Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa
File: 889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa (raw, json)
Hash identifier: evKqZtppMObgvB8AW0tOpkgIebY4CuB7xrZSIzGKKz0=
Subject key identifier: 1C:2B:84:12:08:3A:20:04:DC:82:92:34:74:9C:35:5B:8E:EF:37:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 21858D1D389E70EFA3E8DEFAEF2651F27E177922
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa
Signing time: Fri 25 Apr 2025 20:11:18 +0000
ROA not before: Fri 25 Apr 2025 20:11:18 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:85:8d:1d:38:9e:70:ef:a3:e8:de:fa:ef:26:51:f2:7e:17:79:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:11:18 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=dd214fd86eb9c908b33a30e40410a11294d89c4922f12fbbe6180aef368be71d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:ae:c6:c4:b8:fe:34:c8:69:53:33:fb:59:
c0:ae:40:9f:f5:df:ad:8b:3c:f4:dd:62:99:50:00:
e5:b3:a7:02:ba:71:f0:39:c6:68:23:f0:34:d7:c9:
d0:2e:68:b5:d7:55:1d:19:60:07:80:20:2c:ee:e1:
12:c2:83:2d:96:36:ff:d4:ef:e5:4e:c5:0d:59:82:
ac:d1:0f:48:3a:02:4d:35:cc:67:cd:11:3f:04:06:
0a:8c:40:b1:ff:2b:6b:92:e9:78:73:bd:36:24:e0:
92:07:15:28:63:88:a6:f9:38:34:5d:63:ec:fa:13:
e4:70:cc:88:fd:10:68:5e:7f:bb:34:6b:c9:5e:62:
06:23:16:e3:36:5d:c1:a1:43:cc:92:ae:82:59:74:
92:f5:0f:ab:42:53:25:d7:84:06:40:fa:39:37:15:
c4:6a:ed:c3:1a:63:53:62:50:f2:24:32:3a:04:6e:
44:e4:6a:0e:46:03:4d:82:07:10:b2:99:43:e8:36:
c7:8c:d1:26:57:3d:95:f5:d5:1b:a1:98:e9:b5:2c:
af:bd:a2:04:f4:b1:87:16:61:c1:6c:e1:65:45:54:
0b:e2:4a:c3:a9:ff:ac:f8:ef:61:36:3f:7e:b2:6a:
58:6c:6c:13:a8:b0:cb:f1:4a:c5:9b:90:f7:99:26:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2B:84:12:08:3A:20:04:DC:82:92:34:74:9C:35:5B:8E:EF:37:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:800::/38
Signature Algorithm: sha256WithRSAEncryption
aa:64:8c:0d:39:28:cc:3b:a2:eb:6a:f6:9e:7b:15:6b:01:e7:
42:20:fb:f6:e7:58:47:a6:f9:29:75:3f:c0:0e:1c:6b:b1:f5:
5e:1b:88:1b:65:ea:82:c1:46:dd:65:e7:77:c5:e8:62:fd:d7:
6c:aa:9e:49:a4:c7:fb:71:03:e9:3d:b7:4a:fb:19:d1:c8:41:
dd:0d:86:21:1d:b9:78:78:ea:81:9d:83:8f:38:e3:9b:80:16:
18:9a:e6:12:d6:21:ad:fb:66:59:77:62:1c:17:61:e9:ba:8b:
8d:cf:57:62:59:64:11:84:fe:6d:ba:4c:37:d7:0c:4a:91:d1:
91:34:70:00:eb:78:f9:b6:d0:65:cb:ff:e5:83:2a:3e:fe:78:
15:fb:60:f2:66:4e:1d:d8:86:30:03:40:76:45:62:ca:e2:69:
bc:a2:52:2c:e3:1e:a9:12:fc:66:21:46:68:24:9c:0f:87:5d:
6b:c0:ba:b8:19:3c:a7:6d:68:c8:62:8c:7f:7b:8b:0a:35:d4:
ee:69:79:59:8c:03:37:4b:fd:9c:ba:9b:b7:11:ac:81:81:e8:
1b:3e:9f:7a:de:6c:a9:61:e8:36:94:a6:93:3c:4b:ba:8a:12:
c3:5c:c8:c0:3f:fd:8b:28:aa:3d:8f:3f:68:80:3f:0b:e0:c4:
b5:3a:bb:9d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUIYWNHTiecO+j6N767yZR8n4XeSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUyMDExMThaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGRkMjE0ZmQ4NmViOWM5MDhiMzNhMzBlNDA0MTBhMTEyOTRkODljNDkyMmYx
MmZiYmU2MTgwYWVmMzY4YmU3MWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKKIrsbEuP40yGlTM/tZwK5An/XfrYs89N1imVAA5bOnArpx8DnGaCPwNNfJ
0C5otddVHRlgB4AgLO7hEsKDLZY2/9Tv5U7FDVmCrNEPSDoCTTXMZ80RPwQGCoxA
sf8ra5LpeHO9NiTgkgcVKGOIpvk4NF1j7PoT5HDMiP0QaF5/uzRryV5iBiMW4zZd
waFDzJKugll0kvUPq0JTJdeEBkD6OTcVxGrtwxpjU2JQ8iQyOgRuRORqDkYDTYIH
ELKZQ+g2x4zRJlc9lfXVG6GY6bUsr72iBPSxhxZhwWzhZUVUC+JKw6n/rPjvYTY/
frJqWGxsE6iwy/FKxZuQ95kmj4sCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQcK4QS
CDogBNyCkjR0nDVbju83ZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODg5YTE5YzctYWQ5Ny00M2FkLThlMWUtZGQ5ZDVjY2NkNjk2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioF0BwI
MA0GCSqGSIb3DQEBCwUAA4IBAQCqZIwNOSjMO6LravaeexVrAedCIPv251hHpvkp
dT/ADhxrsfVeG4gbZeqCwUbdZed3xehi/ddsqp5JpMf7cQPpPbdK+xnRyEHdDYYh
Hbl4eOqBnYOPOOObgBYYmuYS1iGt+2ZZd2IcF2HpuouNz1diWWQRhP5tukw31wxK
kdGRNHAA63j5ttBly//lgyo+/ngV+2DyZk4d2IYwA0B2RWLK4mm8olIs4x6pEvxm
IUZoJJwPh11rwLq4GTynbWjIYox/e4sKNdTuaXlZjAM3S/2cupu3EayBgegbPp96
3mypYeg2lKaTPEu6ihLDXMjAP/2LKKo9jz9ogD8L4MS1Orud
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:13 2025 by rpki-client