Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa
File: 470f3c02-20c3-480f-a788-60d7378cea9b.roa (raw, json)
Hash identifier: O/URLmSPEtFn9Subn2ET/GLCK5/vo3h2bKr4KFoXNt0=
Subject key identifier: 97:D6:51:DF:7A:0B:DB:71:CE:81:A1:77:87:F1:6B:D3:B4:48:0B:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4404BF5F56165A53306673A2B13CD1CC1B57D801
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa
Signing time: Wed 26 Mar 2025 19:23:31 +0000
ROA not before: Wed 26 Mar 2025 19:23:31 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:04:bf:5f:56:16:5a:53:30:66:73:a2:b1:3c:d1:cc:1b:57:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:23:31 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:69:e9:4c:04:e8:57:47:1a:16:17:56:41:
0d:eb:31:f5:66:1e:9f:ba:6d:40:f7:40:1d:bc:d9:
b9:6b:40:b3:ad:2b:30:7e:3f:c3:2f:a0:f8:21:ac:
59:4a:7e:1e:8c:25:4e:49:d5:9b:17:61:7c:dc:8a:
a6:bb:66:0b:9d:50:eb:98:d8:16:19:88:7b:fe:95:
5f:ea:70:96:0a:de:98:9e:47:79:a6:5a:47:5b:e1:
27:82:87:74:71:5f:5c:40:07:05:0b:e7:4e:98:a1:
62:3e:ce:17:29:5e:88:7d:d8:3e:ad:b4:13:7b:26:
97:fc:77:88:d2:cb:5c:43:2e:d6:bf:ab:6e:91:ec:
73:68:a3:c9:63:f8:80:e9:0e:db:1b:ac:ab:b2:c4:
42:f6:d2:5e:1a:eb:e7:69:7f:8c:07:e2:40:81:0d:
36:80:8e:41:4e:1f:f0:34:dd:af:19:dd:0f:a4:82:
89:42:d5:33:e6:04:63:04:c2:33:18:95:18:2c:b9:
79:e6:ee:37:19:38:03:0a:94:2d:d7:69:73:13:e2:
4c:de:e9:e8:fe:bf:73:aa:e4:97:02:41:eb:ad:27:
bf:77:2b:73:3e:d2:d0:87:b2:82:67:0a:12:07:54:
59:e3:44:5f:3a:5b:98:24:03:1d:68:1d:0d:63:19:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:51:DF:7A:0B:DB:71:CE:81:A1:77:87:F1:6B:D3:B4:48:0B:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470f3c02-20c3-480f-a788-60d7378cea9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:880::/48
Signature Algorithm: sha256WithRSAEncryption
9c:08:a0:ee:09:48:e8:c2:8e:9a:dc:92:23:47:2b:51:dc:cc:
a3:56:fc:3f:54:f2:5c:39:c9:ae:73:88:1c:3d:14:66:74:24:
ec:d9:f5:4b:2c:93:cb:45:be:c4:25:ce:a5:2c:12:d1:f3:9e:
85:13:28:78:4c:58:e3:5c:c4:f2:0b:1a:f9:3f:b4:ad:35:8e:
66:9f:7e:a3:fb:3c:5e:9f:46:c3:c2:0b:f0:cc:c9:2c:cd:cb:
45:c9:58:54:ae:81:04:1c:05:32:34:90:94:34:91:9c:da:ed:
2a:01:95:f9:0f:7a:8b:78:e1:12:5a:32:04:51:a8:ab:cc:ad:
bf:d4:6c:fa:be:f1:3b:77:10:2f:a2:b5:f6:b7:14:c7:46:dc:
a2:16:c5:95:7b:15:b4:6c:0f:82:a9:5a:98:9b:c6:05:80:e3:
35:c8:cd:af:40:42:d8:52:cd:a7:eb:21:09:88:c3:2f:da:d9:
fc:79:2f:9d:69:34:cc:80:ba:65:b3:04:da:31:11:f0:f9:37:
c6:19:c0:e7:3b:3f:b8:89:4b:11:ef:28:dc:62:b7:75:6d:84:
dc:7c:79:80:21:66:09:4b:9a:5a:09:fd:93:b8:33:d9:8c:07:
c9:d4:9e:c3:4c:3f:88:ee:b7:b4:0a:b1:f1:86:7c:55:6d:50:
0f:26:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:21 2025 by rpki-client