Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
File: 45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa (raw, json)
Hash identifier: Q7gVEHmQIgAI8LUrHxWh4L5MsrRbk9L+PE53wFad1hc=
Subject key identifier: 61:A8:25:A6:D1:4D:77:26:C1:91:80:DE:33:DD:7B:76:6E:BB:B3:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 650D88D7E0B34520AEC87B37F0AD552EF963E63B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
Signing time: Mon 31 Mar 2025 20:51:41 +0000
ROA not before: Mon 31 Mar 2025 20:51:41 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0d:88:d7:e0:b3:45:20:ae:c8:7b:37:f0:ad:55:2e:f9:63:e6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:51:41 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:75:14:8b:81:06:69:0b:d1:9f:31:bf:5c:
6e:ee:3a:62:ae:42:81:b2:5e:ff:48:aa:ec:53:31:
cd:9a:1f:3b:99:b1:2f:a1:61:01:b9:40:20:02:bb:
fc:9b:cb:3b:09:4c:96:97:7b:43:61:93:6c:c4:6e:
7f:a6:c9:cd:42:45:81:e6:8e:49:14:79:61:8e:9e:
b2:66:3b:b9:71:3a:6f:20:c4:8a:d0:bb:4d:c6:19:
d6:9d:10:58:83:13:8a:80:b6:01:e0:5a:5b:43:6a:
3a:6d:56:d7:56:14:16:5f:d3:24:46:32:01:89:02:
06:0f:db:a3:af:bb:6b:0c:a3:02:f9:00:40:a1:37:
1e:79:58:90:bb:01:bd:f6:01:db:d6:0a:4d:44:27:
cf:37:38:c4:d9:bf:09:21:dd:a3:76:2c:0c:84:3c:
90:69:f7:23:66:20:9e:6c:ae:3f:6c:4b:47:74:6e:
7d:cf:cd:b7:68:48:ff:dc:1f:13:e2:56:c6:09:2b:
44:8b:b9:aa:8e:a6:24:0f:a5:50:2e:a7:56:ca:3a:
4f:42:12:7b:fc:32:4f:7a:41:f9:53:8a:7f:bc:d9:
89:ec:7c:66:4c:c6:69:84:c5:2e:25:6e:be:de:4a:
a3:55:14:3d:69:ed:2a:db:b1:9f:24:aa:9d:4e:33:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:25:A6:D1:4D:77:26:C1:91:80:DE:33:DD:7B:76:6E:BB:B3:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b9:35:08:a1:57:39:3d:30:4a:eb:19:88:3a:c3:b6:64:1e:55:
5a:4c:ec:9c:96:91:6b:96:90:72:b8:70:c7:c3:6c:ad:c5:7a:
07:e3:5b:82:36:42:22:eb:6a:aa:b5:39:1e:d8:a6:99:71:d4:
6c:85:31:11:53:ce:7a:3e:26:70:21:91:71:0b:7e:be:53:94:
ec:7e:bb:2f:a3:8b:77:ae:4d:b6:75:e3:7c:cd:da:a0:bb:7a:
0e:43:b7:ec:de:6b:86:4d:04:e4:95:d4:41:f4:6b:20:b5:53:
10:f6:75:81:69:bc:d8:4f:69:2b:0e:47:d2:2c:98:d6:76:ae:
63:98:52:b8:c5:11:7a:d4:01:05:95:f7:e3:de:c1:29:ee:ef:
b4:e8:f9:8b:5c:f2:3f:19:93:94:f3:d5:c1:3c:57:63:36:9a:
af:63:54:19:e5:65:61:14:66:e4:49:c1:61:69:92:56:24:a2:
26:3e:5a:ad:aa:b9:48:40:94:26:3a:4b:ae:18:59:d3:aa:8e:
c0:f6:92:9b:a1:f2:75:d5:d3:53:e5:91:80:dd:86:79:9d:54:
45:17:14:4a:60:53:ed:47:13:f6:b1:e5:d7:ca:35:42:c1:08:
54:cd:7e:2f:e9:27:e5:60:0b:4e:21:c9:74:41:8e:e6:af:14:
3c:95:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:33:22 2025 by rpki-client