Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa
File: d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa (raw, json)
Hash identifier: c6mxowee4viEG4Hk2XhbJKEhUm2znaFYkemQBrrT9oM=
Subject key identifier: AD:CA:09:FE:57:7B:B4:1B:24:C5:5F:B2:98:12:67:0E:26:C0:B7:EF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 27CB629EF888E64CC512C64BCBB50A2F774CED1B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa
Signing time: Mon 21 Apr 2025 18:30:58 +0000
ROA not before: Mon 21 Apr 2025 18:30:58 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cb:62:9e:f8:88:e6:4c:c5:12:c6:4b:cb:b5:0a:2f:77:4c:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 21 18:30:58 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=487f90d27e938bf322c0553879e95b1a5811982d95e13a9518641cdc0e3d3a14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:be:ef:b0:34:31:cd:f7:4f:44:30:98:fd:
c3:78:bf:27:a9:31:9c:bd:f3:c8:3a:60:e1:44:a3:
87:0b:6e:c7:55:ec:1c:98:09:08:e8:40:34:ec:3a:
89:2e:60:59:08:b5:af:42:75:8d:c3:58:0d:23:ce:
fb:d8:8f:5e:ca:de:1c:79:53:db:a2:b3:51:e1:60:
e5:83:58:e8:c7:bc:9d:b7:fe:0a:0c:a0:86:79:3c:
e5:3b:d3:42:94:0a:1a:42:6c:ef:3f:cd:38:98:ae:
e9:20:df:ce:aa:1a:c7:23:db:0f:ad:5a:4b:c9:28:
57:19:c2:29:56:3b:1f:e1:b0:ea:45:3f:b1:6f:51:
34:fd:57:b5:6e:7d:f2:52:3d:90:28:c0:45:b1:22:
76:2e:ba:32:4a:9e:eb:18:88:b6:96:93:a1:af:21:
53:53:07:8d:08:ab:54:2c:f9:fe:70:0b:65:20:b9:
82:fc:73:9d:67:fe:02:5d:8f:ab:9c:07:c8:89:a7:
a4:af:e2:7b:2a:80:2a:52:df:14:37:6b:9c:b6:0e:
75:3a:43:a3:41:36:82:6f:3a:85:c5:89:2a:93:1c:
1b:81:51:f9:14:be:2a:b0:2e:07:b1:d7:6b:02:7e:
1c:b3:2f:05:64:7a:ee:ef:c2:bb:f2:a4:c6:f4:5f:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:09:FE:57:7B:B4:1B:24:C5:5F:B2:98:12:67:0E:26:C0:B7:EF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2b19956-9202-4e71-9bee-fdbb4c52bb6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:800::/40
Signature Algorithm: sha256WithRSAEncryption
03:13:25:c7:e6:5f:03:5b:c5:e0:28:ca:b0:3a:17:22:75:66:
bd:e3:2c:4c:0a:88:81:ed:8e:66:28:d1:87:92:7d:fe:2a:40:
48:c9:03:34:96:75:94:4e:34:9a:52:66:68:4c:36:60:17:4c:
8b:54:7e:ea:60:ad:07:ea:aa:a2:9e:1d:3b:a6:55:21:cd:d5:
e5:2c:3b:1a:17:ad:a8:b3:89:5a:e5:cb:e4:ed:01:59:32:2e:
03:89:9f:49:e8:3f:4a:c8:1d:9d:ce:bb:99:b7:38:b8:e9:68:
e0:53:51:f6:43:bf:2f:97:72:77:cc:6d:a8:4b:e5:d2:0a:58:
07:c5:b9:11:60:45:bd:a6:56:9f:e7:e7:4a:76:f8:a0:99:95:
8e:33:3e:61:2e:bc:80:b6:34:33:7b:a6:f7:23:df:38:3b:e4:
51:20:9d:ec:52:64:54:81:75:0f:f5:77:de:f6:0e:ac:ab:b9:
1e:ef:07:bc:b3:e6:9e:c7:84:e9:0e:a3:a6:6c:dd:f0:09:44:
d4:3c:2f:2b:7c:2b:b2:9d:d9:b7:d6:eb:ef:8d:58:f9:a7:98:
25:0b:ef:bb:45:64:1f:8c:05:34:77:55:91:14:21:54:c1:e7:
41:63:dd:a8:c3:a6:87:3c:17:07:03:81:f9:b4:f1:9b:4c:0c:
a9:a1:23:19
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJ8tinviI5kzFEsZLy7UKL3dM7RswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MjExODMwNThaFw0yNTA1MjYyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ4N2Y5MGQyN2U5MzhiZjMyMmMwNTUzODc5ZTk1YjFhNTgxMTk4MmQ5NWUx
M2E5NTE4NjQxY2RjMGUzZDNhMTQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDNvu+wNDHN909EMJj9w3i/J6kxnL3zyDpg4USjhwtux1XsHJgJCOhANOw6
iS5gWQi1r0J1jcNYDSPO+9iPXsreHHlT26KzUeFg5YNY6Me8nbf+Cgyghnk85TvT
QpQKGkJs7z/NOJiu6SDfzqoaxyPbD61aS8koVxnCKVY7H+Gw6kU/sW9RNP1XtW59
8lI9kCjARbEidi66Mkqe6xiItpaToa8hU1MHjQirVCz5/nALZSC5gvxznWf+Al2P
q5wHyImnpK/ieyqAKlLfFDdrnLYOdTpDo0E2gm86hcWJKpMcG4FR+RS+KrAuB7HX
awJ+HLMvBWR67u/Cu/KkxvRfT2ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBStygn+
V3u0GyTFX7KYEmcOJsC37zAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDJiMTk5NTYtOTIwMi00ZTcxLTliZWUtZmRiYjRjNTJiYjZlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DEI
MA0GCSqGSIb3DQEBCwUAA4IBAQADEyXH5l8DW8XgKMqwOhcidWa94yxMCoiB7Y5m
KNGHkn3+KkBIyQM0lnWUTjSaUmZoTDZgF0yLVH7qYK0H6qqinh07plUhzdXlLDsa
F62os4la5cvk7QFZMi4DiZ9J6D9KyB2dzruZtzi46WjgU1H2Q78vl3J3zG2oS+XS
ClgHxbkRYEW9plaf5+dKdvigmZWOMz5hLryAtjQze6b3I984O+RRIJ3sUmRUgXUP
9Xfe9g6sq7ke7we8s+aex4TpDqOmbN3wCUTUPC8rfCuyndm31uvvjVj5p5glC++7
RWQfjAU0d1WRFCFUwedBY92ow6aHPBcHA4H5tPGbTAypoSMZ
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:11 2025 by rpki-client