Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493dc85e-6724-4886-b78f-9709644e2816.roa
File: 493dc85e-6724-4886-b78f-9709644e2816.roa (raw, json)
Hash identifier: 5hu1w4NqL8CkQLsiEZekIhXROFKof2PmkXzv/UMz34A=
Subject key identifier: FD:D3:57:91:04:C1:E1:0D:C9:8D:7C:72:A5:E7:CA:C9:FD:01:8E:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09FD74F659B269455D30901F3A4E5061CE6EF6D8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493dc85e-6724-4886-b78f-9709644e2816.roa
Signing time: Wed 02 Apr 2025 18:52:07 +0000
ROA not before: Wed 02 Apr 2025 18:52:07 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:fd:74:f6:59:b2:69:45:5d:30:90:1f:3a:4e:50:61:ce:6e:f6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 18:52:07 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:b2:a0:6b:46:61:4c:43:6d:c2:de:8e:6e:
d7:de:f3:66:7e:f2:9a:27:3e:7f:14:ec:73:f0:3b:
45:9b:60:ad:c0:9b:ba:39:f1:da:6d:ee:f1:d7:f6:
11:3c:80:18:b1:bc:f6:69:1f:5a:3f:12:96:f7:b1:
1e:33:b4:72:32:60:30:26:11:d0:2e:0a:12:5e:07:
a6:92:2a:94:d9:74:fe:c8:93:b2:a5:00:ac:71:b5:
b7:e6:0a:47:14:94:34:39:df:8f:ef:4f:46:7f:79:
16:c0:80:e2:b4:6f:37:c0:3e:fa:06:c4:ca:1f:fe:
ea:68:35:25:9f:0a:3a:a3:b9:39:49:85:44:09:e3:
6e:95:73:d2:6a:9a:90:29:f4:a1:b0:98:f9:dd:3a:
85:63:dd:e9:06:ca:c0:b8:8a:e9:c5:95:72:0b:8a:
70:f9:92:f7:3d:98:27:79:57:db:45:64:2f:9b:a8:
4f:79:0b:74:8a:1f:71:b2:4f:ab:a3:52:8f:24:18:
9a:c6:16:8e:2d:f4:ed:e3:65:c2:3a:ba:6a:9c:d8:
12:d9:d1:9b:67:de:94:3f:40:26:ef:9c:40:10:c3:
09:c1:08:4a:f4:3f:01:b1:e6:ab:cf:1f:55:8a:c9:
42:2b:df:ed:f3:5d:de:60:b5:ed:c8:a9:2f:3e:1b:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:57:91:04:C1:E1:0D:C9:8D:7C:72:A5:E7:CA:C9:FD:01:8E:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/493dc85e-6724-4886-b78f-9709644e2816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:880::/46
Signature Algorithm: sha256WithRSAEncryption
5c:1d:b8:e2:a0:3a:15:9f:df:2e:c5:b9:e5:25:f3:f8:a6:1b:
37:53:fd:17:81:22:ef:18:3e:82:81:60:09:5e:75:36:28:1f:
b9:90:8b:b3:50:18:4e:b5:1e:16:d9:09:79:c8:0a:9d:f3:06:
5e:da:0c:29:b5:49:1f:c3:c1:ab:3a:12:88:36:76:5b:57:9e:
55:6b:aa:9e:59:ed:c8:a6:56:20:ac:f9:98:6a:80:63:93:05:
cd:fc:99:4b:2f:28:ec:ba:4a:61:1b:fa:d6:0a:c1:3a:80:80:
e3:3f:05:57:5a:c7:5b:fa:a5:1a:4b:9a:19:f6:56:48:16:66:
70:64:45:02:89:eb:7a:90:37:e7:25:2c:7c:47:4b:7f:fb:fb:
f2:bb:88:27:10:4c:1c:bf:b5:87:97:1c:27:67:b3:95:31:fd:
e9:54:33:17:da:9d:1e:96:0f:16:c1:77:a8:9d:07:07:64:c0:
22:93:14:12:6b:59:0e:59:71:68:5c:d3:ff:bf:17:bf:3b:8d:
99:ca:3d:36:10:40:5f:50:9b:e6:0e:58:31:66:91:16:94:e9:
18:29:e5:0e:b3:7c:44:2a:cc:97:6f:93:e4:16:53:9a:31:a3:
c2:3c:fb:3c:43:51:4f:84:d5:b0:58:b4:eb:36:e9:9e:9c:54:
aa:7f:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:18 2025 by rpki-client