Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/045c4172-cf2a-4f25-96f1-25c2fd9edd2c.roa
File: 045c4172-cf2a-4f25-96f1-25c2fd9edd2c.roa (raw, json)
Hash identifier: zMGqZYMPpOyPJXmXKB/WeE3BZoDsG/vOOGGWqvKY9jY=
Subject key identifier: 1F:87:1E:CE:75:EC:E0:A8:B7:61:59:AD:38:6A:A4:26:B3:43:D1:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 17D6213CF6397EC19D1604A3116C41E5C46E1285
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/045c4172-cf2a-4f25-96f1-25c2fd9edd2c.roa
Signing time: Mon 31 Mar 2025 19:20:16 +0000
ROA not before: Mon 31 Mar 2025 19:20:16 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d6:21:3c:f6:39:7e:c1:9d:16:04:a3:11:6c:41:e5:c4:6e:12:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:20:16 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:4a:8f:5c:72:5c:57:8c:4d:38:0b:8d:a1:
32:21:0c:9c:e6:21:78:8f:fc:35:cb:49:ee:33:20:
d0:1e:fc:eb:d8:a8:87:10:cb:27:d3:09:4d:f5:85:
9d:76:93:00:31:e5:85:e6:7e:f0:57:9a:5a:1f:c5:
82:cb:9a:df:ce:b1:5d:a5:ee:80:01:1f:d2:87:5b:
06:ef:3a:5c:9d:bc:38:44:59:9f:5a:59:80:b0:d3:
8f:6e:e3:f2:67:52:2f:50:36:09:da:e8:23:0a:ab:
47:bd:ef:88:bf:48:28:56:c3:b5:67:81:90:31:5b:
af:ba:9e:0b:57:dd:92:f5:4d:f0:0e:58:f6:92:ad:
51:73:59:0a:2b:b8:66:a9:37:2e:34:58:17:00:95:
8f:62:7d:a1:2f:6e:b5:a9:2a:bd:07:b2:0d:32:7b:
26:39:bb:f9:3a:94:e6:c0:c3:cb:9e:0a:d8:29:2f:
e3:45:96:7b:a0:0a:99:9c:f9:89:5b:f4:b1:cc:3d:
10:a4:e9:6d:9b:84:33:40:ab:25:a3:93:15:7b:83:
f8:06:35:a6:02:58:18:5b:1c:85:f0:d6:74:6e:d7:
07:92:30:29:e5:52:10:ee:4b:23:70:69:57:76:b7:
38:d9:b5:a1:47:0a:1c:81:0c:2e:ef:9c:c8:04:21:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:1E:CE:75:EC:E0:A8:B7:61:59:AD:38:6A:A4:26:B3:43:D1:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/045c4172-cf2a-4f25-96f1-25c2fd9edd2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
c9:31:4b:d0:93:34:21:e0:75:b3:1c:52:f9:d1:81:2d:2e:c2:
f6:a2:dd:99:69:1f:ec:67:ec:77:c2:0c:cd:8b:13:1e:8a:b1:
61:c0:e6:4d:fe:a6:18:b3:1b:bf:a9:12:17:01:77:05:68:16:
79:1c:78:87:27:3a:77:b3:b5:7c:f4:40:80:ec:24:69:11:8c:
97:2b:44:9b:82:16:d3:79:b7:e6:cf:70:3c:f2:e1:3b:ef:2a:
31:e4:55:66:87:17:b9:36:d8:35:91:02:8b:46:81:56:2d:e1:
09:7b:fe:fc:7b:1a:74:5a:93:9d:22:a9:f0:0a:70:af:db:1c:
37:95:32:0d:ec:b5:74:99:43:22:65:da:13:9f:07:92:db:90:
19:de:e7:3e:21:66:56:43:d6:a4:00:0a:f0:38:8b:ac:14:99:
51:78:5b:8d:8b:cf:46:d2:9a:5d:f7:06:43:e6:f4:69:2c:0a:
10:40:ae:ac:7b:6d:02:59:85:b6:40:6d:d8:45:61:b9:c0:06:
58:1f:75:13:d6:b6:7b:5c:23:0f:4c:46:e7:8f:73:e0:44:54:
7e:e0:91:c0:4d:fa:af:b7:ad:2d:de:8d:f8:07:0a:25:16:fc:
69:33:6f:fe:5a:52:27:a7:93:72:2a:cc:83:4d:f9:b6:a3:98:
21:4d:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:43 2025 by rpki-client