Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ec007f6-6684-43b6-8751-2e5b258a98b3.roa
File: 1ec007f6-6684-43b6-8751-2e5b258a98b3.roa (raw, json)
Hash identifier: e/0jgoTnarmuVWWyUJrvlsNcr3pUhI10YxdeAxwnxg4=
Subject key identifier: B6:67:BE:E0:9A:4E:65:F7:69:40:14:C5:B5:6B:C8:B7:C3:37:03:AE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C1D0F890EF85AFDC2F8EDF694CE88FFA2FBAB24
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ec007f6-6684-43b6-8751-2e5b258a98b3.roa
Signing time: Mon 31 Mar 2025 20:40:45 +0000
ROA not before: Mon 31 Mar 2025 20:40:45 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1d:0f:89:0e:f8:5a:fd:c2:f8:ed:f6:94:ce:88:ff:a2:fb:ab:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:40:45 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=c063b8e79af1380a1ebe55a6d5d5203eb884633798474a8569aa014f17165849, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:f0:08:75:b6:16:14:e8:0c:83:4b:a1:60:
dc:24:eb:7b:67:4c:98:a8:63:8a:a4:f0:37:79:76:
fd:3b:b8:db:36:10:f5:33:aa:3b:0d:9a:7b:1a:a8:
d4:a2:f1:c9:c7:d9:56:8d:e1:74:7b:5a:44:01:c0:
0d:0d:eb:7a:fa:e9:4f:d8:10:10:1f:d8:52:3c:d5:
3a:43:17:3d:19:76:60:90:af:11:91:9e:c5:b5:00:
ef:ec:92:30:cc:69:4c:cc:2c:88:40:bd:33:14:27:
68:e0:a1:52:15:d8:12:01:ce:79:cb:45:2b:09:69:
ea:bc:57:2c:ea:83:1f:c0:e7:38:54:84:9b:b1:d2:
d7:ce:b0:37:e1:9e:7f:02:97:31:70:dd:88:9f:7a:
c0:75:6f:1a:54:26:73:8f:6b:d7:03:67:5b:86:50:
34:e1:3b:22:22:c6:a1:0f:a6:3b:0a:af:2d:fb:fc:
db:2a:c7:77:27:2d:47:51:a5:ce:f2:91:a7:6e:1a:
07:6a:b4:a0:79:46:f6:a1:03:0a:1d:56:80:28:3f:
dd:32:0d:21:47:f4:06:8d:98:30:1f:66:66:1e:f9:
15:7e:a4:b0:dc:7e:11:5b:0d:52:c2:75:21:00:8d:
0a:98:9a:ed:b2:87:b3:e8:e7:b6:32:2a:ee:0a:7c:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:67:BE:E0:9A:4E:65:F7:69:40:14:C5:B5:6B:C8:B7:C3:37:03:AE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ec007f6-6684-43b6-8751-2e5b258a98b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:2000::/40
Signature Algorithm: sha256WithRSAEncryption
41:d7:1a:19:12:8f:b8:1c:d5:6d:fc:89:a6:b3:f7:7b:e8:36:
d7:bf:97:5a:a5:1e:80:01:87:d4:f7:22:cd:76:0b:5c:63:92:
0d:09:5e:bc:43:83:c4:3c:06:e3:47:63:ad:08:ed:db:58:58:
94:24:71:ec:c3:48:2a:b5:8b:dd:1b:cb:32:ae:d8:83:9f:77:
e2:9f:3d:7b:d8:3f:9e:71:3a:46:03:cc:e2:4c:81:c3:3c:b6:
23:09:7d:36:a1:33:dc:75:dd:12:39:ca:87:a6:cd:8c:4d:16:
a1:9f:4a:bc:55:bc:07:09:f8:5d:c0:b4:42:f4:26:79:a9:4b:
6a:91:0d:f6:16:bb:80:31:bc:91:8f:b2:f3:ff:0a:74:7f:6f:
c0:03:71:87:b3:fc:82:81:39:7e:b5:06:e0:0b:00:22:55:e0:
82:8f:8d:d9:e1:fc:5e:40:f9:8c:6d:62:9f:3f:33:65:67:fd:
7c:10:b7:15:01:dc:9f:2f:b0:f8:0a:81:0a:dd:f7:ed:1c:97:
45:65:7f:0e:b1:25:07:65:ee:02:dc:5d:6a:a9:e1:71:ac:76:
2a:ec:3b:d2:6d:1a:ef:b4:43:07:70:50:7a:18:a7:06:40:65:
0e:5c:fd:a0:d5:89:da:fc:b7:bf:9c:1f:c2:90:89:7e:bd:ab:
ee:de:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:09:05 2025 by rpki-client