Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
File: 28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa (raw, json)
Hash identifier: 4lIqE4VEyRZxuNDhX5UlsuJgcnECGw3HilFAJkJA1K0=
Subject key identifier: 9D:8D:E1:0F:EF:3D:F5:E5:CE:21:5B:E5:88:5F:BD:4B:57:65:2A:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A51BB73EA6754627925B219A38CDEB3B6F6D4F5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
Signing time: Mon 31 Mar 2025 20:01:20 +0000
ROA not before: Mon 31 Mar 2025 20:01:20 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:51:bb:73:ea:67:54:62:79:25:b2:19:a3:8c:de:b3:b6:f6:d4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:01:20 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:97:0b:0a:c6:88:a1:99:15:22:8b:44:1a:
0d:4f:41:0c:a9:c6:4a:d1:18:9a:78:61:15:cd:e1:
aa:04:2b:95:23:87:77:a4:f2:c6:eb:67:2e:6f:82:
cb:7b:8a:e4:22:c6:5a:18:e6:cc:27:53:db:7d:5a:
7c:61:3a:45:ed:7d:a5:0a:7a:46:22:6f:60:28:ca:
b9:77:ef:40:03:66:d7:cb:fd:6d:4a:24:82:70:1b:
7b:af:4b:15:23:37:ad:ea:2f:87:c0:09:86:a9:49:
d8:c9:54:80:0a:16:5d:a0:8a:ee:70:1d:ef:c6:d9:
91:5d:34:a7:9b:55:4e:2f:61:90:03:5c:89:c2:92:
10:18:fd:0a:28:01:67:68:76:da:28:01:1b:22:70:
e2:33:8c:f9:4a:8d:3f:cb:03:57:2b:bc:8b:e7:b2:
4d:8c:ca:1e:58:ad:99:3e:28:26:bc:f1:4a:a8:6c:
82:58:4c:62:33:e3:05:4f:62:51:54:14:a4:13:28:
f5:3e:e4:06:88:ff:31:f4:c1:db:97:01:80:9a:ef:
54:0f:16:15:e2:28:63:01:48:09:39:74:ca:e7:23:
87:cc:e0:53:45:0e:6b:a2:f9:02:6c:fa:08:03:1b:
15:58:ca:33:1e:a9:6a:57:54:b5:a8:79:29:fb:61:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:E1:0F:EF:3D:F5:E5:CE:21:5B:E5:88:5F:BD:4B:57:65:2A:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/28fc43ad-0c3b-4d77-aa32-5efc431e69c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80e0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:eb:a5:1f:af:05:42:e2:01:8c:46:d0:a8:63:c0:b7:a1:eb:
f9:cd:5c:65:9c:a2:84:9d:1c:47:f7:13:95:63:8d:97:2e:65:
48:06:74:8b:b6:09:e7:e5:b4:03:02:73:91:31:5d:23:d3:70:
5d:6d:3d:af:f2:b3:02:a3:43:6f:07:18:55:89:55:ca:d0:95:
d2:75:8b:48:b2:fb:7b:41:ef:a6:47:dd:0f:27:36:f8:29:79:
f2:50:96:53:05:27:36:22:0f:fc:cc:24:d0:aa:82:45:80:65:
d1:34:17:63:5b:ca:02:3c:43:1f:98:02:46:58:3b:4e:29:07:
dd:09:85:0f:28:e8:27:8b:fa:b9:99:37:ce:48:8c:75:85:39:
73:ed:f0:7a:61:f6:dc:16:27:9e:05:05:fd:ee:80:cf:c6:ff:
4f:90:1e:e9:fa:57:cc:80:65:2e:16:d0:cd:38:69:48:cf:a3:
a3:67:e6:34:13:fa:44:04:dc:b0:87:f7:09:05:48:97:f1:e9:
96:e5:3d:13:1e:a1:b0:43:bc:99:08:b5:96:ec:bf:d6:f3:30:
34:14:cf:c2:8a:25:ff:05:7d:e4:02:d5:3a:fa:7d:b9:93:17:
63:4d:6b:e2:10:c9:e4:ea:21:d4:2d:f7:83:78:f9:c0:4e:90:
e1:fd:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:32 2025 by rpki-client