Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
File: 0f3fbd71-85b4-48a7-8479-e942c9578262.roa (raw, json)
Hash identifier: N7+Ywio5cYwZwpb/N2zDnyWzNd31q05JTRiJsWnFI48=
Subject key identifier: FD:A0:1A:3F:E0:00:69:15:67:92:6A:FC:70:C9:B3:7C:22:8A:88:C5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 449320B9BBDD632857BE12C53634A9E3E8173FB6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
Signing time: Mon 31 Mar 2025 20:50:15 +0000
ROA not before: Mon 31 Mar 2025 20:50:15 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:93:20:b9:bb:dd:63:28:57:be:12:c5:36:34:a9:e3:e8:17:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:50:15 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=ad13fe2998f635fca4c9616bdf47c3c15d03b6eb69d4ff030e97b57e055db4ce, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:5e:1f:c1:80:3d:bf:0e:f0:92:41:b8:dd:
73:94:54:99:a3:4b:87:15:39:1c:3a:29:44:e2:f6:
31:29:4a:8e:ab:1a:55:bd:12:22:c5:24:82:d7:3e:
7d:a7:ca:00:47:9f:0d:c6:0c:14:cf:47:8f:06:53:
6b:15:0f:72:16:ca:32:3a:b8:7b:e8:dc:c8:f8:8a:
0e:c7:94:a7:4e:d7:5f:f5:59:e6:c2:61:81:c2:6e:
a3:90:de:25:5b:66:65:c6:95:ce:8f:4a:50:c4:75:
25:c3:df:77:90:b8:08:34:43:31:98:57:83:52:84:
38:3c:50:77:8d:95:a6:e6:a9:cf:9f:5a:a6:97:fe:
f7:5d:6d:76:81:d5:44:dc:24:89:b8:6e:b4:4b:4a:
f2:6e:ee:c9:b7:fd:45:f5:61:2c:41:c3:0c:9b:80:
f4:e6:47:71:a6:db:c8:ce:73:43:17:77:a7:e3:39:
bd:02:9c:7d:02:07:53:22:3a:41:2b:40:c4:18:e7:
cd:d6:4b:3d:7a:7d:7c:c8:5f:0b:10:15:50:36:f9:
ae:53:33:24:a7:ac:86:f5:fa:bd:fe:97:81:2c:b4:
7f:3d:38:2a:14:cb:09:74:ea:05:92:5a:30:a0:86:
66:49:6f:be:55:19:5e:f6:a9:86:cc:ea:ee:ac:38:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:1A:3F:E0:00:69:15:67:92:6A:FC:70:C9:B3:7C:22:8A:88:C5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3fbd71-85b4-48a7-8479-e942c9578262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:1000::/40
Signature Algorithm: sha256WithRSAEncryption
02:67:7b:f5:92:fd:5e:b5:38:15:89:6a:4a:ce:b1:3b:4f:36:
fd:35:ae:b8:aa:f6:51:63:15:13:c8:34:cd:01:ed:6e:cd:bd:
fe:bb:cb:63:a2:86:2b:7e:5e:85:35:17:f6:bc:56:17:3b:0b:
14:81:16:fc:79:56:f7:75:9e:15:a6:d3:32:20:05:93:e3:3d:
a5:76:90:7f:50:89:97:67:93:f5:1f:ce:3d:71:08:03:60:76:
4e:da:0c:f3:11:11:47:0c:a8:46:12:38:4d:e2:e7:84:72:df:
f1:e0:e1:ea:67:38:ff:fa:f6:0a:d8:8c:4f:26:cd:60:5f:89:
bf:25:1e:6d:8b:eb:f2:b7:49:94:f1:d0:3c:a4:cd:69:06:86:
4c:15:dd:b3:88:fc:af:5a:5b:fe:16:a3:fe:57:e2:4c:21:b7:
d3:dc:2f:39:09:44:63:7b:9b:8c:40:29:db:df:16:90:e9:b6:
75:0f:90:fe:a4:95:e3:13:a8:37:97:83:e1:22:d4:d0:d8:71:
dd:7a:e6:c4:4e:8c:64:98:bf:f9:30:97:1d:8a:fd:39:38:6e:
c6:aa:5a:65:48:aa:61:31:1c:68:cc:60:4b:b2:b0:ab:2e:5c:
9e:82:f7:12:d3:2a:63:91:45:68:e6:16:63:91:cb:82:f8:a7:
8e:87:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:07 2025 by rpki-client