Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
File: 452f19af-8187-465e-9ab8-4e678c11315e.roa (raw, json)
Hash identifier: cqKptBNYrNbryKmkMZwP80oel1884k7oSStvnXgz4mM=
Subject key identifier: 15:23:D2:59:74:C5:23:CD:30:BD:CF:B1:85:06:6F:03:F0:2F:BF:88
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1696C7A5C9041EAC9E4015C697414342DAFEAB3C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
Signing time: Fri 25 Apr 2025 20:20:15 +0000
ROA not before: Fri 25 Apr 2025 20:20:15 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02b::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:96:c7:a5:c9:04:1e:ac:9e:40:15:c6:97:41:43:42:da:fe:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:20:15 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=77c0ff862660e5bcaf266d33153013420cff10b378beac7b89dd2d8a5f7ce78f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:c8:a1:c0:96:8a:cb:c4:d5:65:60:80:ac:
70:79:ce:89:3a:cd:4b:bd:a0:4e:3c:2f:c2:cc:ef:
02:02:4e:6a:d1:8a:6f:31:0c:53:20:83:07:bf:de:
7f:f1:5c:8e:2e:10:f5:de:ba:31:40:c9:2e:01:8b:
3b:45:51:c6:98:88:6a:a5:33:ad:0e:9e:1d:f1:27:
0e:df:c0:e8:2c:56:0d:34:08:6a:0b:4e:35:de:df:
35:b2:0e:ef:43:03:c8:37:b8:bf:bf:f8:39:45:4b:
04:9e:3e:54:1d:00:6a:82:0d:d0:53:c3:c0:e0:32:
ad:6d:f8:81:f4:48:21:90:47:0c:c4:0c:30:7b:47:
e1:41:16:c0:08:38:c9:2b:bd:17:d3:79:21:b0:9e:
f9:b9:06:34:52:b9:88:c9:1f:4b:28:d9:96:a8:7c:
c0:dc:9c:c2:ea:76:3d:40:86:fa:a5:a7:d5:13:41:
4b:15:64:6d:47:d9:0c:17:59:18:69:2f:f4:07:6b:
d8:23:cb:11:43:ed:54:52:a6:ed:c0:8e:d6:5d:ba:
f2:51:34:89:62:75:e5:3f:0f:29:bc:fe:7b:e3:62:
06:7a:f6:67:b6:64:f9:b1:fa:e4:8f:77:71:b3:47:
db:bf:36:89:dd:2f:92:34:55:cc:a7:1a:a8:2a:5e:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:D2:59:74:C5:23:CD:30:BD:CF:B1:85:06:6F:03:F0:2F:BF:88
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/452f19af-8187-465e-9ab8-4e678c11315e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02b::/37
Signature Algorithm: sha256WithRSAEncryption
42:e3:f0:da:21:ba:94:76:8f:a8:ed:c6:cf:fe:a3:72:7c:3c:
bb:da:23:0b:d9:cd:fe:dd:31:cb:a9:f9:15:b2:2f:82:af:3f:
b5:23:dc:10:ef:fc:4c:ef:50:de:5c:b8:f8:b3:a4:d9:8a:39:
ce:60:aa:77:8f:3b:1c:39:26:72:d3:52:c7:df:bb:47:da:b3:
ac:79:12:4e:f5:d1:6c:3d:67:91:aa:34:da:ee:4b:b4:f1:bd:
23:b7:d6:80:d1:11:36:fb:8a:d0:1c:fa:f0:07:85:15:31:12:
d4:ab:45:c2:da:88:d8:23:4d:32:6b:71:a5:6c:eb:de:0d:97:
c9:40:d4:95:4f:1f:c8:c6:96:7a:d2:1f:07:20:36:10:62:d4:
a8:44:ba:8f:4c:79:70:b7:a7:dc:ba:80:51:14:ce:f0:23:98:
74:68:94:10:b4:12:fd:65:f3:e3:c8:71:2d:34:8a:7f:23:92:
f1:d5:61:19:60:02:52:ed:cc:f5:4e:0e:d6:13:49:6b:94:cc:
07:38:8f:10:7f:31:f1:14:c8:f3:8a:32:14:3e:a1:fc:a8:8b:
25:d7:a7:7a:bd:a2:5f:10:88:a1:62:75:a2:fb:70:9e:13:d7:
14:66:23:db:bf:61:03:c6:6a:9c:16:c9:91:13:34:6f:8d:57:
a1:97:82:3c
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUFpbHpckEHqyeQBXGl0FDQtr+qzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUyMDIwMTVaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDc3YzBmZjg2MjY2MGU1YmNhZjI2NmQzMzE1MzAxMzQyMGNmZjEwYjM3OGJl
YWM3Yjg5ZGQyZDhhNWY3Y2U3OGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK+ryKHAlorLxNVlYICscHnOiTrNS72gTjwvwszvAgJOatGKbzEMUyCDB7/e
f/Fcji4Q9d66MUDJLgGLO0VRxpiIaqUzrQ6eHfEnDt/A6CxWDTQIagtONd7fNbIO
70MDyDe4v7/4OUVLBJ4+VB0AaoIN0FPDwOAyrW34gfRIIZBHDMQMMHtH4UEWwAg4
ySu9F9N5IbCe+bkGNFK5iMkfSyjZlqh8wNycwup2PUCG+qWn1RNBSxVkbUfZDBdZ
GGkv9Adr2CPLEUPtVFKm7cCO1l268lE0iWJ15T8PKbz+e+NiBnr2Z7Zk+bH65I93
cbNH2782id0vkjRVzKcaqCpeGTUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQVI9JZ
dMUjzTC9z7GFBm8D8C+/iDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDUyZjE5YWYtODE4Ny00NjVlLTlhYjgtNGU2NzhjMTEzMTVlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyoF0CsA
MA0GCSqGSIb3DQEBCwUAA4IBAQBC4/DaIbqUdo+o7cbP/qNyfDy72iML2c3+3THL
qfkVsi+Crz+1I9wQ7/xM71DeXLj4s6TZijnOYKp3jzscOSZy01LH37tH2rOseRJO
9dFsPWeRqjTa7ku08b0jt9aA0RE2+4rQHPrwB4UVMRLUq0XC2ojYI00ya3GlbOve
DZfJQNSVTx/IxpZ60h8HIDYQYtSoRLqPTHlwt6fcuoBRFM7wI5h0aJQQtBL9ZfPj
yHEtNIp/I5Lx1WEZYAJS7cz1Tg7WE0lrlMwHOI8QfzHxFMjzijIUPqH8qIsl16d6
vaJfEIihYnWi+3CeE9cUZiPbv2EDxmqcFsmREzRvjVehl4I8
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:22 2025 by rpki-client