Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa
File: 48b510e0-0d59-48d3-96c5-ddb87c118e43.roa (raw, json)
Hash identifier: 0RP/6Fu+dkOfkGZr4Kt0IkDAN3qqewj6JQmX5y4mU2Y=
Subject key identifier: 5F:6C:86:4E:0C:FB:54:4E:69:2E:C0:17:C4:1B:82:93:76:FC:B4:3A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7DABAB7E32BC4CF68E5282564295AC345B6D03B3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa
Signing time: Mon 31 Mar 2025 19:11:21 +0000
ROA not before: Mon 31 Mar 2025 19:11:21 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ab:ab:7e:32:bc:4c:f6:8e:52:82:56:42:95:ac:34:5b:6d:03:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:11:21 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:81:47:52:3b:89:fb:29:3e:5a:a5:ac:e6:
b8:b7:b1:1e:7c:06:40:74:9e:2a:b1:a4:9f:94:07:
3c:6a:51:b4:a5:e4:fb:8b:67:f3:0c:11:08:52:d8:
f7:b7:f6:8f:d2:66:e7:af:83:ee:6b:ba:4f:fc:96:
aa:d2:21:59:5f:12:8f:e3:d7:e1:1a:c2:18:fa:b3:
13:22:9f:59:32:c1:39:f2:35:00:a9:a4:33:cb:a4:
49:02:1e:29:39:19:6b:71:87:02:01:56:90:a6:d0:
c6:67:a4:d5:b2:f1:24:c0:44:cb:e7:32:fd:b1:ba:
a1:58:1e:3d:43:09:87:ef:bb:a0:3f:a1:f8:68:0c:
2b:73:32:03:5c:f1:9c:c2:72:79:ec:a2:86:fe:26:
a3:e2:c0:ae:66:b8:d9:00:91:35:dc:0c:a1:b2:b7:
9e:2e:08:eb:b7:ea:6e:8d:d5:cf:d6:72:53:64:22:
48:7e:8e:c3:3e:c3:73:05:ea:21:77:c8:b6:d6:38:
57:a9:d4:3b:2c:e5:8f:1d:bb:7a:e0:6d:14:86:d0:
ea:9d:25:c7:fc:23:31:1b:b3:be:3d:a2:c8:c5:86:
14:f4:69:10:05:ad:31:9b:a3:d3:ec:92:85:ec:8e:
1d:14:da:b3:38:08:29:7e:1c:f5:74:63:d2:d7:15:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:86:4E:0C:FB:54:4E:69:2E:C0:17:C4:1B:82:93:76:FC:B4:3A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48b510e0-0d59-48d3-96c5-ddb87c118e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4020::/48
Signature Algorithm: sha256WithRSAEncryption
4f:2c:3d:06:2b:19:a9:5d:ea:82:a8:9b:c4:f5:db:b8:0f:7e:
ed:4e:58:b6:3e:71:ee:13:be:de:ea:32:3e:a6:e4:4b:c9:f3:
9c:4b:60:84:fe:ac:fc:f7:da:68:ac:6c:11:d1:b5:27:57:ea:
67:86:82:71:2e:c4:c2:c3:78:12:8d:2d:4c:4f:f3:2e:7e:62:
db:9d:2f:e0:8e:5c:2c:18:a4:c5:ce:53:77:68:47:c5:f5:f1:
ed:f9:b7:ba:2b:e9:81:51:fb:55:e1:7c:aa:d4:4c:df:6a:03:
0b:d0:43:fa:74:db:e0:d9:dd:04:6a:95:da:c4:ff:62:d0:e7:
63:f3:15:d5:c0:80:5b:55:af:2f:ae:52:d7:f2:94:42:6e:ee:
a8:67:6c:0f:a8:95:c3:75:11:55:a7:6e:3e:91:d4:51:c2:90:
e4:bd:72:8d:c9:32:01:bc:7e:6a:5a:13:88:b3:3d:fd:de:f4:
b2:70:15:bd:fe:4a:74:5b:30:3e:3f:49:d6:a1:21:1f:a4:43:
f0:a8:76:30:9e:89:cd:b5:90:aa:28:4d:1c:30:0d:be:a7:ec:
33:87:c0:fc:56:25:9a:ee:42:ac:2f:8d:41:e7:68:8a:53:22:
65:4c:9c:54:d0:d1:bb:6a:4d:60:44:83:c3:24:c3:12:21:07:
9c:6a:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:27 2025 by rpki-client