Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b06058c-8d41-438e-bb3d-828bd94124a5.roa
File: 2b06058c-8d41-438e-bb3d-828bd94124a5.roa (raw, json)
Hash identifier: /U3rbGNa3LkDkBO9mHgP9nfkl58FzJ93APWTKosMeDg=
Subject key identifier: 18:CA:B0:53:62:01:3B:D9:E8:A9:E5:8B:A2:F2:FC:F8:5D:CA:19:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7FB844A36F19A8E5DD1D72B578E1DAF00F0BB068
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b06058c-8d41-438e-bb3d-828bd94124a5.roa
Signing time: Mon 31 Mar 2025 21:00:21 +0000
ROA not before: Mon 31 Mar 2025 21:00:21 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b8:44:a3:6f:19:a8:e5:dd:1d:72:b5:78:e1:da:f0:0f:0b:b0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:00:21 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:9a:ff:a0:c4:fb:a6:96:be:68:55:ff:19:
43:c8:f7:b2:8b:bf:42:07:1d:0f:51:f3:04:8b:48:
b1:6a:24:f8:6b:39:33:4d:a7:60:14:c9:7e:a4:87:
fe:f2:8a:4b:43:1a:60:0d:0d:0f:98:86:40:e5:a1:
29:ef:cb:97:f0:8e:86:be:e8:3b:c5:a7:4b:d2:38:
c6:a4:88:4c:f1:9c:8b:e4:8b:f5:6e:78:50:02:1d:
14:b5:b2:c5:b5:cd:e7:1b:3e:2a:87:c3:82:28:c1:
3c:6b:9f:ed:e6:a0:c7:03:d7:52:ac:00:b3:b7:98:
41:1d:d8:78:e8:e9:f8:15:cd:2f:cb:c4:8c:36:e5:
d3:99:fb:4b:d6:6b:13:63:c3:70:1e:c7:e6:35:71:
4a:cc:91:60:12:a1:e0:2c:38:ad:fa:07:f8:5c:81:
82:37:41:e9:e5:58:58:84:8a:47:51:50:4a:b4:f0:
84:f4:6a:7d:da:f8:82:4c:37:61:37:4d:5d:8d:80:
bf:45:32:0b:a2:f7:41:a9:2a:4a:32:7a:d7:34:16:
07:c4:10:3a:9d:1b:f8:f8:57:e9:c8:70:50:06:44:
80:26:ca:24:0a:ad:6f:40:91:c5:d8:cf:3d:e8:a1:
37:87:87:66:15:db:05:a5:82:03:c7:c7:12:43:55:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CA:B0:53:62:01:3B:D9:E8:A9:E5:8B:A2:F2:FC:F8:5D:CA:19:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b06058c-8d41-438e-bb3d-828bd94124a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:c000::/40
Signature Algorithm: sha256WithRSAEncryption
24:00:ba:b5:e3:d0:b2:79:69:e7:c8:14:c2:9c:c8:02:7e:66:
4b:6b:63:b3:34:23:c2:19:91:30:44:06:8c:07:e4:ae:6f:21:
a2:8a:f9:b0:87:c7:51:e5:5f:50:69:a1:50:88:d0:b7:d1:e9:
ab:02:6d:2b:d9:0c:69:15:a5:9b:23:c7:67:52:ed:ac:ae:6f:
ff:eb:53:0b:d6:b7:14:40:14:a7:bb:d1:d0:29:71:53:30:45:
d0:d7:22:01:c7:55:3d:0f:c7:37:80:5a:d4:f5:60:05:be:83:
6b:06:bf:c2:18:42:3c:e0:73:ba:c2:ae:06:9d:9d:b4:aa:1d:
f0:a9:77:e9:c7:11:4c:ca:09:fc:2f:b5:fc:77:eb:07:c3:ab:
46:f6:e8:7d:b5:f4:16:28:88:88:7d:20:30:f0:ba:3f:a0:87:
8d:08:ec:88:6f:40:d6:72:7b:84:36:43:20:1c:8d:e1:e8:1a:
62:2c:c6:0f:0a:68:c1:d0:ad:eb:bc:51:ae:1b:6c:98:de:c1:
70:8d:cc:59:e3:55:f5:5a:f5:71:10:76:87:a8:a0:ab:85:77:
a8:cc:92:68:ea:89:41:6c:6e:d1:0b:c0:cc:7a:cc:cc:0f:b5:
ee:8c:5c:b6:ef:b5:af:4d:8f:7e:55:d9:8f:37:52:3b:e4:99:
53:e1:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:02 2025 by rpki-client