Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
File: a33fb27e-b368-403f-89e6-08d05302535f.roa (raw, json)
Hash identifier: oQyLajx3u7InPAcOoFwWO9uOOVL2WoE1sgXHfIHLzPw=
Subject key identifier: B9:95:B8:3E:CD:CC:8E:3E:D7:8B:E5:B5:E8:57:8C:07:55:56:F1:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 171F787BBD707348029A7125C6B442E053747147
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
Signing time: Fri 25 Apr 2025 19:10:53 +0000
ROA not before: Fri 25 Apr 2025 19:10:53 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:40e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1f:78:7b:bd:70:73:48:02:9a:71:25:c6:b4:42:e0:53:74:71:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:10:53 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=d12140b3448d9d751697f6e8df98178a0a617eb5cb7113fdee9c730f4fe25d7e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:78:07:79:43:df:fa:a7:21:76:96:aa:42:
93:bc:a8:8b:08:8d:f3:b1:79:ad:8d:1c:04:32:70:
9a:a8:51:c5:86:b9:9d:a3:a1:e4:b6:8b:0c:2a:12:
3a:8c:28:38:64:48:79:7a:9b:ab:c7:6c:94:ec:eb:
74:77:11:91:70:5e:e3:ae:cc:df:80:5b:42:b6:e7:
4e:c1:b3:c3:09:bf:40:f8:5b:e0:47:d9:c7:2b:0d:
55:3d:ea:fc:98:31:1f:29:51:18:cb:01:2d:ac:c0:
e9:78:c0:3e:f5:89:bf:db:28:7a:3c:2b:a8:c8:9d:
f3:59:5d:ce:39:c6:c4:80:47:2a:10:4b:c7:6d:2c:
9b:ba:98:3f:76:77:ca:4b:38:09:87:a4:dd:bd:ed:
4f:6c:e0:dc:9f:c8:8a:a1:f9:88:f0:7a:cc:6b:37:
77:68:79:83:49:7d:f5:c3:0a:8e:c2:5b:e0:42:eb:
3e:97:5a:08:da:ee:32:e7:3b:a5:ff:2a:71:ec:ae:
fd:19:51:08:62:a7:a2:f1:51:e2:be:ca:ae:a8:cc:
32:eb:7d:0c:f4:88:d8:f6:25:9a:a8:de:cc:07:de:
b5:7d:92:0d:e1:24:5a:d8:69:8b:e8:72:73:cd:61:
aa:54:82:ca:2e:18:b8:21:e1:0b:58:17:3c:12:77:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:B8:3E:CD:CC:8E:3E:D7:8B:E5:B5:E8:57:8C:07:55:56:F1:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a33fb27e-b368-403f-89e6-08d05302535f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:40e0::/48
Signature Algorithm: sha256WithRSAEncryption
61:bd:ba:9a:12:55:d9:a4:32:17:7f:d2:c6:45:26:2c:1f:4b:
83:89:49:94:a8:b7:5c:5f:3e:68:26:dc:48:89:79:14:9a:f9:
de:65:d8:21:a8:d6:98:56:2d:d0:42:4a:d1:3b:a9:7a:43:b6:
cf:5a:1e:6b:9b:a3:bc:e8:2e:8d:19:c6:d6:d0:5f:cf:25:fa:
f5:bf:4a:01:cc:d0:c2:b7:de:dd:0c:39:4f:a2:7e:af:2b:4c:
ee:60:4e:ee:5c:ff:67:c5:0e:9c:36:50:a1:ce:64:a7:a2:67:
54:e9:69:00:ac:a9:91:7f:d6:d8:fa:98:15:c2:0c:3b:23:03:
59:f5:ac:67:10:4d:c7:7b:26:ba:30:02:c6:14:39:b3:21:77:
56:80:68:d0:ac:67:8c:7f:2b:96:42:0a:ff:9d:32:05:50:3d:
38:8b:2a:43:24:b7:52:69:ea:da:5b:d8:c5:f2:e3:47:30:6f:
58:7e:74:f6:62:03:b2:c9:85:8a:80:99:65:59:b1:c3:1e:65:
a1:ab:3d:5e:af:ad:09:5b:4e:4c:7a:d6:a8:7c:69:77:db:f3:
27:d3:31:b0:14:40:50:b4:b1:8e:3d:33:78:b0:f7:25:9c:bb:
4c:bb:eb:a1:8c:ea:b7:6a:f4:7d:59:39:70:5e:98:f6:8e:bc:
b2:14:53:5b
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUFx94e71wc0gCmnElxrRC4FN0cUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxOTEwNTNaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGQxMjE0MGIzNDQ4ZDlkNzUxNjk3ZjZlOGRmOTgxNzhhMGE2MTdlYjVjYjcx
MTNmZGVlOWM3MzBmNGZlMjVkN2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKXEeAd5Q9/6pyF2lqpCk7yoiwiN87F5rY0cBDJwmqhRxYa5naOh5LaLDCoS
OowoOGRIeXqbq8dslOzrdHcRkXBe467M34BbQrbnTsGzwwm/QPhb4EfZxysNVT3q
/JgxHylRGMsBLazA6XjAPvWJv9soejwrqMid81ldzjnGxIBHKhBLx20sm7qYP3Z3
yks4CYek3b3tT2zg3J/IiqH5iPB6zGs3d2h5g0l99cMKjsJb4ELrPpdaCNruMuc7
pf8qceyu/RlRCGKnovFR4r7KrqjMMut9DPSI2PYlmqjezAfetX2SDeEkWthpi+hy
c81hqlSCyi4YuCHhC1gXPBJ3000CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBS5lbg+
zcyOPteL5bXoV4wHVVbxZTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTMzZmIyN2UtYjM2OC00MDNmLTg5ZTYtMDhkMDUzMDI1MzVmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H9A
4DANBgkqhkiG9w0BAQsFAAOCAQEAYb26mhJV2aQyF3/SxkUmLB9Lg4lJlKi3XF8+
aCbcSIl5FJr53mXYIajWmFYt0EJK0TupekO2z1oea5ujvOgujRnG1tBfzyX69b9K
AczQwrfe3Qw5T6J+rytM7mBO7lz/Z8UOnDZQoc5kp6JnVOlpAKypkX/W2PqYFcIM
OyMDWfWsZxBNx3smujACxhQ5syF3VoBo0KxnjH8rlkIK/50yBVA9OIsqQyS3Umnq
2lvYxfLjRzBvWH509mIDssmFioCZZVmxwx5loas9Xq+tCVtOTHrWqHxpd9vzJ9Mx
sBRAULSxjj0zeLD3JZy7TLvroYzqt2r0fVk5cF6Y9o68shRTWw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:14 2025 by rpki-client