Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950edfaf-4e29-42b0-acc7-3806596bfd0c.roa
File: 950edfaf-4e29-42b0-acc7-3806596bfd0c.roa (raw, json)
Hash identifier: 6MCGXAxIs3DIcwRgiP43gYAZ7rRTpdsjx4lfZh87JrI=
Subject key identifier: 29:68:77:02:BD:E3:1D:FF:01:B9:6D:C2:C6:10:87:49:4B:FA:9C:FC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4DC50AADE6155C889906BB5FF4CAC0243297019B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950edfaf-4e29-42b0-acc7-3806596bfd0c.roa
Signing time: Thu 17 Apr 2025 16:38:49 +0000
ROA not before: Thu 17 Apr 2025 16:38:49 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c5:0a:ad:e6:15:5c:88:99:06:bb:5f:f4:ca:c0:24:32:97:01:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 16:38:49 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=180bf2ad8f8e6c5322621f7b21acaf2215b2b8f5d1e59937821e003ea7921bb3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:94:a0:83:7d:d3:0f:91:1a:65:0f:05:a1:
24:2d:58:f6:9b:d9:0f:b8:90:8c:98:cd:2f:c0:a2:
eb:40:0f:1b:58:da:01:22:b5:b4:c0:9a:3d:1c:67:
dd:e8:00:61:d3:ae:6a:fc:98:50:17:76:ee:3c:8d:
87:d2:fb:80:45:2c:38:ca:45:c7:15:d0:d0:0b:9d:
b6:c2:a6:ad:15:11:94:4a:11:c8:90:e2:9e:55:a2:
ed:23:90:13:3f:cc:ae:4e:bf:88:3a:26:1d:9d:11:
38:48:1b:38:3a:a7:c7:d3:f1:64:c5:c6:38:3a:62:
83:a7:d6:28:b2:92:9b:be:c2:9d:f9:ff:13:03:06:
11:cb:e5:e8:1a:c8:51:cb:8f:03:2a:5c:95:54:89:
66:f9:57:7d:b2:a0:2c:a4:13:14:b0:6e:5b:f1:47:
35:b4:f6:2a:01:d4:bd:1e:ab:c1:b3:85:bf:8a:13:
62:eb:5e:8d:28:49:f6:c2:4e:4d:85:08:95:96:ef:
0f:54:1f:b1:c4:c7:f9:fc:b2:ff:fc:b9:f7:49:33:
5a:02:e2:09:33:a7:ad:8e:2e:10:55:6b:2b:ef:2e:
aa:07:0e:64:a8:e0:21:56:1e:fd:9c:b2:1b:b6:45:
37:d3:f9:22:bd:7f:98:b0:93:11:5c:a6:f9:be:2c:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:77:02:BD:E3:1D:FF:01:B9:6D:C2:C6:10:87:49:4B:FA:9C:FC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/950edfaf-4e29-42b0-acc7-3806596bfd0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:b000::/40
Signature Algorithm: sha256WithRSAEncryption
82:a5:6c:d3:c8:4a:a7:b3:ca:ad:7e:27:60:51:f9:66:d4:b2:
53:8b:57:f0:de:aa:a6:7b:2d:9e:24:dd:8c:24:93:1c:9e:35:
bf:a9:38:52:ef:4e:21:03:21:3c:56:ee:3a:60:3a:98:95:69:
8d:fe:57:ac:88:55:ac:62:22:46:b3:47:75:94:2f:97:de:87:
9e:3e:83:7a:27:9f:a6:b5:0f:c2:d6:04:ab:10:bf:10:bb:8b:
8c:42:f5:ff:8a:1a:7e:1c:d9:09:cf:16:63:37:70:1d:a6:39:
45:0f:b6:51:3e:b3:9c:32:10:5c:74:0c:3c:24:98:2f:29:e7:
ec:0f:41:e1:03:e6:22:84:4e:da:38:83:ff:bb:a6:53:9e:48:
20:53:d6:a0:37:4a:6f:0a:b7:77:88:64:02:5f:ab:8b:b4:3c:
66:31:b3:c1:63:ef:d8:01:6b:90:b1:a3:fe:a0:a4:eb:5a:eb:
e5:d2:43:06:09:b5:2d:28:fd:60:10:ae:3b:3a:19:d5:11:35:
a1:7c:4c:ba:d0:b2:0c:94:65:d3:2b:20:6f:bb:4f:df:c0:34:
9c:78:1f:15:0e:65:0a:6b:35:71:45:36:a7:57:6e:a1:20:3e:
c8:72:1c:2f:fe:7d:87:78:19:73:1e:12:d5:f5:df:4a:c3:da:
ca:cf:2d:f9
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTcUKreYVXIiZBrtf9MrAJDKXAZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MTcxNjM4NDlaFw0yNTA1MjIyMzU5NTlaMHoxSTBHBgNV
BAUTQDE4MGJmMmFkOGY4ZTZjNTMyMjYyMWY3YjIxYWNhZjIyMTViMmI4ZjVkMWU1
OTkzNzgyMWUwMDNlYTc5MjFiYjMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALislKCDfdMPkRplDwWhJC1Y9pvZD7iQjJjNL8Ci60APG1jaASK1tMCaPRxn
3egAYdOuavyYUBd27jyNh9L7gEUsOMpFxxXQ0AudtsKmrRURlEoRyJDinlWi7SOQ
Ez/Mrk6/iDomHZ0ROEgbODqnx9PxZMXGODpig6fWKLKSm77Cnfn/EwMGEcvl6BrI
UcuPAypclVSJZvlXfbKgLKQTFLBuW/FHNbT2KgHUvR6rwbOFv4oTYutejShJ9sJO
TYUIlZbvD1QfscTH+fyy//y590kzWgLiCTOnrY4uEFVrK+8uqgcOZKjgIVYe/Zyy
G7ZFN9P5Ir1/mLCTEVym+b4sTskCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQpaHcC
veMd/wG5bcLGEIdJS/qc/DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTUwZWRmYWYtNGUyOS00MmIwLWFjYzctMzgwNjU5NmJmZDBjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G6w
MA0GCSqGSIb3DQEBCwUAA4IBAQCCpWzTyEqns8qtfidgUflm1LJTi1fw3qqmey2e
JN2MJJMcnjW/qThS704hAyE8Vu46YDqYlWmN/lesiFWsYiJGs0d1lC+X3oeePoN6
J5+mtQ/C1gSrEL8Qu4uMQvX/ihp+HNkJzxZjN3AdpjlFD7ZRPrOcMhBcdAw8JJgv
KefsD0HhA+YihE7aOIP/u6ZTnkggU9agN0pvCrd3iGQCX6uLtDxmMbPBY+/YAWuQ
saP+oKTrWuvl0kMGCbUtKP1gEK47OhnVETWhfEy60LIMlGXTKyBvu0/fwDSceB8V
DmUKazVxRTanV26hID7Ichwv/n2HeBlzHhLV9d9Kw9rKzy35
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:23 2025 by rpki-client