Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32b74179-db70-4b5e-a9aa-e6ae85392a2e.roa
File: 32b74179-db70-4b5e-a9aa-e6ae85392a2e.roa (raw, json)
Hash identifier: jeSLIAX6BG4qgx2ATVcgDajmAwzRgDORd6a5t/khBfE=
Subject key identifier: F7:6E:FA:4E:69:33:88:E5:53:CF:0C:1E:26:25:8E:62:6E:1A:AD:7D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52661BDEAE06B5E347C8744BC54479DF47B25908
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32b74179-db70-4b5e-a9aa-e6ae85392a2e.roa
Signing time: Mon 31 Mar 2025 20:30:10 +0000
ROA not before: Mon 31 Mar 2025 20:30:10 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:e080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:66:1b:de:ae:06:b5:e3:47:c8:74:4b:c5:44:79:df:47:b2:59:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:30:10 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:02:a8:40:2d:65:3a:02:42:51:79:43:e5:
be:da:55:f2:5d:f7:31:22:6f:1d:68:31:69:d5:eb:
f8:9e:fc:dc:91:95:c9:87:37:4d:2f:15:16:57:82:
5e:c6:54:75:6c:e2:a5:5f:4e:3c:96:e5:d3:23:db:
52:95:ab:5d:77:5f:e3:58:83:3e:8f:e2:55:93:d5:
33:be:40:b6:f2:71:09:99:15:b7:aa:71:66:6e:cf:
2b:e3:da:32:52:ae:5d:75:38:0d:bb:27:46:58:c8:
7e:19:2c:ac:80:3d:fd:8c:2a:c3:ca:3c:6a:a6:87:
36:e7:fc:c5:14:4d:de:65:d9:9f:5e:19:95:dd:66:
db:99:28:25:de:08:4b:2a:89:c1:e8:ef:d7:20:17:
0e:7c:af:68:2e:ef:6b:8b:d4:08:d3:28:84:22:0b:
f6:8c:52:1e:c5:fc:b3:6d:6b:88:0c:08:45:2a:8f:
6d:92:b3:0d:bf:c8:04:13:df:8c:6c:fc:c4:7b:d0:
95:fb:33:15:e8:0e:e5:17:3f:3c:88:27:61:0d:69:
f4:e6:34:bc:0f:9b:8f:ca:8a:db:3b:8e:a1:be:8a:
56:a3:77:5c:3a:70:93:7c:53:a9:1c:37:1c:b2:de:
48:88:38:41:a1:3c:18:ae:d0:c7:35:5b:99:92:fb:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6E:FA:4E:69:33:88:E5:53:CF:0C:1E:26:25:8E:62:6E:1A:AD:7D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/32b74179-db70-4b5e-a9aa-e6ae85392a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:e080::/46
Signature Algorithm: sha256WithRSAEncryption
12:82:f1:ac:6d:22:15:70:86:95:cf:bf:fc:f0:2a:79:19:46:
44:ef:1f:17:8d:54:d5:35:2c:15:74:4b:0c:3c:b2:75:f1:65:
2c:b6:6b:1e:64:6e:0f:70:b5:65:b8:e3:20:f6:22:ed:1f:5c:
01:43:aa:48:33:cc:1f:61:3e:39:a4:3a:4c:8f:01:9d:b5:32:
e4:f9:a5:97:17:9e:1b:a7:2a:19:a5:bd:96:b7:0f:27:17:81:
4e:a1:34:ed:bb:4a:54:40:b5:45:b9:53:02:9b:29:8c:3a:42:
7b:d4:1e:54:64:36:1c:52:08:a2:2a:a5:48:5b:b5:92:ca:b2:
a3:e2:40:3d:d0:40:39:f1:a5:4f:e5:38:83:53:f5:d3:5d:4c:
0e:f2:ca:28:c3:24:f8:14:e9:aa:ac:87:0f:b8:ed:3e:09:87:
a3:81:90:07:22:d5:a3:cb:e1:d2:79:33:3a:8e:81:a5:16:96:
df:8d:eb:5d:50:c9:11:35:25:54:6c:2e:b5:2d:6c:81:74:a8:
bd:eb:56:e6:05:70:40:e4:4f:42:47:f0:00:ac:77:3e:f8:d2:
cb:6e:ac:b6:a0:ff:03:d6:d8:de:ae:ee:9f:21:f0:60:a8:f9:
1d:ac:e9:84:54:19:1c:14:ac:8b:4f:d6:14:ba:19:fb:57:69:
63:9b:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:58 2025 by rpki-client