Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
File: 7ce413ad-560d-4eb8-915b-8c6e01d97910.roa (raw, json)
Hash identifier: dDxTXlQ9ng98Wo21a5tvztTQ45iEwDBriDZvXWWBv24=
Subject key identifier: 8E:75:CB:9E:4C:8B:4E:D7:4A:97:E0:C0:D9:C8:96:B6:20:56:FA:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 31B2E3B5D97AE2745A71726480144D269EDB6F77
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
Signing time: Fri 25 Apr 2025 19:00:58 +0000
ROA not before: Fri 25 Apr 2025 19:00:58 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b2:e3:b5:d9:7a:e2:74:5a:71:72:64:80:14:4d:26:9e:db:6f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:00:58 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=55ec774e711d3c8e5a0583b6541b594153bef180902ad4692384771dd9f8c7e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:46:97:0e:41:3e:4b:19:f7:f3:a5:7f:48:
b4:ab:0d:29:c6:99:67:84:67:c9:f5:0d:f5:8e:f0:
cd:fa:1e:bf:07:0f:60:af:df:d8:47:49:b6:80:bb:
0a:7b:91:97:cd:d0:0b:24:c3:98:4a:34:2b:55:51:
9e:ea:20:77:c6:4b:d3:68:3e:e0:af:2f:5c:ed:69:
1d:8a:f6:d2:db:fe:e7:c0:d5:f7:b1:17:49:1c:63:
0e:e0:c9:0a:57:4b:d5:e8:75:51:e5:bc:9e:33:3d:
cb:77:b4:3b:b4:be:22:5b:38:16:ce:88:14:d1:04:
7a:f9:17:03:ac:1a:7f:9f:bd:87:4b:20:cf:9b:b7:
2e:f2:ac:08:aa:87:5f:95:38:0b:33:e6:05:ac:4f:
16:0b:fb:3d:4b:e7:48:8e:97:42:22:a9:1c:99:01:
74:cc:9f:ed:58:ed:58:f0:f3:7a:c0:b4:d4:df:b3:
e8:e2:7c:ca:da:0a:40:81:44:2b:3c:28:b9:87:03:
7b:66:c9:f4:17:36:14:1f:07:6c:07:f3:e7:40:48:
60:3e:d0:e2:b7:b4:e3:b6:8d:e2:d1:09:bf:4c:ea:
aa:7c:d6:c7:3b:07:a5:19:de:26:c3:72:44:c1:86:
8b:c8:61:65:a6:c5:c0:18:45:7c:87:14:d1:0e:e8:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:75:CB:9E:4C:8B:4E:D7:4A:97:E0:C0:D9:C8:96:B6:20:56:FA:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ce413ad-560d-4eb8-915b-8c6e01d97910.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5000::/40
Signature Algorithm: sha256WithRSAEncryption
b4:01:85:45:e7:80:43:d6:49:ae:80:87:25:e7:56:47:7b:81:
cc:3d:5c:1e:23:fc:09:46:03:24:1e:a3:68:5a:b6:5b:ec:de:
79:2a:5a:59:48:81:f9:86:73:18:bf:09:8b:f5:27:75:4a:51:
ad:26:e1:db:af:89:af:ea:66:3d:98:71:cb:d9:59:d2:c6:9a:
fd:41:21:4e:02:7e:07:e1:f2:26:4f:27:0b:dd:ab:6b:61:79:
c6:0f:d1:bc:7d:d5:60:5e:79:24:9a:f3:d8:bd:18:d1:29:70:
a8:e7:45:bc:cb:ed:c7:b0:a2:70:f4:66:53:bd:ae:31:94:27:
4a:68:b5:40:d5:c0:77:c2:bf:9c:2d:42:36:80:65:6c:0d:23:
df:e4:4a:cb:ca:7e:35:e0:f5:d3:0e:a0:e1:b5:5f:4e:67:8d:
97:6c:e6:a3:0a:85:d7:ff:be:76:66:ec:47:07:92:eb:81:d9:
81:7b:c1:ea:4f:0f:c0:7b:45:1d:88:97:39:20:80:e3:98:66:
90:7f:d2:d6:1f:7b:05:45:5f:5c:e0:49:fa:59:2b:d2:5d:ed:
be:78:83:4d:ae:a3:0f:1b:66:d0:3f:1b:90:a0:ca:1e:8f:32:
89:77:4c:27:0e:09:6a:0c:f9:5f:c8:ac:58:21:b8:cc:fb:b2:
f2:aa:94:cf
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUMbLjtdl64nRacXJkgBRNJp7bb3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxOTAwNThaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDU1ZWM3NzRlNzExZDNjOGU1YTA1ODNiNjU0MWI1OTQxNTNiZWYxODA5MDJh
ZDQ2OTIzODQ3NzFkZDlmOGM3ZTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALjsRpcOQT5LGffzpX9ItKsNKcaZZ4RnyfUN9Y7wzfoevwcPYK/f2EdJtoC7
CnuRl83QCyTDmEo0K1VRnuogd8ZL02g+4K8vXO1pHYr20tv+58DV97EXSRxjDuDJ
CldL1eh1UeW8njM9y3e0O7S+Ils4Fs6IFNEEevkXA6waf5+9h0sgz5u3LvKsCKqH
X5U4CzPmBaxPFgv7PUvnSI6XQiKpHJkBdMyf7VjtWPDzesC01N+z6OJ8ytoKQIFE
KzwouYcDe2bJ9Bc2FB8HbAfz50BIYD7Q4re047aN4tEJv0zqqnzWxzsHpRneJsNy
RMGGi8hhZabFwBhFfIcU0Q7oCeMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSOdcue
TItO10qX4MDZyJa2IFb6FzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2NlNDEzYWQtNTYwZC00ZWI4LTkxNWItOGM2ZTAxZDk3OTEwLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0ABQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC0AYVF54BD1kmugIcl51ZHe4HMPVweI/wJRgMk
HqNoWrZb7N55KlpZSIH5hnMYvwmL9Sd1SlGtJuHbr4mv6mY9mHHL2VnSxpr9QSFO
An4H4fImTycL3atrYXnGD9G8fdVgXnkkmvPYvRjRKXCo50W8y+3HsKJw9GZTva4x
lCdKaLVA1cB3wr+cLUI2gGVsDSPf5ErLyn414PXTDqDhtV9OZ42XbOajCoXX/752
ZuxHB5LrgdmBe8HqTw/Ae0UdiJc5IIDjmGaQf9LWH3sFRV9c4En6WSvSXe2+eINN
rqMPG2bQPxuQoMoejzKJd0wnDglqDPlfyKxYIbjM+7LyqpTP
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:06 2025 by rpki-client