Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
File: 3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa (raw, json)
Hash identifier: LKoA2RjNDwcMFPG0DPx4HZ8q8nfEi5qnsik1YML4UWU=
Subject key identifier: A9:EC:EE:47:E4:27:81:E8:06:65:CC:FA:58:42:24:C4:2A:B9:71:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 46431A1765B6200B24ED151613E9121A1DDBBBA3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
Signing time: Mon 31 Mar 2025 20:11:15 +0000
ROA not before: Mon 31 Mar 2025 20:11:15 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:b080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:43:1a:17:65:b6:20:0b:24:ed:15:16:13:e9:12:1a:1d:db:bb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:11:15 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:57:04:c5:5e:1b:0b:a9:e0:dc:0c:b3:47:
3b:d8:33:cb:02:5e:a1:cc:0d:04:3c:c5:29:95:86:
10:23:47:b1:e2:17:74:5d:e4:d7:7e:f1:74:11:6a:
fb:33:a3:59:90:c6:8e:71:41:55:70:75:50:7f:b5:
05:66:a8:e0:65:de:28:74:f9:d0:fc:7f:32:64:05:
36:54:e5:67:e4:d7:88:08:51:ae:37:d6:8f:d8:3d:
56:db:cb:39:60:b9:b7:8e:c3:24:bf:e4:2f:06:80:
68:10:94:e5:b9:78:2e:94:1d:c2:75:37:88:ac:18:
36:f5:e6:c8:a0:b0:ff:cb:48:22:d3:6c:21:b4:3a:
83:d0:04:b6:d7:cf:e2:7c:fc:f2:7c:c9:38:e8:b4:
2c:da:fc:72:2b:1f:ab:d2:57:7e:47:b9:68:ea:44:
e3:b2:0f:02:a4:0c:f4:cc:c3:28:99:f2:3c:61:fb:
1d:29:7c:f3:fb:ea:8e:72:8d:d5:04:ca:c3:4b:84:
6f:33:dc:95:67:b4:8b:48:6a:be:90:d6:45:0d:0c:
d8:2c:05:4c:d5:39:6d:31:19:02:b8:60:f6:12:6c:
a4:0f:2a:a0:a1:70:b4:7d:e9:bd:9e:0d:58:44:e6:
99:22:9b:b0:e6:1e:45:70:62:e9:56:a8:7c:25:a6:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:EE:47:E4:27:81:E8:06:65:CC:FA:58:42:24:C4:2A:B9:71:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3b2e3e13-7ae6-418b-b8a8-9b4d61383b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:b080::/46
Signature Algorithm: sha256WithRSAEncryption
a9:85:2d:ca:47:d5:9d:70:05:e8:27:d1:ad:1d:72:19:bb:15:
41:10:46:e2:2a:fc:e3:74:c9:33:8c:ad:00:2d:e9:fb:dd:7f:
27:99:9d:47:e3:e5:7c:78:62:fc:5d:6c:b0:1b:6a:3b:55:98:
b9:e0:63:81:cb:3b:9f:ce:ae:a3:ae:20:dc:cb:50:9e:4c:71:
0d:47:c8:04:3d:7e:7e:ba:b8:32:27:3c:26:0a:1a:1d:d6:9b:
25:7a:37:25:bb:95:ff:ed:90:02:c8:af:5a:d5:5a:f7:97:74:
1d:a3:33:1f:e8:6c:aa:b2:fb:6c:5a:1d:40:d9:f1:41:4c:bc:
4b:0a:3e:9a:fb:aa:2b:2a:f1:8c:c8:ff:52:f5:18:da:32:6c:
c5:d9:d6:6e:06:8f:02:61:5d:cd:e6:95:ed:7c:90:f6:d0:9a:
43:15:2d:36:2b:4d:68:c7:be:7c:a6:79:53:f4:ed:56:82:aa:
5e:80:b2:0b:43:ea:e9:be:97:39:18:78:31:0f:50:fc:30:73:
36:b4:1d:f9:05:a1:87:f4:73:7e:69:f8:34:ee:e4:c8:5c:23:
03:7b:96:bd:94:63:ad:e4:15:bb:86:ea:99:0e:0b:dd:53:c9:
9b:92:f4:ed:81:04:ce:d7:06:32:bb:4a:3d:98:1c:47:55:2a:
70:5d:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:31 2025 by rpki-client