Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
File: 1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa (raw, json)
Hash identifier: 5BCe9u4v5WN0Y+b7dzhbYjtmsFHVJHARdPLbW1REEFI=
Subject key identifier: 7D:DC:5E:04:E4:E0:65:6B:D1:2F:D0:0E:5B:8B:49:71:9B:D5:0C:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 75E3C30DF99BEC1F4235BDA172B44796206941C5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
Signing time: Mon 31 Mar 2025 20:31:14 +0000
ROA not before: Mon 31 Mar 2025 20:31:14 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:4040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e3:c3:0d:f9:9b:ec:1f:42:35:bd:a1:72:b4:47:96:20:69:41:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:31:14 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:1d:34:ca:1b:43:cb:d5:c8:1b:85:5b:44:
71:d7:9e:19:dc:fd:58:f7:fc:3d:a8:97:77:06:e4:
32:40:c9:71:39:79:8b:e6:bf:52:cd:ab:07:54:c2:
04:26:1c:8a:ca:18:ce:47:79:ff:cf:9d:9b:73:3d:
b5:b4:3a:54:38:4d:68:1c:27:d3:e5:1b:6a:60:4b:
27:b3:90:7e:6b:b9:10:7b:12:59:40:7e:a5:34:47:
d9:55:b8:35:39:00:ee:60:eb:b5:6c:76:ec:57:ca:
75:f6:32:7e:21:e1:2f:f1:59:8d:2c:99:8a:f6:02:
3c:52:f5:62:8b:35:bc:99:7c:e2:f1:32:c7:cb:ab:
fe:bc:0e:f6:b0:d8:a1:f8:c3:3f:76:a6:34:98:da:
ca:eb:da:90:36:59:d5:b7:48:f3:ab:c4:51:0b:c1:
a6:7e:df:90:58:79:c2:6b:91:39:c1:c6:3a:4a:d1:
a3:93:2f:51:c5:ad:e8:a9:18:a5:ae:3f:54:7e:a0:
bf:5a:c6:f3:29:a3:72:7c:40:eb:8f:20:bb:1b:15:
18:37:cf:95:b1:f8:3e:27:84:d4:10:e5:0b:78:d1:
8b:89:a6:40:a4:6d:4c:57:58:6b:ef:fe:43:22:ec:
81:2b:87:56:7a:7e:1b:e8:c0:99:56:bd:84:9e:99:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DC:5E:04:E4:E0:65:6B:D1:2F:D0:0E:5B:8B:49:71:9B:D5:0C:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:4040::/46
Signature Algorithm: sha256WithRSAEncryption
b9:fe:de:ed:a3:e2:8c:57:b9:5b:c9:dc:dc:46:c1:98:bc:7c:
86:31:6a:f3:f4:f1:90:bf:e4:81:8e:02:93:a8:91:e6:ad:ac:
d0:f7:9d:27:af:e5:a1:2c:31:26:a1:02:65:eb:54:dc:f0:f0:
04:3c:cd:50:2c:89:03:e3:ef:0c:b8:7c:59:ff:b2:53:66:f4:
c8:2e:3f:bd:3b:24:1b:e6:78:43:34:21:b0:51:5e:8f:5c:40:
eb:9c:0d:0e:24:00:59:7c:50:75:88:d1:50:6f:da:12:a4:52:
29:8f:da:4c:ed:01:57:90:e2:76:12:db:d0:f5:70:2c:5a:55:
c5:02:d4:fd:e2:cf:29:bd:87:9e:23:fc:97:00:80:f2:58:ec:
26:eb:bb:54:cb:b7:99:30:7b:bb:e4:92:8a:d4:43:81:d2:46:
b6:c4:ea:b5:39:df:a6:bc:9a:1f:22:35:dd:74:6a:07:a0:a3:
72:7e:9e:d1:a2:21:79:7e:63:77:4d:8c:e1:e0:7a:47:46:1f:
ac:4d:c4:ec:97:36:28:e1:82:91:19:5d:60:c9:49:74:6a:b8:
27:21:85:1a:4d:3a:5b:b6:2e:f2:7d:da:de:50:b6:1a:76:71:
3c:a5:e2:fa:1f:ed:12:a8:60:c3:0a:ba:d0:d7:22:ba:2d:4d:
f3:b4:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:21 2025 by rpki-client