Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
File: 042e82d3-e08f-4fca-9e40-387fde51dfd5.roa (raw, json)
Hash identifier: 8a9Xv5cmIeY5pogTxFb3iwH0XlGXlveqeVLXIn7xSY4=
Subject key identifier: FF:67:7D:0B:88:EF:0B:73:3D:B9:27:09:5B:7F:CE:45:39:0A:1F:97
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5DF84582B33514A3A72AD6CB8F4FA887C0A44CB8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
Signing time: Tue 01 Apr 2025 15:00:31 +0000
ROA not before: Tue 01 Apr 2025 15:00:31 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f8:45:82:b3:35:14:a3:a7:2a:d6:cb:8f:4f:a8:87:c0:a4:4c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:00:31 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:c6:f3:ab:46:2b:77:9a:be:d2:07:71:1f:
cd:e9:3e:55:4e:74:b7:ab:ee:d6:47:11:bc:92:b9:
6e:06:db:33:b6:72:e0:82:87:0f:70:d0:17:57:04:
69:38:05:c3:0e:50:6d:da:00:cd:c3:07:2a:f7:25:
73:57:ee:ed:b3:6a:a6:5b:28:33:80:0a:52:38:1e:
d0:b9:f8:dd:db:c9:75:56:86:db:c4:ce:71:f5:47:
5f:89:9d:06:de:70:d2:36:bc:d2:2e:8f:b0:c6:90:
8e:54:c4:12:a1:1a:27:a0:e1:35:ff:fd:4f:e1:3b:
80:2b:0e:e8:01:fe:1e:47:d0:39:27:19:93:50:f5:
b8:f7:3a:69:10:17:3c:46:b1:4b:60:ab:c5:2e:74:
e4:c1:3e:e9:4a:85:ab:e8:07:83:4a:3e:54:5e:e9:
ac:86:a3:1e:17:8e:4a:28:66:ff:b4:5e:7b:fb:4d:
6a:1a:2d:af:73:0c:15:36:5b:a8:33:3c:30:85:30:
91:98:39:21:ca:cd:2a:a4:85:28:ca:39:5c:68:bd:
6c:d4:48:0e:78:00:8e:e8:69:6c:0f:60:77:d4:f8:
88:02:58:c1:da:c7:98:8b:ef:56:b8:38:fe:ad:77:
96:dc:57:19:91:f7:61:62:56:b3:85:40:5e:3f:b8:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:67:7D:0B:88:EF:0B:73:3D:B9:27:09:5B:7F:CE:45:39:0A:1F:97
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/042e82d3-e08f-4fca-9e40-387fde51dfd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.104.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:2e:c8:4f:60:fa:d8:19:34:c5:85:7e:b4:74:f3:be:af:7c:
bb:34:2d:31:63:4b:42:95:87:d6:7c:19:86:87:e4:df:86:4a:
fd:5d:ac:a9:1e:9f:17:69:b2:39:d4:0b:f5:17:06:1b:b8:12:
ff:cb:df:c8:99:8e:c6:3a:a7:4c:85:70:b3:b6:0f:77:53:99:
d2:54:aa:86:34:56:9e:f8:24:9b:6b:7e:05:2d:52:1a:53:93:
64:9e:ee:10:ff:e1:1f:c2:43:eb:8f:b5:52:e5:a3:fe:63:a5:
69:1a:8d:74:33:a2:80:e7:ca:99:e5:4a:8f:f9:64:ec:55:ea:
54:b1:f8:20:db:b0:88:bb:a8:73:4f:d1:4a:f4:df:5a:9c:1f:
25:64:45:11:c1:97:ee:27:0e:40:06:c8:35:25:e0:8e:f8:6c:
dd:9b:98:38:0b:ca:72:30:65:a2:8d:a3:1a:d8:97:34:15:6a:
32:09:6e:8a:51:d7:15:c2:2a:10:9c:ad:06:dd:98:61:86:9f:
a6:d0:4f:73:ce:f7:eb:57:2f:aa:1e:a6:e7:c2:fa:e0:3d:ea:
a2:b6:b6:ea:6f:85:38:b6:cf:1a:45:11:87:89:1d:bf:5a:db:
11:90:46:e4:2d:1b:e2:77:83:7a:bf:a7:5c:6d:e8:72:9c:57:
7b:31:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:18 2025 by rpki-client