Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
File: 3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa (raw, json)
Hash identifier: Zbh6rL+s0nuTZBijz/6fQ/SixopnTkD7YldNKAOCEq8=
Subject key identifier: F5:18:7E:AF:DA:BF:E7:77:8F:7D:CF:25:23:B6:0B:0F:0D:E5:D0:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D8533801FFC6DD2F1CFE057860F023E2E3F6B91
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
Signing time: Mon 31 Mar 2025 19:31:40 +0000
ROA not before: Mon 31 Mar 2025 19:31:40 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:85:33:80:1f:fc:6d:d2:f1:cf:e0:57:86:0f:02:3e:2e:3f:6b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:31:40 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:f6:b3:b6:b9:08:47:05:8e:aa:bf:c8:42:
a3:82:78:f8:49:d6:bf:62:55:91:67:d1:0f:d8:4c:
07:90:cd:55:a8:18:10:30:39:a8:de:0d:d8:cd:06:
c0:62:a8:d2:ce:61:e5:d2:63:b4:eb:34:d1:65:00:
a8:87:1a:5d:95:21:bf:03:c7:48:f2:6b:75:8f:e2:
f5:bb:13:83:a4:cc:50:c2:db:c3:79:82:50:86:07:
ff:bb:0b:5d:08:6b:88:34:6c:d8:c8:3e:dc:58:dd:
09:c6:b5:3f:0a:cb:ae:05:fa:f7:10:4c:0f:97:32:
dc:af:af:db:1e:57:7f:67:88:a2:d0:e7:c4:d3:9c:
fe:68:c8:74:3e:83:64:3a:58:fb:db:ca:a2:11:13:
be:fc:f5:7f:63:f7:b5:6e:e3:16:0c:1d:b7:fc:d0:
f8:ec:98:78:f5:f3:cb:83:5d:14:f8:f4:d8:4d:e2:
b3:76:b7:03:f5:b5:3f:f8:18:54:3c:4e:15:ef:e8:
e6:c3:16:b9:ae:fc:bb:c7:c1:ce:68:c5:a8:cd:06:
de:47:1e:a4:54:5f:41:1f:48:d0:4d:23:fc:82:a9:
14:12:cf:5a:34:ee:38:15:94:d9:0c:03:fd:62:6b:
a1:fb:30:95:0a:ca:77:01:44:da:52:6e:ad:e2:93:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:7E:AF:DA:BF:E7:77:8F:7D:CF:25:23:B6:0B:0F:0D:E5:D0:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:90:c1:30:55:79:16:38:79:a9:2c:64:5f:91:14:7b:cb:dd:
04:91:2f:d2:3e:90:df:3a:cf:b6:b5:e5:3d:50:22:dc:5e:af:
e2:84:61:45:f8:48:42:0c:3a:b3:ef:10:aa:59:ff:a8:19:28:
bc:20:41:7b:70:83:83:1d:7c:33:cb:fc:5d:fc:60:28:01:19:
7a:aa:45:a5:70:77:0b:d4:e0:68:19:a7:07:21:ad:af:e8:fc:
fd:c3:a5:b2:02:d8:0e:fa:40:12:9b:27:84:8f:75:21:51:17:
99:9d:1d:72:33:ba:ac:03:94:93:31:61:a7:d9:f7:63:a6:61:
fb:98:66:8a:b9:0b:9e:72:a5:ed:3c:d7:9d:42:fb:90:b9:cd:
9f:bb:00:34:d0:9e:ce:e8:2d:d8:84:70:5e:4d:28:86:93:3a:
e0:6f:15:97:d7:7b:56:e9:07:d4:98:9a:ac:ab:c2:7f:04:54:
1e:6b:8d:6a:94:b8:83:47:e8:46:7f:e0:c3:3e:60:41:f2:f2:
c4:6c:4c:d7:02:11:46:33:28:07:41:a6:1b:a9:bf:3f:ac:70:
5a:25:49:2e:66:c8:69:56:ce:4c:c7:f3:8a:ad:f8:b0:03:15:
91:05:f7:7a:36:2f:18:a0:46:bb:8e:77:ff:57:01:66:72:7a:
06:2e:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:26 2025 by rpki-client