Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
File: b41919f2-4e07-4adf-8fc6-43f8940080d4.roa (raw, json)
Hash identifier: 11udYYEGUIs9e9xIdDEbvQoVST14XmIGvLwnXFv8XI0=
Subject key identifier: A9:64:7E:F1:64:BD:E1:BE:3A:0C:CD:41:9F:2C:18:61:34:A3:3E:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D313AB34028670CF7FF37DDA6DB9167E33A6EDA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
Signing time: Tue 15 Apr 2025 15:00:11 +0000
ROA not before: Tue 15 Apr 2025 15:00:11 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:31:3a:b3:40:28:67:0c:f7:ff:37:dd:a6:db:91:67:e3:3a:6e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 15 15:00:11 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=e4c9ceb996cb63e465e771c38f29352d559f183cab1bcc1556821b6b557c0e82, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:06:a0:c5:e8:e1:55:85:e3:a4:1e:fa:80:
d0:59:1d:19:56:f5:7c:c4:b6:c3:f3:8a:3e:d8:02:
e4:9c:b3:70:91:16:eb:04:d2:4b:58:bd:59:a4:6e:
8e:35:be:cb:b5:80:5e:a0:77:69:e7:d5:26:24:b7:
46:dd:f1:e1:00:c7:59:d9:5e:fe:a6:2f:eb:e9:80:
de:9d:68:f9:9c:2a:2b:98:54:d4:17:95:ef:69:f6:
ad:7f:1f:6e:c3:dc:cb:d3:e7:c0:9c:bd:02:bf:fa:
3d:9c:d8:ec:48:40:33:d5:04:ba:aa:26:e2:cb:77:
4d:5a:63:66:a6:7e:fb:44:1c:d3:d2:84:c5:24:35:
67:0c:b5:75:e5:6a:c6:72:86:4d:31:6d:3f:d6:ce:
8c:69:ff:1e:e6:e7:43:7e:52:b3:e7:08:05:a7:fa:
50:fe:38:6f:2c:87:e6:f5:6d:47:11:c5:e8:43:58:
93:53:96:90:4c:6b:78:c6:e5:cd:2c:3a:1b:02:0c:
a3:c2:6e:f8:29:ac:6f:7b:4a:20:f8:ef:04:57:2a:
37:16:fd:26:3a:f3:f8:dd:a0:25:0f:ea:dc:35:5a:
72:b7:f3:85:63:e5:ce:30:4a:19:ac:0b:81:f9:fb:
c0:90:15:8b:91:7d:f0:8d:4f:85:88:b1:dd:9d:7d:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:64:7E:F1:64:BD:E1:BE:3A:0C:CD:41:9F:2C:18:61:34:A3:3E:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b41919f2-4e07-4adf-8fc6-43f8940080d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:9000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:e4:26:10:f4:1b:20:33:4a:d4:99:92:79:b8:3d:16:89:29:
5d:c0:ab:5f:f8:0d:7c:dc:fd:10:45:8f:75:bb:02:a5:21:7c:
cf:09:d1:0c:d3:3a:74:55:de:e8:67:91:86:58:cf:77:58:0e:
77:3b:cf:2e:e3:e4:de:e0:c4:c6:96:7d:e1:4b:39:14:2d:90:
22:14:e0:dc:31:1c:03:b9:72:23:11:84:da:b3:16:dd:e8:a6:
84:bc:4e:fc:a0:2c:e8:9d:3b:20:27:b5:77:e6:27:cd:cd:b0:
f5:ba:7f:f3:27:f5:cb:b9:01:5b:b5:76:86:5d:9d:d3:97:bb:
a3:c8:ac:46:92:f3:7e:3e:b9:8f:30:64:cb:1c:ac:16:dd:8b:
c6:a3:92:e4:e2:df:69:de:c2:e7:1a:e4:30:4c:b5:b2:72:23:
8a:01:2c:20:b0:b9:86:fd:c4:bd:2b:00:5b:09:41:25:fb:a8:
fc:94:cb:d8:9d:3f:d6:a4:62:b5:c4:2e:7b:1d:a6:e4:97:81:
6a:8f:2a:08:d5:52:49:51:e3:a1:f2:c0:ea:cb:d3:80:94:ef:
ce:4c:f4:d9:a8:6f:70:45:54:62:d6:d8:a4:5b:e0:66:9e:6a:
df:fe:26:f6:02:90:69:2f:5b:1f:b7:1e:47:10:01:5d:1c:ee:
be:8c:d7:80
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUTTE6s0AoZwz3/zfdptuRZ+M6btowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MTUxNTAwMTFaFw0yNTA1MjAyMzU5NTlaMHoxSTBHBgNV
BAUTQGU0YzljZWI5OTZjYjYzZTQ2NWU3NzFjMzhmMjkzNTJkNTU5ZjE4M2NhYjFi
Y2MxNTU2ODIxYjZiNTU3YzBlODIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMPRBqDF6OFVheOkHvqA0FkdGVb1fMS2w/OKPtgC5JyzcJEW6wTSS1i9WaRu
jjW+y7WAXqB3aefVJiS3Rt3x4QDHWdle/qYv6+mA3p1o+ZwqK5hU1BeV72n2rX8f
bsPcy9PnwJy9Ar/6PZzY7EhAM9UEuqom4st3TVpjZqZ++0Qc09KExSQ1Zwy1deVq
xnKGTTFtP9bOjGn/HubnQ35Ss+cIBaf6UP44byyH5vVtRxHF6ENYk1OWkExreMbl
zSw6GwIMo8Ju+Cmsb3tKIPjvBFcqNxb9Jjrz+N2gJQ/q3DVacrfzhWPlzjBKGawL
gfn7wJAVi5F98I1PhYix3Z19jqMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSpZH7x
ZL3hvjoMzUGfLBhhNKM+YjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YjQxOTE5ZjItNGUwNy00YWRmLThmYzYtNDNmODk0MDA4MGQ0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DCQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCy5CYQ9BsgM0rUmZJ5uD0WiSldwKtf+A183P0Q
RY91uwKlIXzPCdEM0zp0Vd7oZ5GGWM93WA53O88u4+Te4MTGln3hSzkULZAiFODc
MRwDuXIjEYTasxbd6KaEvE78oCzonTsgJ7V35ifNzbD1un/zJ/XLuQFbtXaGXZ3T
l7ujyKxGkvN+PrmPMGTLHKwW3YvGo5Lk4t9p3sLnGuQwTLWyciOKASwgsLmG/cS9
KwBbCUEl+6j8lMvYnT/WpGK1xC57Habkl4FqjyoI1VJJUeOh8sDqy9OAlO/OTPTZ
qG9wRVRi1tikW+Bmnmrf/ib2ApBpL1sftx5HEAFdHO6+jNeA
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:17 2025 by rpki-client