Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
File: a5076366-3004-428c-8b4e-9132d17cf171.roa (raw, json)
Hash identifier: /BEjh6EagiExIIWL/ZpeTsX2VOcYvdaiAC0UeYM4dmI=
Subject key identifier: 3B:BC:2C:79:30:2D:69:E9:70:16:26:96:1E:37:43:10:38:93:E1:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6942EE543ABE87BD007E7E845E6D37A693684589
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
Signing time: Tue 20 May 2025 19:31:39 +0000
ROA not before: Tue 20 May 2025 19:31:39 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:1080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:42:ee:54:3a:be:87:bd:00:7e:7e:84:5e:6d:37:a6:93:68:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 19:31:39 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=86768c240d378c8ff7e0cb6632e2bfd484ba21498457ed37f42a76841dc896d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:21:95:d6:65:5d:03:b7:21:4a:3f:80:37:
bc:5f:0c:96:86:ea:2c:06:4a:34:b5:a8:f7:52:7f:
67:57:73:c9:41:cc:b1:4e:11:c9:4c:1f:bd:5c:43:
fe:31:a0:f0:3d:e7:3a:fb:04:a5:64:a7:ce:0e:ae:
34:f2:33:6f:7e:e4:54:0d:07:94:6c:a0:fd:0a:12:
7d:9e:be:31:7f:3d:85:ef:30:b0:bc:11:cb:92:de:
07:40:01:a8:ea:2a:28:d8:13:94:6c:e4:c7:05:cd:
f1:91:08:5c:8d:cb:31:7e:fe:e0:56:7e:6b:41:fd:
15:44:e0:75:6e:43:3c:a1:1f:e4:95:9c:38:b1:a5:
12:ea:23:30:1c:e0:b6:dc:54:9e:6a:8b:7d:b8:25:
91:f0:7a:bf:e2:b7:e0:ed:cb:a7:1c:49:31:76:e2:
08:90:4d:5c:ab:ef:1a:27:73:2e:57:05:4a:d0:76:
9a:5d:bc:7e:73:c0:bd:1b:db:a9:6c:bf:b6:55:80:
2b:5e:24:93:af:11:a8:4b:83:70:e3:2b:c7:af:a6:
80:df:2b:d8:aa:42:fd:8f:44:2c:cf:58:32:45:64:
5e:06:57:21:b3:cc:f7:0a:63:5b:87:14:4a:92:00:
85:c1:37:08:48:4c:ed:1e:00:0a:f8:74:10:47:42:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:2C:79:30:2D:69:E9:70:16:26:96:1E:37:43:10:38:93:E1:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:1080::/46
Signature Algorithm: sha256WithRSAEncryption
67:ae:0d:a4:95:cb:11:10:e9:d1:ad:0b:b5:39:a6:42:7e:8a:
5e:be:ec:48:04:65:5b:79:e3:e9:19:cd:13:72:6a:fd:a7:72:
93:d0:58:39:45:04:32:51:0b:9b:03:64:6e:70:47:38:c2:b0:
b5:57:2f:fc:4a:4e:18:e0:49:0f:b9:60:3f:14:0c:4d:48:d0:
9c:1c:d5:56:fd:65:8d:e6:39:40:d7:33:c7:b2:c2:13:58:43:
f5:ff:61:c7:4f:37:52:36:a2:23:29:eb:fc:45:dc:08:1c:29:
f7:cd:57:6c:26:4b:19:4d:66:e4:60:a7:53:a4:6b:d6:e3:23:
d6:db:23:f8:84:d4:7c:5e:05:7e:67:6d:c2:3d:32:b4:35:9b:
0f:23:9b:38:31:a4:d2:8f:f9:b9:05:ee:70:8b:3f:46:da:81:
e9:3f:58:31:7a:9d:c0:61:39:33:93:02:13:4d:d7:74:8e:32:
b4:0d:de:14:e9:3e:0c:ad:41:06:f3:98:66:99:8f:a8:3e:77:
fb:81:0a:d0:48:14:47:3f:cc:90:98:24:dd:8c:32:6e:41:7b:
14:c1:3c:b1:e0:53:a2:dc:22:d7:b2:85:1c:46:f7:c7:84:97:
6a:c0:6b:86:6e:a3:10:a7:24:c1:ab:59:35:2d:6e:a2:00:ff:
c4:a9:d3:46
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUaULuVDq+h70Afn6EXm03ppNoRYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA1MjAxOTMxMzlaFw0yNTA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDg2NzY4YzI0MGQzNzhjOGZmN2UwY2I2NjMyZTJiZmQ0ODRiYTIxNDk4NDU3
ZWQzN2Y0MmE3Njg0MWRjODk2ZDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANEIIZXWZV0DtyFKP4A3vF8MlobqLAZKNLWo91J/Z1dzyUHMsU4RyUwfvVxD
/jGg8D3nOvsEpWSnzg6uNPIzb37kVA0HlGyg/QoSfZ6+MX89he8wsLwRy5LeB0AB
qOoqKNgTlGzkxwXN8ZEIXI3LMX7+4FZ+a0H9FUTgdW5DPKEf5JWcOLGlEuojMBzg
ttxUnmqLfbglkfB6v+K34O3LpxxJMXbiCJBNXKvvGidzLlcFStB2ml28fnPAvRvb
qWy/tlWAK14kk68RqEuDcOMrx6+mgN8r2KpC/Y9ELM9YMkVkXgZXIbPM9wpjW4cU
SpIAhcE3CEhM7R4ACvh0EEdCOKECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ7vCx5
MC1p6XAWJpYeN0MQOJPhgzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTUwNzYzNjYtMzAwNC00MjhjLThiNGUtOTEzMmQxN2NmMTcxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HcQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAZ64NpJXLERDp0a0LtTmmQn6KXr7sSARlW3nj
6RnNE3Jq/adyk9BYOUUEMlELmwNkbnBHOMKwtVcv/EpOGOBJD7lgPxQMTUjQnBzV
Vv1ljeY5QNczx7LCE1hD9f9hx083UjaiIynr/EXcCBwp981XbCZLGU1m5GCnU6Rr
1uMj1tsj+ITUfF4Ffmdtwj0ytDWbDyObODGk0o/5uQXucIs/RtqB6T9YMXqdwGE5
M5MCE03XdI4ytA3eFOk+DK1BBvOYZpmPqD53+4EK0EgURz/MkJgk3YwybkF7FME8
seBTotwi17KFHEb3x4SXasBrhm6jEKckwatZNS1uogD/xKnTRg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:42:29 2025 by rpki-client