Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
File: 915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa (raw, json)
Hash identifier: 1a8pQ+EA3+0Fy/+g5RWKs/MbR1pAlEjRlbRFX+4F2GI=
Subject key identifier: 3E:1D:4B:D3:7F:DC:3A:41:14:F9:DD:95:58:5B:59:E8:4E:5A:82:8D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29D317F2AEEB5FF2D9873F0675330804341BFF36
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
Signing time: Mon 21 Apr 2025 18:40:13 +0000
ROA not before: Mon 21 Apr 2025 18:40:13 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d3:17:f2:ae:eb:5f:f2:d9:87:3f:06:75:33:08:04:34:1b:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 21 18:40:13 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=413eeecf465afbc74183e857ca6cc4800ae2ae675aa18c9749a643428bd6081c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:93:98:b6:08:da:66:36:c3:c9:30:e0:d2:
6c:70:5e:1e:10:7a:f1:4d:83:a8:83:a4:2a:8c:3c:
5c:a5:04:a9:e6:39:db:ad:2c:f1:2a:88:f8:42:3f:
59:ef:71:aa:fa:40:00:b0:0b:05:c0:a4:e2:7f:7b:
f1:70:c3:a7:d1:60:00:70:f5:11:a1:d8:f4:38:e3:
97:95:c5:e5:db:4c:64:86:d7:d5:34:6c:89:7e:7c:
16:f7:fa:65:17:36:f6:e7:64:db:94:7b:61:46:a3:
6a:06:b3:41:55:c2:45:7f:48:a5:28:a6:9e:5c:35:
f4:a0:80:fa:82:42:96:72:bc:ea:e6:d4:16:ad:74:
a4:49:f8:b4:ee:d0:1f:d4:b3:9c:85:96:09:cf:c4:
92:b6:2b:1c:e6:83:48:5e:c1:18:91:c2:83:57:f3:
91:03:05:57:62:49:fe:64:6a:3b:f8:68:d8:f3:85:
e6:a1:6c:4c:29:67:b5:fa:e2:e7:63:3b:ec:ed:a8:
6f:6d:f4:a2:ea:bd:66:2b:34:0f:8f:7d:ce:ca:c8:
17:61:47:87:b0:46:80:e3:18:8a:07:09:bf:07:84:
96:f0:5c:e8:08:5a:d3:f7:1d:34:3b:46:f2:1d:70:
67:9f:cc:69:13:c5:6e:13:03:1d:c0:77:dd:42:50:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:4B:D3:7F:DC:3A:41:14:F9:DD:95:58:5B:59:E8:4E:5A:82:8D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/915ccef6-b06f-4e11-be9a-8b9a229ff52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8000::/36
Signature Algorithm: sha256WithRSAEncryption
42:86:1f:43:99:2b:a3:be:14:34:3d:79:d1:da:49:48:b3:86:
86:f8:5a:86:f3:83:0f:3e:b6:87:0e:d3:81:3c:8e:f6:5f:4c:
e8:fe:dc:52:87:ac:de:e7:b8:c2:25:89:29:76:88:e2:bc:c3:
78:e8:ba:ea:67:69:5d:74:22:73:f1:fe:32:b0:9e:c2:47:1b:
e2:8d:c2:d5:c6:62:97:6c:e4:6d:c8:99:7e:c7:f4:a8:26:ee:
ad:75:d1:62:4e:7b:a9:29:35:a5:e0:64:ac:4b:76:19:9d:6a:
6b:9a:e4:42:29:53:a7:36:0b:dd:58:38:65:e9:05:4f:02:67:
38:97:05:6f:ab:e0:8c:3a:4a:68:83:8a:48:ce:d2:c9:49:00:
32:91:56:95:bd:f8:be:ac:59:c1:55:70:21:24:f9:b0:93:e8:
14:4e:36:37:7c:7d:3f:2d:78:c4:ee:68:9d:f1:d0:18:6d:f4:
0f:78:d4:39:0e:6a:3d:4f:3e:cf:5c:76:4f:e5:eb:e2:75:28:
e0:9a:62:0a:21:c6:00:90:ba:5b:bb:90:9f:92:c3:a6:f2:d3:
3f:d7:84:da:88:91:f6:57:c4:3b:9d:a2:b8:1a:b8:52:c4:c2:
9a:f7:21:2c:08:de:1f:bc:52:35:53:72:67:4a:ac:45:53:a8:
84:07:ac:c1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUKdMX8q7rX/LZhz8GdTMIBDQb/zYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjExODQwMTNaFw0yNTA1MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQxM2VlZWNmNDY1YWZiYzc0MTgzZTg1N2NhNmNjNDgwMGFlMmFlNjc1YWEx
OGM5NzQ5YTY0MzQyOGJkNjA4MWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALk8k5i2CNpmNsPJMODSbHBeHhB68U2DqIOkKow8XKUEqeY5260s8SqI+EI/
We9xqvpAALALBcCk4n978XDDp9FgAHD1EaHY9Djjl5XF5dtMZIbX1TRsiX58Fvf6
ZRc29udk25R7YUajagazQVXCRX9IpSimnlw19KCA+oJClnK86ubUFq10pEn4tO7Q
H9SznIWWCc/EkrYrHOaDSF7BGJHCg1fzkQMFV2JJ/mRqO/ho2POF5qFsTClntfri
52M77O2ob230ouq9Zis0D499zsrIF2FHh7BGgOMYigcJvweElvBc6Aha0/cdNDtG
8h1wZ5/MaRPFbhMDHcB33UJQRTUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ+HUvT
f9w6QRT53ZVYW1noTlqCjTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTE1Y2NlZjYtYjA2Zi00ZTExLWJlOWEtOGI5YTIyOWZmNTJiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BCA
MA0GCSqGSIb3DQEBCwUAA4IBAQBChh9DmSujvhQ0PXnR2klIs4aG+FqG84MPPraH
DtOBPI72X0zo/txSh6ze57jCJYkpdojivMN46LrqZ2lddCJz8f4ysJ7CRxvijcLV
xmKXbORtyJl+x/SoJu6tddFiTnupKTWl4GSsS3YZnWprmuRCKVOnNgvdWDhl6QVP
Amc4lwVvq+CMOkpog4pIztLJSQAykVaVvfi+rFnBVXAhJPmwk+gUTjY3fH0/LXjE
7mid8dAYbfQPeNQ5Dmo9Tz7PXHZP5evidSjgmmIKIcYAkLpbu5CfksOm8tM/14Ta
iJH2V8Q7naK4GrhSxMKa9yEsCN4fvFI1U3JnSqxFU6iEB6zB
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:09 2025 by rpki-client