Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/031fdd48-d66d-4cba-8375-4bf3f56ae206.roa
File: 031fdd48-d66d-4cba-8375-4bf3f56ae206.roa (raw, json)
Hash identifier: olMZ58KDRF195fC2RNW7IGRHT0MjjLJ4GEjz1qQhiFw=
Subject key identifier: 6F:EB:76:F5:48:C5:2C:A5:9C:7F:0C:3D:98:DF:D6:11:29:8A:F1:F3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E0CFF8BC74B88562B66601EB1D7A2DE99465043
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/031fdd48-d66d-4cba-8375-4bf3f56ae206.roa
Signing time: Mon 31 Mar 2025 20:30:25 +0000
ROA not before: Mon 31 Mar 2025 20:30:25 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:c080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0c:ff:8b:c7:4b:88:56:2b:66:60:1e:b1:d7:a2:de:99:46:50:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:30:25 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:13:6b:53:13:a3:d2:16:c9:54:74:6d:26:
9c:91:69:ca:4d:9b:fa:e7:60:6c:db:b6:64:c2:56:
f8:e7:59:29:9f:07:d1:f1:4c:f3:2b:95:ad:e4:73:
e9:5d:12:28:13:4a:2f:b5:e0:8b:9e:ac:63:a1:4b:
a9:fc:9d:c8:be:15:4d:54:01:21:df:69:33:fa:aa:
1f:d0:f4:7b:2a:26:1e:26:43:49:2d:a6:95:0c:44:
13:8e:67:e1:e5:80:7b:92:ed:9e:6d:3f:b8:12:7b:
5c:e4:d0:44:9b:cf:bf:92:e0:73:7f:83:62:5f:fc:
e9:e0:6c:12:81:5c:ab:d2:d6:95:4c:ac:7e:70:32:
22:e2:de:23:57:44:67:b8:10:3d:65:23:46:aa:de:
62:0f:d3:95:0c:50:59:6e:45:8c:74:e2:53:51:36:
f9:30:64:b1:50:4d:67:b8:52:e1:bc:b7:74:37:3a:
ab:52:27:71:04:06:e6:00:2c:0c:46:ef:db:05:ee:
3e:bc:ab:b6:9c:a7:f0:d3:df:b5:fb:6b:35:5f:49:
ce:58:8a:42:43:ac:80:8f:1d:88:91:72:bf:9c:c6:
0c:46:3b:f3:2a:ef:16:bb:cb:73:3c:fc:a9:98:9a:
0b:29:f0:03:90:7c:06:1b:90:57:5c:ae:65:14:27:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EB:76:F5:48:C5:2C:A5:9C:7F:0C:3D:98:DF:D6:11:29:8A:F1:F3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/031fdd48-d66d-4cba-8375-4bf3f56ae206.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:c080::/46
Signature Algorithm: sha256WithRSAEncryption
45:4b:1b:0f:15:f6:7b:3f:2a:bd:c0:92:98:50:fa:b1:57:f1:
82:86:1e:28:9a:c9:1b:08:d2:c4:84:cb:cf:bf:34:b8:6c:03:
8c:0d:05:27:36:8c:06:10:bf:49:18:fe:b5:86:77:e7:34:c0:
15:3e:7a:0e:09:09:1d:b9:0b:66:e3:44:3a:f3:77:83:10:24:
0f:a0:35:9e:c1:80:76:f9:03:ea:a9:d3:91:45:3c:04:d5:8f:
17:6d:8a:a7:4c:59:74:90:d8:3f:d3:d1:c3:c2:1b:be:0e:0e:
54:09:95:95:c0:73:ef:7e:6f:e5:11:a0:6f:9f:63:ee:44:d6:
68:3d:91:bc:88:04:97:ef:5c:6e:95:05:67:f5:04:7d:88:04:
9a:00:85:4e:c5:bc:e2:b4:1e:40:55:58:ed:66:a1:10:9e:de:
1e:63:19:f9:b6:f2:6e:4c:ec:1f:54:36:8d:03:ca:53:be:4e:
a0:01:a4:bb:b5:d8:c1:2b:d3:46:21:0d:1f:4b:33:df:0d:fb:
d9:6d:bc:37:61:84:a9:3b:a3:39:cf:8f:f5:d4:35:95:52:f5:
5f:e9:9b:16:cd:cb:1b:ad:f9:2b:d0:50:cc:a8:fd:9f:ae:b9:
92:2a:7c:c1:85:56:bc:9b:ee:d8:d9:33:ab:c6:ec:f4:1d:17:
4e:cb:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:21 2025 by rpki-client