Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
File: 8b940c44-168e-4976-b17d-778e9341611b.roa (raw, json)
Hash identifier: zSPoMcwAxtMc03m8T/mtEDI6F4BnMZaaWFnEDtfT7+o=
Subject key identifier: 16:4B:0F:97:0D:80:4B:56:E7:44:A2:EF:B7:BB:77:9D:E3:AB:84:38
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5903D2C77A7EB56BFEE8CB05E5EB3AC0748904A6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
Signing time: Fri 25 Apr 2025 19:01:02 +0000
ROA not before: Fri 25 Apr 2025 19:01:02 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:03:d2:c7:7a:7e:b5:6b:fe:e8:cb:05:e5:eb:3a:c0:74:89:04:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:01:02 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=1beaf931faf98b20b37f2a6cf3adbcb06b9cf677f5aa3927c13de618c0dab230, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:1d:4d:72:3a:ac:51:00:34:18:c0:91:0e:
09:d8:5f:4c:1b:f7:f5:45:d5:48:31:90:6a:56:fb:
cd:6c:72:03:72:3e:23:1b:33:87:16:90:13:70:54:
cc:84:2b:13:94:45:ba:28:24:e2:e2:8c:a9:62:27:
e5:8a:2c:e6:1c:0c:7a:cc:7d:ee:e6:ab:a4:c2:1a:
9d:6e:a0:e7:f1:73:a4:3a:2f:4b:7c:6d:5d:f3:54:
55:a1:88:f9:36:97:20:96:31:cc:3f:56:72:4e:40:
3f:c4:7f:76:39:8d:a2:f7:2d:ec:14:96:be:8a:78:
06:6e:af:bc:62:e9:41:33:52:c9:48:85:cd:ff:b2:
c4:f5:c9:1f:c1:63:e4:1a:51:44:d3:62:58:33:c6:
5e:96:ab:37:e3:09:8d:c7:c2:a4:ec:a8:d8:9b:c0:
50:3f:34:1d:90:54:cf:8e:5b:b2:68:df:00:87:44:
7c:63:c1:55:65:aa:17:f6:62:33:20:4f:55:96:dc:
95:31:58:10:d6:e4:4b:ba:27:9d:ac:ea:be:12:0d:
05:ab:f5:13:bf:0a:db:3d:5f:78:4f:56:44:6a:f6:
32:01:33:9f:ca:3b:36:2a:f4:9a:52:9a:40:2f:f2:
c8:fb:99:ea:ce:e1:72:eb:0e:9b:08:b4:da:09:1a:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:0F:97:0D:80:4B:56:E7:44:A2:EF:B7:BB:77:9D:E3:AB:84:38
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b940c44-168e-4976-b17d-778e9341611b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1080::/48
Signature Algorithm: sha256WithRSAEncryption
3f:eb:6a:81:d7:b4:e1:53:d9:4a:c7:8a:84:3d:36:3f:51:ba:
40:31:9b:fa:2b:5d:45:14:da:35:c1:26:9e:7d:9e:df:a2:ba:
a9:0f:9a:7e:25:71:18:d6:8d:37:9b:00:46:af:bf:aa:e3:e4:
83:e5:12:19:5f:72:85:c3:28:e7:98:af:c7:5b:66:92:00:1e:
e5:33:69:f6:2d:08:b0:1b:a9:8d:d3:52:6c:a2:43:14:bf:10:
6d:47:92:64:d3:33:1e:75:01:63:c3:f4:ab:2e:d3:ba:20:6e:
f6:20:95:fb:00:87:ba:90:82:a1:e2:b8:6e:b7:73:33:9e:c9:
1e:9d:49:6b:a1:ac:b3:2b:0a:74:dd:e3:6d:6b:a2:37:d5:5a:
c6:f9:7f:b8:98:ff:5e:f1:90:ec:0e:c9:5b:da:a5:19:00:e2:
d1:b5:8b:8f:a1:3d:8f:7b:1d:a7:45:ce:1a:bd:86:5d:70:d4:
d6:05:ce:56:d9:cf:b5:6e:7a:af:66:32:01:b3:83:3e:cb:59:
0b:10:1c:9e:c7:a1:3a:d7:e9:fa:8d:c7:72:d9:aa:75:e1:06:
f7:48:40:d9:d7:ee:d9:02:6a:59:db:58:a8:27:68:9a:ec:b7:
5a:0c:ae:cc:d8:ea:8e:0f:58:55:15:cb:81:0c:e0:56:9a:ec:
7d:02:4b:39
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWQPSx3p+tWv+6MsF5es6wHSJBKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxOTAxMDJaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQDFiZWFmOTMxZmFmOThiMjBiMzdmMmE2Y2YzYWRiY2IwNmI5Y2Y2NzdmNWFh
MzkyN2MxM2RlNjE4YzBkYWIyMzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALX3HU1yOqxRADQYwJEOCdhfTBv39UXVSDGQalb7zWxyA3I+IxszhxaQE3BU
zIQrE5RFuigk4uKMqWIn5Yos5hwMesx97uarpMIanW6g5/FzpDovS3xtXfNUVaGI
+TaXIJYxzD9Wck5AP8R/djmNovct7BSWvop4Bm6vvGLpQTNSyUiFzf+yxPXJH8Fj
5BpRRNNiWDPGXparN+MJjcfCpOyo2JvAUD80HZBUz45bsmjfAIdEfGPBVWWqF/Zi
MyBPVZbclTFYENbkS7onnazqvhINBav1E78K2z1feE9WRGr2MgEzn8o7Nir0mlKa
QC/yyPuZ6s7hcusOmwi02gkaXwECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQWSw+X
DYBLVudEou+3u3ed46uEODAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OGI5NDBjNDQtMTY4ZS00OTc2LWIxN2QtNzc4ZTkzNDE2MTFiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0AAQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAP+tqgde04VPZSseKhD02P1G6QDGb+itdRRTa
NcEmnn2e36K6qQ+afiVxGNaNN5sARq+/quPkg+USGV9yhcMo55ivx1tmkgAe5TNp
9i0IsBupjdNSbKJDFL8QbUeSZNMzHnUBY8P0qy7TuiBu9iCV+wCHupCCoeK4brdz
M57JHp1Ja6GssysKdN3jbWuiN9Vaxvl/uJj/XvGQ7A7JW9qlGQDi0bWLj6E9j3sd
p0XOGr2GXXDU1gXOVtnPtW56r2YyAbODPstZCxAcnsehOtfp+o3HctmqdeEG90hA
2dfu2QJqWdtYqCdomuy3WgyuzNjqjg9YVRXLgQzgVprsfQJLOQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:10 2025 by rpki-client