Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/288fb7c1-6c49-475a-9dd0-2637b4e09492.roa
File: 288fb7c1-6c49-475a-9dd0-2637b4e09492.roa (raw, json)
Hash identifier: jBdr5ghTakZcVcJ9hz9HYHgYR6UvH7h52FANDZCq/Y4=
Subject key identifier: 33:2B:1D:28:80:7F:CB:07:F8:B0:F6:39:B0:54:46:F5:43:B3:6C:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0773CFBA3FC2F020ACBCF63891903AC2E01B2A6D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/288fb7c1-6c49-475a-9dd0-2637b4e09492.roa
Signing time: Mon 31 Mar 2025 21:10:50 +0000
ROA not before: Mon 31 Mar 2025 21:10:50 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01e:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:73:cf:ba:3f:c2:f0:20:ac:bc:f6:38:91:90:3a:c2:e0:1b:2a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:10:50 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:3c:d8:75:8e:71:2c:63:a9:0a:58:cb:87:
14:d1:86:3e:f4:e1:bb:09:65:32:65:ca:34:48:65:
55:32:64:f1:e4:13:18:1c:80:2a:26:d9:3a:9b:02:
c2:51:1c:88:3c:ff:05:6f:e2:ea:c7:c9:c4:ba:8e:
e4:2b:c1:e4:b7:e2:4b:60:99:de:5b:7f:4c:70:ad:
06:65:55:ee:20:a6:8f:f6:40:82:8a:f4:34:6e:40:
11:11:1f:2e:d9:77:0d:82:30:27:b4:b0:18:c4:4c:
b1:ad:99:f9:7c:56:7d:bd:fa:f8:d9:d6:86:f0:c3:
f7:23:2d:8c:bb:96:5d:73:4a:a8:ac:ef:d7:5a:2e:
06:ed:22:b9:de:ab:16:28:3f:64:fa:a8:15:9e:2b:
c6:70:59:06:a7:ef:42:c5:76:02:9d:f2:45:da:92:
f0:6a:a8:42:56:8d:fe:a7:49:22:44:bf:80:36:ef:
f6:10:9a:e4:78:58:cf:b1:76:ce:fd:0a:96:97:5b:
33:c9:be:d8:6a:a7:73:36:7c:29:07:f0:d2:af:75:
5f:6f:e2:eb:44:dd:78:7e:a3:72:b9:4a:cf:12:c5:
00:3d:7d:c8:8f:c2:84:0b:46:a9:d3:2f:96:27:3f:
6c:75:04:1f:6c:3a:2b:35:88:da:65:b9:55:42:7b:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:1D:28:80:7F:CB:07:F8:B0:F6:39:B0:54:46:F5:43:B3:6C:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/288fb7c1-6c49-475a-9dd0-2637b4e09492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01e:400::/38
Signature Algorithm: sha256WithRSAEncryption
14:93:e4:9f:63:c8:9d:fa:0b:c3:4d:62:5d:ea:16:3f:56:66:
42:0b:3f:ab:95:34:23:2d:87:f0:36:9f:59:6e:ba:26:13:35:
6b:e2:11:28:a9:d5:7f:a0:d0:50:db:e8:14:bb:df:f1:64:5c:
eb:05:5f:7c:b8:16:d8:cd:c8:4e:ae:2c:a8:e5:29:f1:ed:50:
b9:da:63:3b:8d:37:bf:67:e0:35:2a:c1:37:14:a2:7f:c1:b4:
33:65:91:e3:5f:ef:94:44:a8:68:3a:38:1e:bc:31:9d:57:f8:
36:7a:d0:29:6b:8c:87:1b:77:b5:2c:b5:aa:0a:f4:f6:df:df:
a5:3d:1b:ac:08:4f:00:d2:5d:5f:e5:1f:53:33:61:16:ef:6a:
76:ad:46:c5:07:76:76:a9:71:a2:68:74:62:a9:88:2c:5c:11:
e6:35:d8:a2:5e:40:2d:dd:53:5c:1c:b2:ab:34:bb:8f:56:c2:
4b:33:59:86:ca:32:fa:42:32:66:fa:a3:70:0f:97:fd:16:69:
74:4c:0b:d0:3f:75:23:9b:52:7a:5b:bf:60:4b:fd:1e:42:52:
f8:78:4b:60:5f:3e:23:de:4b:92:2e:3e:f7:7a:c8:d2:a2:bc:
2a:a0:c1:7b:77:d7:28:cb:86:2e:e1:54:d6:5d:a2:68:7d:fe:
eb:fa:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:14 2025 by rpki-client