Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
File: 4a799a36-6e8c-4ca7-be23-5388518d8f95.roa (raw, json)
Hash identifier: MqDvNlvbJkD1gImJwooEIjguagr/1BPFF19pDii5Eeo=
Subject key identifier: 0C:79:03:55:44:C5:93:81:72:C6:A9:4B:D9:08:41:CC:B6:25:E5:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25479DBC3174C0BE17FD186D817F6A65B184F004
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
Signing time: Sat 05 Apr 2025 00:10:16 +0000
ROA not before: Sat 05 Apr 2025 00:10:16 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01f::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:47:9d:bc:31:74:c0:be:17:fd:18:6d:81:7f:6a:65:b1:84:f0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 5 00:10:16 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:c7:8c:7c:84:5c:cf:d6:68:82:a5:0a:e1:
24:9e:ec:a4:a5:1d:de:3b:66:b6:73:57:85:8b:6e:
b7:ad:3e:c6:76:57:31:ef:25:a9:c4:68:52:f1:63:
d7:49:38:c9:79:4c:40:14:96:d9:70:91:9d:af:10:
75:dd:0e:b4:7a:6b:88:2c:77:36:c1:4f:ac:f9:3d:
78:53:79:62:37:fe:52:6f:b8:d9:59:f0:86:9e:62:
3f:e2:42:f9:33:89:e0:e7:64:bb:5f:7a:97:dd:d1:
4d:e9:9d:ad:5a:cf:12:eb:9f:7a:5a:06:08:da:46:
c7:a8:59:3e:33:41:04:45:d9:d3:c3:e6:a0:b7:46:
8f:c2:1e:9a:3d:f1:38:86:c0:96:70:2c:f1:e8:96:
6e:eb:99:55:ba:90:f6:81:c2:97:7c:8c:05:d1:57:
b5:15:d1:c9:c4:22:30:67:20:1e:cc:1c:df:53:e9:
17:d2:c9:cf:f5:d2:db:a4:39:35:ab:7b:6a:e5:06:
9b:2c:19:02:38:fd:a8:16:9c:4c:59:62:fc:35:eb:
b4:4d:bc:3e:f1:2a:31:a6:20:92:b8:a1:1d:f4:49:
86:39:3a:6e:10:ac:85:c7:ae:3d:77:02:74:92:46:
3e:d5:68:aa:c4:b1:de:32:3f:f8:18:a6:c0:4c:bc:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:79:03:55:44:C5:93:81:72:C6:A9:4B:D9:08:41:CC:B6:25:E5:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a799a36-6e8c-4ca7-be23-5388518d8f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01f::/36
Signature Algorithm: sha256WithRSAEncryption
60:ae:f6:d7:a4:55:7d:1a:c4:e4:3f:7b:c4:e2:52:a5:7c:7e:
97:e2:ae:bc:90:30:71:80:9e:d3:a1:25:e5:ec:0c:0a:18:56:
e4:58:59:2d:c9:02:fb:58:b6:40:0f:3c:71:86:21:76:c0:c3:
22:6c:0f:5d:58:2e:9b:0d:2d:c4:27:3f:ef:00:8e:e2:92:28:
29:c2:54:7b:68:a2:e8:a7:7e:bf:ba:0a:00:ec:e5:47:8a:ff:
91:31:cb:b2:40:5f:72:76:21:e0:85:ac:3b:da:4f:04:86:32:
c6:e5:a9:40:ed:c5:86:4a:09:55:d6:4a:6a:0c:8f:c0:f0:71:
af:ed:1f:64:a6:41:a8:e0:ba:2b:64:b1:85:04:e1:d0:2f:bb:
44:7c:97:c2:9d:b2:8c:0d:70:93:9b:e7:08:d9:0f:8f:a1:84:
8c:ae:a6:e7:3f:3b:2e:97:f0:64:d5:21:4d:db:65:39:f1:da:
bf:a4:34:f8:fc:6d:d6:6c:5d:aa:9a:73:07:4e:e0:96:ba:95:
23:80:8f:66:3f:8c:88:a3:c4:09:c2:a6:f6:74:8a:57:88:8b:
47:48:56:cc:47:1c:bb:ed:28:9a:5c:59:11:74:29:fe:ee:cf:
c5:d8:9a:cb:e6:73:f7:2a:bc:bd:7d:10:a0:5f:9b:88:50:33:
7d:4f:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:46 2025 by rpki-client