Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
File: bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json)
Hash identifier: efEOumdjDqiI6oaPM6AD2nuL+4DW0hL4xh4rrkmQZTg=
Subject key identifier: 3A:7C:C9:53:38:5F:4D:EC:4A:3A:AF:4A:32:EC:40:FC:67:41:9E:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3C04BFBB5DC59E8E461D72B409B25562BEB7A108
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
Signing time: Fri 25 Apr 2025 20:20:20 +0000
ROA not before: Fri 25 Apr 2025 20:20:20 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d021::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:04:bf:bb:5d:c5:9e:8e:46:1d:72:b4:09:b2:55:62:be:b7:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:20:20 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=e9ff90118558f6f0cfe0c36f33871b614b526c78b915c1bef4c3a1ed160bcde2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:78:e6:78:04:a9:84:bd:4f:8a:f4:73:39:
8a:35:35:f6:b1:49:2c:6f:61:39:dd:51:e3:7e:8e:
46:1f:af:da:56:0f:c8:23:64:7f:b3:36:5b:e2:fe:
4a:26:c6:cc:e9:b0:26:cf:31:71:3a:42:86:ac:53:
63:46:2e:c1:50:24:4a:83:4c:f3:2a:cf:f4:e8:e4:
fa:af:3a:38:4f:38:4b:bd:6c:c0:3d:73:e7:6c:2d:
2b:c3:36:5d:4c:d5:be:a4:a0:06:54:69:33:57:d9:
6b:ff:fb:86:9c:31:4d:d3:0e:dd:5b:de:63:09:9d:
4c:d3:69:d6:be:0a:a2:17:0a:00:ce:ba:53:e2:e6:
fc:4f:7a:61:d3:5b:c1:f4:5c:c2:23:55:9b:d9:6e:
03:87:60:f1:51:38:c7:2c:ce:9b:6c:98:80:fa:78:
0c:d3:d7:a7:31:e0:58:70:7b:83:42:9c:1e:35:fb:
80:f5:19:b7:7d:e5:d7:aa:ee:96:c8:7b:90:43:19:
a1:26:f5:17:ef:17:80:7c:10:33:be:03:f8:a3:23:
0e:5e:4c:92:55:51:03:18:fc:57:56:49:5d:08:81:
6a:2a:1e:3a:21:de:45:3a:9b:e5:8c:29:df:65:68:
36:e5:87:4b:7c:47:76:d6:36:a1:dd:95:f2:2b:d7:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7C:C9:53:38:5F:4D:EC:4A:3A:AF:4A:32:EC:40:FC:67:41:9E:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d021::/36
Signature Algorithm: sha256WithRSAEncryption
32:41:38:07:8c:d4:7f:84:d9:5f:83:15:0c:16:5b:cb:bd:74:
7d:bf:f3:6a:0e:93:54:d8:e9:63:8c:10:29:0d:7c:47:aa:5a:
b5:98:99:b7:f3:bb:b5:fd:c0:9a:96:56:d1:ea:eb:df:b3:63:
5f:ee:78:f7:c0:fc:23:33:e8:8d:14:a3:b1:c7:b0:51:7a:8d:
9b:9b:1c:c8:dc:dc:fa:a9:62:40:8c:9a:44:b5:63:51:cb:68:
b1:50:af:f4:a3:29:bf:03:ea:3b:ca:15:bf:63:22:a2:83:fa:
b3:b9:ab:8d:99:82:6d:79:cb:8a:e9:33:f4:65:9d:d6:93:b1:
d6:22:31:b8:a8:94:3b:c1:8b:08:b3:77:8a:ed:e1:e2:40:96:
d6:dc:80:44:f2:e8:c0:e0:60:3d:02:aa:c7:ec:d5:9b:1e:68:
83:52:2e:aa:db:05:29:a9:a5:21:58:ec:34:7b:bc:07:c1:66:
e1:3f:5c:75:9b:80:3b:61:49:42:44:48:5c:44:d3:e9:42:36:
73:6a:bd:de:dd:6d:16:15:5d:1d:93:76:aa:35:54:fe:cf:7b:
69:b3:60:b5:49:69:ec:4f:58:9d:48:d2:93:ec:3f:79:91:3c:
16:d0:f4:45:ec:b2:4f:99:67:e4:f2:f0:84:e3:34:31:1a:27:
ca:88:5c:c5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUPAS/u13Fno5GHXK0CbJVYr63oQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUyMDIwMjBaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGU5ZmY5MDExODU1OGY2ZjBjZmUwYzM2ZjMzODcxYjYxNGI1MjZjNzhiOTE1
YzFiZWY0YzNhMWVkMTYwYmNkZTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIvoeOZ4BKmEvU+K9HM5ijU19rFJLG9hOd1R436ORh+v2lYPyCNkf7M2W+L+
SibGzOmwJs8xcTpChqxTY0YuwVAkSoNM8yrP9Ojk+q86OE84S71swD1z52wtK8M2
XUzVvqSgBlRpM1fZa//7hpwxTdMO3VveYwmdTNNp1r4KohcKAM66U+Lm/E96YdNb
wfRcwiNVm9luA4dg8VE4xyzOm2yYgPp4DNPXpzHgWHB7g0KcHjX7gPUZt33l16ru
lsh7kEMZoSb1F+8XgHwQM74D+KMjDl5MklVRAxj8V1ZJXQiBaioeOiHeRTqb5Ywp
32VoNuWHS3xHdtY2od2V8ivX0N8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ6fMlT
OF9N7Eo6r0oy7ED8Z0GetzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YmRkMzM1NjItMjY1My00NTQ5LTg0ZGMtMjVmOTZhYTEwYTgzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CEA
MA0GCSqGSIb3DQEBCwUAA4IBAQAyQTgHjNR/hNlfgxUMFlvLvXR9v/NqDpNU2Olj
jBApDXxHqlq1mJm387u1/cCallbR6uvfs2Nf7nj3wPwjM+iNFKOxx7BReo2bmxzI
3Nz6qWJAjJpEtWNRy2ixUK/0oym/A+o7yhW/YyKig/qzuauNmYJtecuK6TP0ZZ3W
k7HWIjG4qJQ7wYsIs3eK7eHiQJbW3IBE8ujA4GA9AqrH7NWbHmiDUi6q2wUpqaUh
WOw0e7wHwWbhP1x1m4A7YUlCREhcRNPpQjZzar3e3W0WFV0dk3aqNVT+z3tps2C1
SWnsT1idSNKT7D95kTwW0PRF7LJPmWfk8vCE4zQxGifKiFzF
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:48:25 2025 by rpki-client