Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
File: 7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa (raw, json)
Hash identifier: cGwL0OSChFlFA5tFiBN7YCWwHnNVRdKgJaH+iHhcroY=
Subject key identifier: EB:35:03:AD:A7:03:1C:C1:5F:2D:19:3A:86:18:BC:EB:14:F9:50:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DFAD8F867C961D194926ACBE4B463B30D65D0E6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
Signing time: Fri 25 Apr 2025 19:40:41 +0000
ROA not before: Fri 25 Apr 2025 19:40:41 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:fa:d8:f8:67:c9:61:d1:94:92:6a:cb:e4:b4:63:b3:0d:65:d0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:40:41 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=4a8a28453d14ec9f27c99f759e144bada41a235f4bb51f9a3c245e08dafa1b74, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:47:ae:22:29:9c:6c:c4:35:ba:b1:77:43:
b4:7c:1a:d3:b0:4f:b9:57:d7:25:c2:fc:98:f3:c6:
f3:cd:5b:b6:7d:a4:3d:91:14:bf:be:d4:cc:3d:8f:
d2:a1:bc:6c:bb:38:d8:21:41:07:0b:4b:60:d7:8b:
5d:d5:ff:bd:4b:46:d3:75:a0:30:c0:ae:66:a2:d1:
bd:96:ca:7e:a4:03:ab:48:b5:2a:96:44:e2:3e:d9:
3f:f5:3e:2e:a6:de:7a:75:77:6e:7f:dd:c5:86:02:
0f:1c:81:50:dc:62:b8:6f:03:e4:e4:05:26:49:7c:
55:72:cc:38:1e:ca:51:02:06:a5:e3:cd:b9:e3:bc:
19:bd:14:db:20:0b:37:36:dc:4f:cc:de:99:68:00:
4c:f2:58:ed:e5:ac:e4:83:38:e0:04:9b:aa:65:c5:
81:2e:bf:dc:ce:e5:dc:93:d4:f9:f7:b5:2a:b2:fc:
58:cc:80:87:83:98:82:49:77:d1:30:fe:32:67:2f:
81:3f:a5:ba:e8:35:35:39:cc:99:c4:e0:1f:5e:e7:
7e:1f:98:d0:00:40:24:16:0f:6f:4f:74:cb:58:d2:
91:11:b3:34:81:7a:fa:89:06:a5:78:42:1a:09:6b:
35:bc:85:9a:e1:06:bf:12:3b:4c:5b:ae:5d:0a:df:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:03:AD:A7:03:1C:C1:5F:2D:19:3A:86:18:BC:EB:14:F9:50:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7eb04123-5564-4d2f-bd3c-2a08a42d7579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8000::/40
Signature Algorithm: sha256WithRSAEncryption
3e:18:dd:c7:b5:6c:05:17:21:a3:af:f5:db:78:e3:a1:de:d6:
be:f4:54:00:44:70:7a:3a:7a:c8:f5:5f:4d:3b:10:b3:8a:1c:
b3:29:b0:a5:29:19:b4:27:6a:2d:13:f8:3a:7b:0c:23:e1:7f:
1c:53:82:69:35:11:9b:6d:9c:1a:54:ff:30:d5:6a:32:92:86:
98:60:5f:03:33:f7:48:04:23:79:69:b0:2b:cd:a6:55:ea:eb:
34:ec:60:97:80:3d:e6:d9:85:0d:81:8c:c0:73:57:4e:00:61:
e8:d5:c6:08:77:15:fc:63:a5:6e:d2:bd:b0:ba:79:c7:ec:b5:
eb:d7:bb:92:1d:77:d8:a6:af:60:aa:cf:51:ef:88:89:15:f7:
6a:b0:d9:d4:0e:cb:0e:82:32:86:6d:e6:d7:ea:05:e9:6b:86:
8f:e5:c1:55:94:69:46:70:bb:17:93:1a:48:b1:6d:42:30:c6:
62:49:39:cd:52:c6:68:74:13:99:2e:93:55:ac:60:50:d8:d3:
b4:ef:76:3f:ae:2e:25:9f:b0:96:85:24:12:dd:a7:68:95:c3:
e1:8f:90:9c:9b:d2:e3:ba:ea:20:66:2d:46:d0:53:17:6a:7b:
68:b6:55:27:76:f1:62:d8:45:e1:ac:12:e2:e6:07:68:35:47:
63:9a:97:04
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUXfrY+GfJYdGUkmrL5LRjsw1l0OYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxOTQwNDFaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDRhOGEyODQ1M2QxNGVjOWYyN2M5OWY3NTllMTQ0YmFkYTQxYTIzNWY0YmI1
MWY5YTNjMjQ1ZTA4ZGFmYTFiNzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL6ZR64iKZxsxDW6sXdDtHwa07BPuVfXJcL8mPPG881btn2kPZEUv77UzD2P
0qG8bLs42CFBBwtLYNeLXdX/vUtG03WgMMCuZqLRvZbKfqQDq0i1KpZE4j7ZP/U+
LqbeenV3bn/dxYYCDxyBUNxiuG8D5OQFJkl8VXLMOB7KUQIGpePNueO8Gb0U2yAL
NzbcT8zemWgATPJY7eWs5IM44ASbqmXFgS6/3M7l3JPU+fe1KrL8WMyAh4OYgkl3
0TD+MmcvgT+luug1NTnMmcTgH17nfh+Y0ABAJBYPb090y1jSkRGzNIF6+okGpXhC
GglrNbyFmuEGvxI7TFuuXQrfNhsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTrNQOt
pwMcwV8tGTqGGLzrFPlQ5DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
N2ViMDQxMjMtNTU2NC00ZDJmLWJkM2MtMmEwOGE0MmQ3NTc5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HuA
MA0GCSqGSIb3DQEBCwUAA4IBAQA+GN3HtWwFFyGjr/XbeOOh3ta+9FQARHB6OnrI
9V9NOxCzihyzKbClKRm0J2otE/g6ewwj4X8cU4JpNRGbbZwaVP8w1WoykoaYYF8D
M/dIBCN5abArzaZV6us07GCXgD3m2YUNgYzAc1dOAGHo1cYIdxX8Y6Vu0r2wunnH
7LXr17uSHXfYpq9gqs9R74iJFfdqsNnUDssOgjKGbebX6gXpa4aP5cFVlGlGcLsX
kxpIsW1CMMZiSTnNUsZodBOZLpNVrGBQ2NO073Y/ri4ln7CWhSQS3adolcPhj5Cc
m9LjuuogZi1G0FMXantotlUndvFi2EXhrBLi5gdoNUdjmpcE
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:22 2025 by rpki-client