Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ab48d39-178e-4855-83a6-895690a81d28.roa
File: 0ab48d39-178e-4855-83a6-895690a81d28.roa (raw, json)
Hash identifier: Dkp+5II46eALWXlv9wBWyCh1/V3wjeamHjmXeb4H1BA=
Subject key identifier: FB:86:8C:32:55:C1:F0:A1:CC:6C:18:AE:72:CC:71:AB:90:8E:03:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 50EA94012B6043184EA3BD8E83F4EE3DB6966191
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ab48d39-178e-4855-83a6-895690a81d28.roa
Signing time: Mon 31 Mar 2025 20:21:03 +0000
ROA not before: Mon 31 Mar 2025 20:21:03 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:a080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ea:94:01:2b:60:43:18:4e:a3:bd:8e:83:f4:ee:3d:b6:96:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:21:03 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:46:36:17:32:02:44:08:45:0b:6b:63:93:
92:46:bf:ae:1a:c3:fa:ea:5c:78:7c:93:61:f8:3f:
73:f5:80:1b:97:85:1d:7f:3b:df:49:94:bc:c6:67:
de:ef:1b:4f:58:35:95:7f:1a:99:fd:2b:6c:77:f8:
e0:a8:91:4b:37:dc:cb:57:6d:27:3e:13:1c:06:76:
0e:e8:a2:e1:7b:fb:0a:fe:61:77:8e:dd:18:91:40:
8c:91:3b:65:b6:24:f4:c3:10:cd:94:b6:f5:10:06:
63:46:80:4c:ee:e5:d4:63:ee:ed:6a:1c:7d:48:76:
71:86:cf:d3:a4:b2:80:07:c2:a0:ca:25:2e:c7:16:
f7:28:b6:56:6a:c9:db:af:f2:fe:c3:e3:e2:99:15:
d7:a1:9a:11:b6:57:1b:32:76:d9:d3:95:7b:14:a8:
45:0e:8f:07:f0:1a:93:d8:d5:02:f8:b2:aa:32:f8:
08:6a:b9:88:2c:c0:41:ab:57:ca:ec:bb:a0:63:4a:
53:68:da:36:de:23:7b:37:e7:32:e5:a8:60:38:37:
a2:cc:0d:8d:8f:b2:e8:cf:fa:27:14:86:68:03:c4:
fc:5e:25:f9:b6:7c:d9:ef:4e:55:11:cd:0e:ec:17:
24:d8:f2:ce:88:b1:25:dd:91:a3:3a:37:24:30:8e:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:8C:32:55:C1:F0:A1:CC:6C:18:AE:72:CC:71:AB:90:8E:03:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0ab48d39-178e-4855-83a6-895690a81d28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:a080::/46
Signature Algorithm: sha256WithRSAEncryption
98:4b:38:21:94:3c:c1:b3:0a:47:11:9a:5a:95:7d:32:25:5e:
83:d2:2b:95:fe:7b:2a:14:01:73:0d:7f:4b:83:86:a2:3b:7a:
3f:81:2f:bd:fe:e9:b6:63:f5:fb:60:3c:2e:96:16:bc:f4:b4:
6d:be:cd:07:af:35:64:91:8b:8b:7c:dd:02:20:74:24:73:47:
9f:6a:28:d4:8a:28:50:f1:2e:1d:51:01:15:c0:72:5c:eb:11:
85:cf:85:47:67:32:18:d9:1b:fa:ea:93:28:43:95:f2:fb:8f:
67:16:84:66:71:b7:ef:fb:a0:2c:6b:76:d3:bf:5a:1b:49:e3:
34:08:ed:79:cd:01:ef:9b:92:ce:dc:33:5e:9e:5a:2f:be:58:
1a:5d:88:ab:1d:4f:77:26:36:e3:d1:89:40:62:6a:74:c0:e9:
c6:d4:b9:a3:32:0b:0d:27:05:c4:44:c8:be:b5:c4:e4:e3:1d:
2b:7c:6e:5a:58:e5:16:52:c1:8a:cb:f7:17:fd:b6:07:9c:bd:
8d:ab:a9:4b:dd:0f:1b:2c:e3:79:24:29:56:f8:8f:03:03:13:
b6:5b:b7:96:b6:cc:52:94:60:a1:98:b8:f3:73:86:c8:03:c5:
f6:c7:f5:67:bd:aa:8b:e1:aa:48:46:75:2d:98:3c:3e:1d:99:
b3:81:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:06 2025 by rpki-client