Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a31701b-6e08-4967-83cb-76ea10ffab6d.roa
File: 1a31701b-6e08-4967-83cb-76ea10ffab6d.roa (raw, json)
Hash identifier: tk6wFGmPraXN1DJ3z7iRFFpT89b+KMhyWibwignYbHI=
Subject key identifier: 33:54:F5:F2:A0:BC:62:78:58:FA:9C:38:3A:0D:FF:C2:B8:E4:B0:39
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1B24CD456A59A6E915722F5A645B8E1C28BD13CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a31701b-6e08-4967-83cb-76ea10ffab6d.roa
Signing time: Mon 31 Mar 2025 20:21:30 +0000
ROA not before: Mon 31 Mar 2025 20:21:30 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:24:cd:45:6a:59:a6:e9:15:72:2f:5a:64:5b:8e:1c:28:bd:13:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:21:30 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:ec:7c:16:4d:cf:ba:37:5e:af:5b:b4:f7:
8a:7d:3e:d1:3f:cd:11:37:d8:a1:8b:3b:f9:a1:69:
5c:3b:ad:62:e4:98:1a:bb:5d:52:5b:6e:a9:75:6a:
77:59:ad:c3:54:2d:97:7a:47:f8:b1:31:d2:23:9b:
96:53:f5:55:eb:f5:bf:5d:ac:81:b8:0c:ea:6c:8f:
8d:8d:1c:56:a0:81:46:c9:1b:f9:c5:bb:2c:a0:93:
a4:e4:a5:77:9a:ec:9b:71:d4:c1:bd:03:a8:51:fc:
3c:7f:6e:93:44:aa:47:c8:97:8a:16:f3:17:e7:4f:
50:65:4e:f5:30:93:ca:8b:75:5c:b1:19:f7:26:8b:
de:2a:65:90:78:04:36:88:4d:da:f8:bf:01:4d:46:
07:7c:42:24:d7:f8:7c:0c:a6:90:a8:43:d4:47:ef:
53:d6:08:bd:ad:97:61:e5:22:d7:57:1b:b8:08:d4:
05:c9:12:4a:a6:81:e5:f2:7e:73:6c:41:13:7b:43:
43:7f:a7:bd:ed:e6:56:86:01:ce:55:c2:a6:49:cf:
81:1d:b4:b4:94:11:35:af:1e:5f:dc:d1:31:13:16:
62:33:20:5a:8b:31:35:e4:27:e0:ab:e3:cc:c4:98:
71:67:2e:d9:a7:a0:30:37:f1:86:d0:e2:84:44:8e:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:F5:F2:A0:BC:62:78:58:FA:9C:38:3A:0D:FF:C2:B8:E4:B0:39
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a31701b-6e08-4967-83cb-76ea10ffab6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a000::/40
Signature Algorithm: sha256WithRSAEncryption
8b:a3:e9:0a:f2:ed:11:99:c8:14:f9:3e:4b:12:ac:6d:8c:07:
a8:f3:c5:dd:4f:ed:66:b7:0d:55:5a:43:d5:22:22:e8:52:9d:
3c:c6:9e:2e:d9:b4:1a:57:8f:26:d9:f8:f7:40:74:3f:99:88:
39:5e:fe:57:85:51:6d:80:5e:ac:2e:df:1d:2f:e7:c4:c8:1c:
b2:0b:6a:22:ca:7a:17:f1:bd:c3:1e:29:6f:05:fc:86:8d:f2:
55:97:6e:4f:d4:74:54:e7:b2:d3:de:dc:85:ed:96:db:5b:93:
3a:28:c9:91:3d:42:71:c5:b0:e7:4b:63:55:61:e2:cd:1a:35:
a6:9d:3a:2a:76:ab:80:66:63:b7:7d:29:1b:fe:bb:c6:5a:da:
6c:ff:c5:fa:ee:f3:98:4c:ef:e1:a0:ea:cd:5c:e1:49:97:18:
85:d2:19:fb:b8:db:16:93:65:c8:bb:e1:d0:84:d3:bc:79:74:
49:86:2e:dc:e5:80:d2:19:9c:56:ea:48:8f:ef:ee:6c:b5:0b:
31:df:fa:f4:c1:9a:d7:ef:51:2e:86:92:1d:3d:7a:b3:66:13:
fb:de:e3:f0:61:31:ff:ea:bd:d3:b8:5c:72:2f:94:f4:f3:69:
69:9e:c7:4b:6f:72:dc:11:61:5b:db:0f:d6:3d:f9:28:e0:b7:
fc:1b:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:52 2025 by rpki-client