Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/417101f4-2159-4c08-aa5e-b16ba0461450.roa
File: 417101f4-2159-4c08-aa5e-b16ba0461450.roa (raw, json)
Hash identifier: tuLnOR2K965qh9cGKtDRhM4tSCwgGYqo7xnGNuteOjA=
Subject key identifier: A6:FC:C5:63:22:99:95:73:DF:C4:4C:AF:F1:72:66:AC:DC:22:3E:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 60B4FC8B86B3012F227011233010A9277588EE83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/417101f4-2159-4c08-aa5e-b16ba0461450.roa
Signing time: Mon 31 Mar 2025 20:31:48 +0000
ROA not before: Mon 31 Mar 2025 20:31:48 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b4:fc:8b:86:b3:01:2f:22:70:11:23:30:10:a9:27:75:88:ee:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:31:48 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:30:32:b7:19:09:fd:d7:97:ee:4e:1e:48:
49:90:15:2a:f7:de:7f:1d:b2:3f:2f:11:80:05:ab:
6c:04:bd:c2:be:04:44:36:ec:9a:7f:b5:0e:3f:4b:
a6:98:82:ae:84:1d:10:0b:75:c6:7d:74:d5:f1:03:
ed:60:9e:5c:5f:d2:cb:72:04:51:a8:b4:08:12:a9:
c6:f2:86:4a:88:36:15:30:9f:ed:d8:cf:23:58:c2:
47:54:e4:45:f0:9f:8b:2c:0a:ad:4b:d1:a3:bf:82:
e2:c1:f0:97:b2:fa:a1:98:12:ef:4e:d7:3c:70:ab:
f1:03:f2:c4:8a:22:86:0e:f2:5a:cf:4c:77:3f:7b:
f5:75:df:74:76:1f:ad:5a:15:c9:8e:12:24:5d:75:
a6:2d:0c:69:5b:75:19:33:bc:d4:77:1d:dd:7a:c5:
41:82:ff:93:9e:5a:33:8f:9b:19:b5:f0:29:58:eb:
6d:e7:4a:e9:5d:70:71:b6:d7:c4:2a:8a:eb:c0:28:
81:ab:1a:7f:4d:84:55:02:82:82:f9:5e:63:6d:55:
05:50:04:52:af:3e:ee:5d:57:bf:3e:42:f7:98:17:
dd:3b:d2:c1:02:db:56:a8:e0:63:9e:84:52:0d:8e:
0a:25:12:96:93:84:b7:b0:a1:e4:b2:0d:d6:f4:e7:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FC:C5:63:22:99:95:73:DF:C4:4C:AF:F1:72:66:AC:DC:22:3E:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/417101f4-2159-4c08-aa5e-b16ba0461450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b4:b0:9c:20:cd:10:c0:f5:30:2d:2f:91:77:f7:e4:e3:ec:7b:
0e:5a:e0:dc:05:a9:7d:0b:3a:ad:8d:59:d8:61:6a:40:65:a8:
1c:42:39:99:5d:90:95:56:1a:b9:36:cb:8a:51:2c:78:88:4f:
06:48:f0:ad:6b:56:89:46:06:7d:4c:35:10:b6:0b:e3:d0:33:
d3:ee:31:0e:cb:08:ff:aa:f7:f8:5b:ad:e4:83:bb:61:2e:ea:
f4:f6:e7:fb:de:33:af:8d:13:f9:bb:44:47:e1:42:a4:1e:42:
da:d0:1d:03:28:a1:75:79:ca:e5:86:66:3d:d2:dc:11:4b:2b:
7a:da:3f:36:db:da:14:d3:0c:ed:91:63:ef:88:38:cb:a8:0e:
9c:35:af:d7:7a:12:b7:23:ba:37:0b:a6:c8:73:da:c0:04:ba:
c2:28:eb:34:ee:8d:fd:41:9c:e2:19:ad:34:14:d6:45:94:74:
a4:0e:42:ca:49:2a:0b:67:65:33:d1:3d:52:36:4e:fe:41:7c:
07:5b:4d:43:db:c0:3e:db:90:4a:96:c6:72:55:10:cd:8e:00:
f0:c6:fa:cf:aa:88:22:82:08:57:e6:35:63:21:2a:28:ff:98:
13:a9:62:e6:4a:51:e8:76:13:d2:ab:9c:16:05:70:ec:d1:48:
45:da:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:03 2025 by rpki-client