Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0edadb-41c4-4656-a071-083b3f2866dc.roa
File: 2b0edadb-41c4-4656-a071-083b3f2866dc.roa (raw, json)
Hash identifier: Sl5rrSRia3hvXSwbTAxXfMMNNu3fVIpMQmhyTCAB2W0=
Subject key identifier: 16:E5:4F:05:2E:8C:83:97:C0:FB:26:BD:43:9A:7B:25:05:FA:7E:3C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B0ACC3C71AFB3AA7E978D828084CF919AA450A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0edadb-41c4-4656-a071-083b3f2866dc.roa
Signing time: Mon 31 Mar 2025 19:50:20 +0000
ROA not before: Mon 31 Mar 2025 19:50:20 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0a:cc:3c:71:af:b3:aa:7e:97:8d:82:80:84:cf:91:9a:a4:50:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:50:20 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cc:7c:5c:1d:c1:a4:f3:39:e2:b6:5f:5b:18:
a3:58:ee:55:18:5c:23:46:d5:b2:01:d3:29:ea:cc:
01:9a:16:1f:de:d3:13:38:18:67:3f:fc:00:2f:c6:
84:0c:aa:ca:c8:6e:b6:a0:aa:30:9c:85:17:5c:f2:
7b:c3:f9:d2:72:10:71:6e:0f:72:9e:6d:84:68:a7:
e4:65:22:26:be:0a:d0:55:b3:cf:2c:70:4e:f8:1d:
78:e7:6e:db:3a:e6:6d:16:d0:41:85:14:99:97:20:
b0:4c:49:b8:9c:76:b8:83:b8:de:1d:5f:1f:e4:97:
a2:ba:99:f2:8c:0f:d2:76:6d:c0:75:2b:5c:6d:a7:
a4:bd:8b:84:60:f3:6d:90:c8:b5:99:06:3f:c5:5b:
83:0f:29:c2:6d:49:00:e1:08:a1:17:2a:6d:cf:1d:
fd:73:6c:13:5e:3f:d5:20:36:79:b9:8a:5a:30:cb:
49:63:5c:82:cd:5f:ea:ec:69:1b:f7:ef:d8:19:0d:
c3:a8:ce:f6:fa:66:14:5a:d5:9f:2d:b6:fa:15:d4:
4c:44:a5:6b:eb:a1:d5:a6:d3:f0:5b:13:d7:90:9f:
e7:38:2c:cf:62:33:85:d3:e5:14:33:0c:67:b1:b1:
ea:13:78:23:b3:68:e4:37:01:5b:19:72:ba:25:b6:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:4F:05:2E:8C:83:97:C0:FB:26:BD:43:9A:7B:25:05:FA:7E:3C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2b0edadb-41c4-4656-a071-083b3f2866dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:8020::/48
Signature Algorithm: sha256WithRSAEncryption
02:a4:5d:b0:44:6a:eb:fd:ed:47:8c:28:fd:ac:9a:cb:d1:59:
29:b3:b0:74:91:f8:cd:2d:8a:2d:f9:58:01:5c:a6:2b:c1:44:
67:3f:00:e8:32:0b:14:98:e3:7a:84:be:1a:34:03:29:cc:f3:
ba:b4:fa:c7:29:92:ae:63:f7:bc:9b:65:5f:fe:36:a5:5b:65:
df:9c:4c:65:9b:e6:a5:36:bd:9a:5f:05:e1:8a:43:8d:7f:fa:
13:9d:e5:bb:51:13:d7:d1:3a:b3:f0:c4:18:c7:ba:bb:af:07:
3d:e7:52:73:72:61:c0:1f:fd:75:99:f0:50:d5:c0:a7:98:cd:
9d:d3:8b:9e:09:67:ba:d5:57:f0:76:58:56:fe:af:d2:5d:0b:
fb:b5:8b:7d:90:c6:2c:2b:30:f6:10:32:09:83:35:ed:78:6f:
48:0f:d5:f4:27:1e:66:01:a2:85:c6:7e:7d:d0:a4:ca:6e:ae:
1f:af:51:c8:36:29:92:62:76:21:34:7f:d0:90:6d:c1:09:26:
87:2f:88:25:fd:a1:99:58:c7:91:28:69:07:1c:35:64:63:6d:
c1:24:44:46:7b:9a:32:2b:a5:06:f6:c7:df:00:c6:e8:a9:44:
2a:55:87:e8:99:c5:ae:8e:99:06:f6:5f:5f:e1:93:a8:96:bf:
07:69:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:46 2025 by rpki-client