Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
File: 3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa (raw, json)
Hash identifier: tyFDIMK2ruYKRV4AnKz7bKlhdrIgGIWoHaIR6V2tcR0=
Subject key identifier: 78:46:12:A9:03:27:0B:0A:0B:BB:92:7B:00:A2:EF:9D:A8:5B:E6:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 29B4A6DD403089771EB275724E5A432342D6583A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
Signing time: Mon 31 Mar 2025 20:51:02 +0000
ROA not before: Mon 31 Mar 2025 20:51:02 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b4:a6:dd:40:30:89:77:1e:b2:75:72:4e:5a:43:23:42:d6:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:51:02 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:55:f0:fb:db:26:50:67:db:b2:95:f5:df:
43:0b:8e:c0:a2:c4:ac:91:cc:e3:55:a8:5d:cd:ae:
23:4f:77:4a:30:82:c0:6a:10:a7:89:b9:28:81:d9:
25:96:8c:20:46:e5:d3:5d:69:36:c7:a6:03:f8:c0:
d5:3b:cd:be:cb:e7:f9:c7:89:a0:0a:d7:2b:bd:4f:
0d:83:73:93:b7:88:0a:14:f3:17:b0:bd:43:4e:cd:
1c:47:17:9f:4c:24:61:b4:ee:46:82:9a:63:34:aa:
99:d7:5d:ab:4c:6d:36:c7:8f:f0:24:59:fa:a7:f3:
68:8a:1b:26:a2:7b:7e:46:eb:08:6d:b8:68:cd:03:
93:3f:c3:e1:86:47:05:f8:c5:a4:d2:38:93:b8:0c:
8c:54:26:8b:00:4d:67:f0:3d:36:cf:2e:37:55:7f:
a0:9e:9d:cf:02:e8:f5:f2:9a:72:45:e8:e7:f6:fa:
63:89:32:92:f4:a3:3f:8a:24:db:56:43:cc:b2:93:
46:4e:a3:ae:41:1c:4e:34:d2:11:9c:44:8d:ac:71:
03:95:41:ee:b1:88:35:0a:63:1c:ac:bd:ea:62:20:
0b:3c:d3:04:a4:e3:6c:b9:13:0e:56:af:53:85:7c:
2f:0e:af:42:fb:fa:48:64:0c:ea:e4:bb:7c:d5:6c:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:12:A9:03:27:0B:0A:0B:BB:92:7B:00:A2:EF:9D:A8:5B:E6:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a6271c8-6f02-45f1-97d6-ce27b463d3b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
5f:07:0c:ec:fa:45:81:5c:d3:16:13:35:c2:87:37:5a:75:46:
8c:c1:48:9b:bb:11:14:37:06:36:bb:2e:5b:86:e2:31:84:21:
68:60:c1:13:56:a6:e1:c9:5e:1d:f5:95:5d:f2:90:1b:86:a8:
36:45:fe:7a:42:50:5d:73:c0:49:f2:b8:9d:c3:ff:d0:9f:51:
a4:a6:21:9b:51:83:83:44:2b:af:8f:4d:09:90:0e:29:b7:7e:
7e:fb:2b:ee:ea:d9:fd:fc:17:1f:d1:e6:ad:51:a6:b6:80:aa:
6a:65:0a:b5:15:12:89:ac:42:19:88:a6:da:20:b1:61:ed:14:
c7:23:0d:b2:d9:87:a6:88:ec:b6:ec:71:a2:ea:b3:a0:a2:84:
c5:b5:f8:71:3a:59:4c:fb:9e:b2:5f:ae:a7:7f:89:f8:75:c9:
56:2d:ee:e2:79:fe:54:28:68:c1:5e:b1:d4:f1:2f:57:22:34:
85:49:b5:19:42:44:66:77:67:b9:d0:11:40:24:24:90:22:26:
74:9c:3e:45:33:72:b2:54:2e:6b:df:7b:71:df:e9:a3:20:10:
d4:93:de:83:87:57:c3:9c:e3:9f:e5:72:cd:ea:04:4b:de:81:
a7:bb:b5:f4:6a:46:f8:78:0c:9f:6b:7d:e1:24:6b:80:ee:73:
cb:1a:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:16 2025 by rpki-client