Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08c9b21f-2547-4cfd-833a-33954d1f18e2.roa
File: 08c9b21f-2547-4cfd-833a-33954d1f18e2.roa (raw, json)
Hash identifier: LWQUKlT5AGPJQ+z5nJf4ve7KklaZjD+aqyde/J0XZZ8=
Subject key identifier: 42:82:F0:C0:8A:41:50:DC:9E:A7:53:8A:2B:89:3D:B3:00:9D:3F:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 219C180CACBC5C6D0F328802B7DDEDB9552C65B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08c9b21f-2547-4cfd-833a-33954d1f18e2.roa
Signing time: Mon 31 Mar 2025 20:20:14 +0000
ROA not before: Mon 31 Mar 2025 20:20:14 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a0c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9c:18:0c:ac:bc:5c:6d:0f:32:88:02:b7:dd:ed:b9:55:2c:65:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:20:14 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:9c:26:02:c8:90:b7:6e:1a:4d:55:4e:e0:
2c:c9:2b:e3:c0:78:58:76:7f:da:c2:97:e1:08:a1:
7a:f9:6a:1c:8e:9a:b6:b3:fe:26:0b:f6:1d:44:32:
fc:08:a8:7f:2f:a2:e1:a8:6b:c4:c7:35:48:34:94:
c1:07:69:46:14:ee:bd:6e:c4:c4:fd:3c:c2:f3:0d:
db:2b:cd:b0:58:99:cc:9e:2a:70:1f:2b:5b:0c:2a:
0d:3c:97:ae:b8:f2:eb:9d:ef:2a:d7:74:49:8d:9c:
a4:a1:32:e4:d4:71:4d:46:2f:aa:0c:46:30:d4:81:
95:e4:49:4a:dd:61:4e:f6:cc:dc:ae:51:ba:af:10:
82:76:46:e7:13:c9:48:5d:91:16:ff:ab:2a:f5:db:
b8:d7:6b:6d:0a:f7:c4:29:90:bd:b0:fa:d0:42:ed:
8e:0b:29:e0:c7:61:84:36:47:ab:cd:fc:63:cb:ae:
6e:6a:41:5c:d4:b0:e3:c4:22:b4:e1:0b:ca:fa:4e:
78:f0:f5:39:34:15:29:3c:9e:51:38:f8:9f:28:99:
ce:98:a5:d0:b6:03:c0:88:a4:b5:2d:c6:60:dd:80:
cd:e9:42:5e:97:42:e8:27:92:da:ce:a7:5d:76:27:
10:7d:06:c4:de:c5:98:31:eb:b0:77:09:1b:aa:3e:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:F0:C0:8A:41:50:DC:9E:A7:53:8A:2B:89:3D:B3:00:9D:3F:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08c9b21f-2547-4cfd-833a-33954d1f18e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a0c0::/46
Signature Algorithm: sha256WithRSAEncryption
74:6c:c4:cb:a0:55:ff:d0:5a:97:3d:86:d0:a5:14:b3:34:01:
da:a3:80:43:63:1d:ac:a7:72:25:4c:33:48:7b:c1:a3:aa:33:
0b:6b:fd:d2:17:04:e4:1e:57:a1:f7:6b:bb:de:08:6e:02:b6:
aa:7e:aa:d1:09:a8:a9:a3:46:df:e1:c4:98:e9:cd:30:de:65:
5b:93:16:26:c9:1e:76:61:3a:39:05:9a:26:0c:a8:61:1a:fa:
58:a7:42:d8:a3:87:3c:70:d2:1b:85:ce:37:36:2c:75:a1:fd:
06:c2:7f:5b:5a:37:b4:2a:70:a0:1d:6d:7b:f5:76:ad:17:9a:
80:44:8b:ed:57:f2:47:3f:8b:61:51:15:83:da:a4:67:93:06:
51:ff:db:b7:80:87:fa:98:50:d0:44:d0:f8:ce:bd:29:54:d4:
c5:56:75:60:fd:d7:9d:dd:27:61:e0:a6:fc:c4:5b:49:cf:4f:
e6:84:87:01:7a:33:d6:18:55:92:03:3d:89:39:61:7c:a5:df:
11:c9:1b:be:59:8e:16:5c:08:c8:e9:c6:a1:c3:3b:e8:f8:14:
cc:36:c7:f1:45:bb:c5:12:65:73:ec:10:44:57:71:96:8d:21:
55:18:de:51:e1:b9:56:b5:85:40:25:bc:1b:fb:2c:a7:94:1d:
92:69:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:09 2025 by rpki-client