Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: lr3+wsx3Ab+lKZN2WChLsgspaNQ13HVrg14X01YJB5g=
Subject key identifier: D1:D0:0D:CA:0F:BB:4E:C2:7A:56:92:FF:EE:54:BC:23:6E:77:D8:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3BD2C79D2A127C9EC440422490F7BC198AB18B61
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Tue 01 Apr 2025 15:00:35 +0000
ROA not before: Tue 01 Apr 2025 15:00:35 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d2:c7:9d:2a:12:7c:9e:c4:40:42:24:90:f7:bc:19:8a:b1:8b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:00:35 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: serialNumber=c70b2ecd4a28d93098075da2fdbdf9e56c2dd4254b263d8534545e870e92441f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:50:9b:f8:ba:4b:c3:77:57:b9:ba:a5:4d:
7f:57:c0:33:00:a3:25:39:d2:b5:c0:66:ec:b4:41:
b7:35:71:32:fc:08:75:1b:e2:cd:98:c7:c3:53:d1:
46:c2:34:94:13:89:9e:c5:f4:44:6a:c8:d0:09:0d:
c1:e7:14:1b:0d:39:5e:bd:f6:3c:dc:16:f7:a5:7d:
5a:7e:74:94:f8:62:15:01:02:78:ad:d5:3b:85:6c:
61:a4:3a:79:ef:78:e0:fb:c1:2f:a3:17:3c:a2:6b:
ad:d0:6e:92:ea:fe:a6:53:18:e2:dd:c6:91:0e:73:
7a:ca:ef:62:15:de:f2:1e:4a:05:95:91:fe:cc:45:
ee:6f:04:68:9e:88:00:ed:f1:cc:65:08:75:b6:de:
39:73:68:a8:6b:15:7f:c2:7c:ce:57:a9:ed:40:06:
bc:99:c4:66:a8:82:95:d1:58:07:0d:84:d3:22:1f:
d4:e9:f3:1b:3e:e5:00:39:32:61:ea:39:fb:6b:48:
68:c7:89:cd:f4:0a:ac:6e:21:63:8c:b2:8f:63:51:
29:c7:3a:6c:b1:48:e4:5b:b8:43:4e:33:0c:1e:d6:
d1:61:cf:0c:a8:76:96:45:d7:b3:f3:44:92:fa:35:
34:59:bf:31:15:17:f2:6b:41:94:04:04:5d:09:4e:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D0:0D:CA:0F:BB:4E:C2:7A:56:92:FF:EE:54:BC:23:6E:77:D8:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
36:8d:79:74:8f:2a:d3:55:e9:b9:00:c6:fd:f6:4b:9a:ed:13:
76:71:8d:1c:31:1f:d2:01:a4:16:51:9d:6c:75:35:5c:71:34:
ba:f7:04:c6:ac:46:58:3c:61:03:79:e4:56:62:f8:3a:00:e6:
21:3f:a6:49:9e:02:bf:85:13:90:67:98:09:9e:fe:ec:a1:ca:
1b:cb:9c:d7:da:18:35:66:e7:0a:1e:65:b8:e9:ba:3c:f1:a8:
cc:a6:3a:3e:08:94:25:8b:5a:4b:5d:48:4c:0c:80:3c:c1:47:
53:c5:55:93:98:ce:35:f2:e6:6d:c5:f6:91:89:f1:ac:16:d8:
98:c7:13:d8:fb:ee:27:34:e9:d2:f4:a4:21:6b:08:ae:41:36:
f3:c5:b6:b8:c9:e1:ca:6c:4f:12:d0:1c:ef:65:fa:c2:fe:99:
a7:98:9a:bb:17:f0:cb:14:f8:94:22:39:37:cf:0a:76:27:0a:
fe:c5:21:d3:ac:e4:46:b4:5b:44:99:45:d9:a7:b6:0d:d0:62:
04:03:ec:c1:fb:99:6f:6c:d8:80:fd:66:91:15:66:90:f7:a2:
24:ff:b2:f2:06:d9:13:02:bb:f3:19:55:7d:79:2f:97:07:4c:
ea:ec:ad:a2:70:87:12:ea:f0:ce:06:8e:dd:d6:a1:d0:9e:56:
86:fe:c8:37
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUO9LHnSoSfJ7EQEIkkPe8GYqxi2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MDExNTAwMzVaFw0yNTA1MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGM3MGIyZWNkNGEyOGQ5MzA5ODA3NWRhMmZkYmRmOWU1NmMyZGQ0MjU0YjI2
M2Q4NTM0NTQ1ZTg3MGU5MjQ0MWYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKFzUJv4ukvDd1e5uqVNf1fAMwCjJTnStcBm7LRBtzVxMvwIdRvizZjHw1PR
RsI0lBOJnsX0RGrI0AkNwecUGw05Xr32PNwW96V9Wn50lPhiFQECeK3VO4VsYaQ6
ee944PvBL6MXPKJrrdBukur+plMY4t3GkQ5zesrvYhXe8h5KBZWR/sxF7m8EaJ6I
AO3xzGUIdbbeOXNoqGsVf8J8zlep7UAGvJnEZqiCldFYBw2E0yIf1OnzGz7lADky
Yeo5+2tIaMeJzfQKrG4hY4yyj2NRKcc6bLFI5Fu4Q04zDB7W0WHPDKh2lkXXs/NE
kvo1NFm/MRUX8mtBlAQEXQlOkSUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTR0A3K
D7tOwnpWkv/uVLwjbnfYJzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTJmMTQyZjItYmQxYy00Mjk1LWEwMDgtZWZjZGUwNGNlYjE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA099EDAN
BgkqhkiG9w0BAQsFAAOCAQEANo15dI8q01XpuQDG/fZLmu0TdnGNHDEf0gGkFlGd
bHU1XHE0uvcExqxGWDxhA3nkVmL4OgDmIT+mSZ4Cv4UTkGeYCZ7+7KHKG8uc19oY
NWbnCh5luOm6PPGozKY6PgiUJYtaS11ITAyAPMFHU8VVk5jONfLmbcX2kYnxrBbY
mMcT2PvuJzTp0vSkIWsIrkE288W2uMnhymxPEtAc72X6wv6Zp5iauxfwyxT4lCI5
N88KdicK/sUh06zkRrRbRJlF2ae2DdBiBAPswfuZb2zYgP1mkRVmkPeiJP+y8gbZ
EwK78xlVfXkvlwdM6uytonCHEurwzgaO3dah0J5Whv7INw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:45 2025 by rpki-client