Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
File: 533769c8-002c-491c-9b99-324fe9f5743c.roa (raw, json)
Hash identifier: i/HbXuVsD3SfEZZ9KqBlKxbaS5uRDJDv8t3/riaIXlc=
Subject key identifier: 3E:ED:DA:82:AC:8A:C7:F5:41:D0:52:06:17:DE:A9:14:20:F5:92:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 54DA408E92F025719864E476F49E972E9532CB2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
Signing time: Fri 25 Apr 2025 20:20:22 +0000
ROA not before: Fri 25 Apr 2025 20:20:22 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d022::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:da:40:8e:92:f0:25:71:98:64:e4:76:f4:9e:97:2e:95:32:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:20:22 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=bafe0abcec4a3b10d6c7261b716e19a9a86e8b2b86824010967311f29e836380, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:b1:16:e2:18:26:58:b8:c1:3b:bc:bb:d9:
f1:05:20:50:b7:e9:fc:0e:49:0d:84:e6:a1:43:f0:
e8:86:04:54:e1:fa:b2:02:6c:a5:dd:41:73:c1:88:
5c:c0:1c:76:d9:27:3e:0d:f4:6a:0c:c9:07:f3:33:
d5:59:6e:27:59:f8:b2:be:56:c6:fa:cf:1f:82:df:
2e:2b:77:fc:78:8d:80:cd:0e:58:7c:f6:71:1f:60:
18:c5:2d:74:37:04:09:34:32:90:37:3e:64:05:44:
56:53:08:bb:10:9f:7c:c7:fb:fa:cd:7f:81:72:2a:
eb:2d:e8:a2:7f:44:99:e1:1f:9a:69:e2:fb:70:23:
e0:82:45:c5:75:04:ca:e2:75:bd:0b:37:21:f3:bd:
f0:c8:d1:c5:b7:5c:15:27:5a:b8:13:0b:05:ce:d3:
66:5b:5e:36:b7:83:5a:5b:05:0d:21:70:fd:da:54:
e8:a3:82:00:a6:0d:5b:7a:1e:77:c2:6e:cf:31:ff:
d6:b4:d1:76:34:7a:00:9f:02:06:66:17:71:d8:87:
1b:6e:49:29:5c:c7:10:bb:24:56:ab:99:83:f0:46:
2b:8a:46:03:9c:74:f9:ea:e8:98:78:b3:68:0e:27:
93:d7:73:6d:18:ce:6d:f1:ff:1b:9c:06:2d:de:8c:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:ED:DA:82:AC:8A:C7:F5:41:D0:52:06:17:DE:A9:14:20:F5:92:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d022::/36
Signature Algorithm: sha256WithRSAEncryption
7f:75:3f:35:dc:e6:79:6a:36:96:18:97:4d:b7:28:cc:d6:68:
a4:54:f3:bd:61:61:d3:e8:ad:14:c6:5e:55:4a:2d:83:9d:a4:
57:e7:44:81:c1:fa:d2:1e:66:03:9d:0b:c8:9f:8b:5a:3f:fb:
cf:ba:88:3e:7d:cd:c0:44:3e:44:09:9a:49:13:6c:ef:b5:87:
88:a7:6b:31:0b:ea:2a:2a:70:c9:a5:ef:4d:0c:57:ac:11:89:
ba:8f:f7:7e:a5:f8:19:79:b9:49:42:58:f8:8c:46:7f:19:8a:
c8:72:45:b8:73:cb:19:c6:08:bd:23:d8:b4:5b:20:cc:99:6a:
6e:28:f1:db:6e:50:fe:d1:43:e6:59:f9:03:5b:ab:46:4c:c8:
aa:3a:d7:71:6a:f5:42:04:07:2d:89:40:15:7b:89:8c:c8:88:
b4:f3:92:95:64:ff:af:84:9b:09:82:c7:20:51:b5:38:50:ad:
86:89:bd:ed:79:cd:23:5e:9a:94:d6:06:d2:ab:93:a5:68:5f:
95:42:7c:9b:d6:a4:1d:17:b5:85:5d:73:17:79:8a:22:62:9f:
d3:ab:2b:09:1e:f8:c2:d3:14:1a:87:c0:13:e2:ec:f8:1a:59:
69:43:03:21:60:dc:37:9d:ef:dd:63:ca:89:fb:9f:b3:00:1f:
53:8a:5e:6a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUVNpAjpLwJXGYZOR29J6XLpUyyywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUyMDIwMjJaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGJhZmUwYWJjZWM0YTNiMTBkNmM3MjYxYjcxNmUxOWE5YTg2ZThiMmI4Njgy
NDAxMDk2NzMxMWYyOWU4MzYzODAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMWVsRbiGCZYuME7vLvZ8QUgULfp/A5JDYTmoUPw6IYEVOH6sgJspd1Bc8GI
XMAcdtknPg30agzJB/Mz1VluJ1n4sr5WxvrPH4LfLit3/HiNgM0OWHz2cR9gGMUt
dDcECTQykDc+ZAVEVlMIuxCffMf7+s1/gXIq6y3oon9EmeEfmmni+3Aj4IJFxXUE
yuJ1vQs3IfO98MjRxbdcFSdauBMLBc7TZlteNreDWlsFDSFw/dpU6KOCAKYNW3oe
d8JuzzH/1rTRdjR6AJ8CBmYXcdiHG25JKVzHELskVquZg/BGK4pGA5x0+eromHiz
aA4nk9dzbRjObfH/G5wGLd6MsCcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ+7dqC
rIrH9UHQUgYX3qkUIPWSAzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NTMzNzY5YzgtMDAyYy00OTFjLTliOTktMzI0ZmU5ZjU3NDNjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CIA
MA0GCSqGSIb3DQEBCwUAA4IBAQB/dT813OZ5ajaWGJdNtyjM1mikVPO9YWHT6K0U
xl5VSi2DnaRX50SBwfrSHmYDnQvIn4taP/vPuog+fc3ARD5ECZpJE2zvtYeIp2sx
C+oqKnDJpe9NDFesEYm6j/d+pfgZeblJQlj4jEZ/GYrIckW4c8sZxgi9I9i0WyDM
mWpuKPHbblD+0UPmWfkDW6tGTMiqOtdxavVCBActiUAVe4mMyIi085KVZP+vhJsJ
gscgUbU4UK2Gib3tec0jXpqU1gbSq5OlaF+VQnyb1qQdF7WFXXMXeYoiYp/TqysJ
HvjC0xQah8AT4uz4GllpQwMhYNw3ne/dY8qJ+5+zAB9Til5q
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:50 2025 by rpki-client