Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
File: c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa (raw, json)
Hash identifier: L7939r7JOtW6kTQGyfu5ukaKZzb28f1nVYhrdOEYu2M=
Subject key identifier: D0:58:B8:1C:6B:BF:19:90:D4:C0:CB:50:1D:CF:57:B9:66:F1:10:2E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 336BF17332F3FE6E6B568A76FAB3FCA72A1D34AD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
Signing time: Fri 25 Apr 2025 18:31:47 +0000
ROA not before: Fri 25 Apr 2025 18:31:47 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6b:f1:73:32:f3:fe:6e:6b:56:8a:76:fa:b3:fc:a7:2a:1d:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:31:47 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=b3e6126fedfb80552e3769035bf6014eb308e909fb1650016dcbda5acb2df979, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:81:8f:74:fd:34:44:dd:c1:11:01:df:71:
4c:0f:e5:de:8d:f5:e6:f0:c6:bc:d4:3b:8e:93:4c:
ed:89:be:75:f2:02:fb:24:ab:9a:72:f1:d3:16:b6:
fa:0a:67:39:ab:91:6b:93:49:bc:45:6b:30:e9:76:
3c:06:97:79:45:83:61:7f:b5:94:4f:6b:a6:9f:4e:
7d:53:6c:b9:18:00:41:51:b6:d0:a2:49:5f:2f:36:
30:36:e1:b9:69:2e:fe:aa:c3:9c:4c:c9:32:04:4b:
a9:5e:0a:f0:28:db:b5:a8:e6:3f:aa:16:1f:e7:c2:
e7:8f:85:8d:77:27:55:47:dd:91:7f:48:c4:2c:30:
d9:34:fa:01:e9:b8:98:b7:69:1b:64:f2:9e:01:70:
20:11:73:3f:14:8e:00:b5:41:28:ab:b7:d7:ec:c0:
59:1d:61:c0:7f:f4:93:f8:82:85:6c:49:37:b8:53:
b0:e6:53:45:f6:77:9c:9f:4b:d2:c3:ef:fb:de:5b:
93:17:d3:01:d7:a0:bb:5f:77:6c:87:9b:6b:3d:7b:
fe:5c:b7:58:5a:f6:33:05:fa:25:1e:83:2c:30:81:
d0:e1:72:7a:18:e2:3d:e8:f0:e0:6c:7c:2d:ea:7b:
e9:14:50:13:b2:7a:7e:16:95:50:0c:dd:d6:0a:3b:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:B8:1C:6B:BF:19:90:D4:C0:CB:50:1D:CF:57:B9:66:F1:10:2E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c91ab8e7-8370-48ed-9e25-0dc260ba196b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
92:9f:a9:e5:49:f1:a3:54:ae:de:70:60:0e:5a:9b:dc:7a:84:
69:81:49:c2:f5:ef:8f:3a:79:ec:e1:ec:c9:25:db:71:3b:3e:
9c:e5:2e:81:22:b7:88:a3:4c:85:bd:96:38:d3:84:16:61:a6:
8c:ab:42:3e:ed:e6:1b:79:a3:60:72:bd:9a:83:27:2c:7d:3c:
86:e4:28:f4:44:53:74:78:2e:59:28:1f:13:fc:b6:03:09:af:
3f:20:2b:b8:8e:95:c1:c6:ea:29:60:cd:c7:85:75:9f:a4:89:
df:08:53:b8:80:18:5b:d5:23:de:92:8e:a8:22:18:39:d8:7d:
25:76:89:09:c4:18:b2:bd:48:38:c1:ac:f9:03:e0:da:5a:55:
3d:1f:85:99:b2:a7:57:73:ed:9a:cf:cd:ea:7b:94:d7:b8:bf:
b5:f9:12:c3:43:23:bd:55:f7:73:99:6c:59:4b:56:af:de:0e:
f5:1a:c1:91:5c:b4:12:1e:1a:f9:71:9d:59:37:e2:47:70:9a:
05:ac:8c:98:0a:17:67:55:f7:e1:62:bd:5d:e7:b8:03:24:35:
e6:81:99:55:58:f3:84:57:e6:32:b8:f2:49:e1:77:fc:3e:78:
f6:56:16:6b:51:27:db:0d:f9:cf:5c:66:12:c4:3e:9c:c7:22:
11:97:01:51
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUM2vxczLz/m5rVop2+rP8pyodNK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjUxODMxNDdaFw0yNTA1MzAyMzU5NTlaMHoxSTBHBgNV
BAUTQGIzZTYxMjZmZWRmYjgwNTUyZTM3NjkwMzViZjYwMTRlYjMwOGU5MDlmYjE2
NTAwMTZkY2JkYTVhY2IyZGY5NzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMlogY90/TRE3cERAd9xTA/l3o315vDGvNQ7jpNM7Ym+dfIC+ySrmnLx0xa2
+gpnOauRa5NJvEVrMOl2PAaXeUWDYX+1lE9rpp9OfVNsuRgAQVG20KJJXy82MDbh
uWku/qrDnEzJMgRLqV4K8CjbtajmP6oWH+fC54+FjXcnVUfdkX9IxCww2TT6Aem4
mLdpG2TyngFwIBFzPxSOALVBKKu31+zAWR1hwH/0k/iChWxJN7hTsOZTRfZ3nJ9L
0sPv+95bkxfTAdegu193bIebaz17/ly3WFr2MwX6JR6DLDCB0OFyehjiPejw4Gx8
Lep76RRQE7J6fhaVUAzd1go7JjsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTQWLgc
a78ZkNTAy1Adz1e5ZvEQLjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YzkxYWI4ZTctODM3MC00OGVkLTllMjUtMGRjMjYwYmExOTZiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HJg
wDANBgkqhkiG9w0BAQsFAAOCAQEAkp+p5Unxo1Su3nBgDlqb3HqEaYFJwvXvjzp5
7OHsySXbcTs+nOUugSK3iKNMhb2WONOEFmGmjKtCPu3mG3mjYHK9moMnLH08huQo
9ERTdHguWSgfE/y2AwmvPyAruI6VwcbqKWDNx4V1n6SJ3whTuIAYW9Uj3pKOqCIY
Odh9JXaJCcQYsr1IOMGs+QPg2lpVPR+FmbKnV3Ptms/N6nuU17i/tfkSw0MjvVX3
c5lsWUtWr94O9RrBkVy0Eh4a+XGdWTfiR3CaBayMmAoXZ1X34WK9Xee4AyQ15oGZ
VVjzhFfmMrjySeF3/D549lYWa1En2w35z1xmEsQ+nMciEZcBUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:39 2025 by rpki-client