI8sgWAC/RQNv7oFcggiLUlz5wRcWhJFhRcQo
4pSCcXqPmhvhir2Wwdc4Jro+EVk6KeRPJAgBh+4K3MjM2jjqIDjr7A2+xu0cRr/3
RpX3YM+VSlt3Y82xVt+V1Gq5ticJQiiTbF7u7AScaDDf7uzGfEsBJt3vVtiJahQ/
sxa6gHaDM/qtUUaFIoiSR/A0nEVSfJ93w+3OQ4sVDhTH5Uj76rU09r73dbPeG+Q0
X7L0ljLwMYBwyN/I2YiERRA/410+ZqCGs+ZZRo4JaFfZLBha+movQuBgAx0RHsRW
1aoziwlUtahMTF8uxwFnSsMK+/kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS1ByfH
RaJBsqqqlBYfd6l+mg4U3zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDI3N2FlMDgtMTcwMi00MmRiLTg3MGYtNWQ3MDFlYmRhODdhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0DVQ
QDANBgkqhkiG9w0BAQsFAAOCAQEAvrLC7IqWA7SQXChEPV8laVjw5HmEnlCCuvYn
RdBpLNTo8JgbZkyyP2H4xYXBGX4cq9zT1R4J+W+7l4ZOSVAVXgtM6FNiqtA7n++S
TcOe/KsDFwy1OwG6xgAHdb/YtztuG7O9ALDBq27MJ7u3I6O8QWhkmpAS44BbA1+O
RVEt6rGunk2RiihPPnMxPdFbt9evqDva1sGVbciNgQ3D6ea/oCjF5M627U3FrwcY
K9V0d9lOMglwqvEZNdfTja/x6OQ/g2Y/QfgTbj9xp8DJXz57XCw9Vg8ZTj7Xi0G7
fPwORoRzpc27AsTXtpmWyuthGGNbURAX3o7IAs+SpBTmCfMAoA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:35:28 2025 by rpki-client