Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c820f01-3562-4b93-8081-8c9b4d28a11c.roa
File: 1c820f01-3562-4b93-8081-8c9b4d28a11c.roa (raw, json)
Hash identifier: IsKn7ahaXmVv57QHvOiRwtvQPEULATwL4kPHDYpQFT0=
Subject key identifier: A8:DD:07:B7:B0:74:01:85:30:3C:61:40:ED:77:00:46:71:A5:F0:BD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7616AA89BE10F2AD624FE238C757D4893DE8F1DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c820f01-3562-4b93-8081-8c9b4d28a11c.roa
Signing time: Tue 01 Apr 2025 15:01:15 +0000
ROA not before: Tue 01 Apr 2025 15:01:15 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:16:aa:89:be:10:f2:ad:62:4f:e2:38:c7:57:d4:89:3d:e8:f1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:01:15 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:f2:3b:c1:c1:42:d0:43:4a:c3:48:a8:81:
d2:09:f9:11:77:2a:c8:c9:5a:82:03:0d:6c:a3:e7:
97:7e:e7:b1:d5:cf:a9:5d:85:bc:4c:f7:be:99:4c:
b4:ff:1b:f5:c3:4f:12:95:8b:bb:f1:90:54:08:f8:
01:2b:33:5c:96:01:62:37:f2:99:fa:56:34:54:8c:
2c:ce:9e:e2:64:cb:90:85:a1:2d:63:45:94:09:6c:
7e:0d:ac:93:9f:f8:d7:01:24:7f:f2:ec:85:44:b7:
ea:ee:fe:25:62:5b:39:d9:ba:04:03:c8:50:11:46:
5c:44:e0:71:e5:9e:19:61:e6:1e:76:4a:a4:e1:b0:
97:a2:1c:3e:18:e4:91:cd:e0:18:04:b6:57:12:4d:
40:12:70:ff:ba:47:f6:8e:6e:9c:a5:c3:4a:68:10:
c0:41:04:40:df:0f:eb:35:b5:4b:21:65:ce:5e:66:
91:ae:2f:66:ac:41:27:7e:8c:64:60:82:93:72:ff:
93:df:4e:4f:da:48:cb:3d:ee:8e:c1:8b:84:09:20:
b5:c3:7e:dc:8a:63:34:5a:9c:46:91:ba:cd:c0:e9:
5b:54:72:45:32:79:1c:90:8f:76:f9:30:9c:5e:7b:
0d:d2:3f:01:8c:cf:fc:a1:dc:fc:85:d2:b4:33:77:
36:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:07:B7:B0:74:01:85:30:3C:61:40:ED:77:00:46:71:A5:F0:BD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1c820f01-3562-4b93-8081-8c9b4d28a11c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:1000::/40
Signature Algorithm: sha256WithRSAEncryption
ca:50:4f:28:a1:b8:d3:21:e0:d7:50:52:81:17:ef:2e:81:9e:
80:79:7b:4c:2c:6e:b8:8b:71:f5:ad:7c:db:b4:fe:d3:7b:b4:
35:9d:45:57:d1:86:d9:ae:8f:85:35:5a:c2:1b:23:ab:62:4c:
f3:8f:41:1e:a7:a5:cc:36:28:09:b8:23:87:83:73:ca:43:75:
85:2e:02:4e:44:09:d6:25:2e:c7:93:2c:14:88:11:61:49:ef:
b4:6a:12:75:53:ee:3a:83:9f:ed:68:08:c5:9f:3b:97:88:72:
92:a5:3e:5e:fa:1a:1b:1f:4a:fb:33:ae:6f:52:0b:53:f0:73:
db:0c:f9:ab:fe:6c:37:0a:b7:b2:88:3c:e6:3d:51:ca:7c:0a:
a4:ac:45:48:4f:52:14:25:73:20:59:d8:38:55:c0:76:4b:e5:
94:69:7f:0c:c4:36:00:39:ac:3e:95:ee:91:fc:7a:e3:76:bb:
d9:a0:ed:60:3a:cf:c1:18:24:72:01:b9:88:3c:27:da:e7:b8:
ee:65:c0:fd:04:44:17:b3:72:75:d8:52:64:fd:5a:ce:3d:cd:
2b:ec:3f:0d:94:c6:d9:28:f3:19:1f:2c:bc:08:66:c1:01:b5:
2e:07:c5:0d:28:96:cb:66:76:0f:92:11:b1:e6:d3:46:99:3f:
59:a8:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:22 2025 by rpki-client