Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
File: 4b43f183-cd0a-4862-a7f0-bf7122100edb.roa (raw, json)
Hash identifier: 8jTZBm9oTYJBtsMapwhbQL1ghuKWSL+6Bd5CY34rXAY=
Subject key identifier: 8C:CF:40:C8:80:39:3F:97:3B:D9:28:14:EF:B8:48:04:62:1B:07:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76157304BBC594CE8B89B10B8846BC46C5F843F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
Signing time: Mon 31 Mar 2025 21:11:23 +0000
ROA not before: Mon 31 Mar 2025 21:11:23 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:15:73:04:bb:c5:94:ce:8b:89:b1:0b:88:46:bc:46:c5:f8:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:11:23 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:ab:61:1d:f7:6f:a6:39:a7:ae:9e:e4:d2:
15:3a:14:14:91:c3:b3:28:d1:59:6b:b9:ed:f6:56:
b9:31:1f:85:fb:9b:cf:af:4e:d3:05:74:68:78:cb:
ad:b7:e3:3c:db:14:58:e4:7f:3f:1e:67:cc:d9:e8:
5a:15:29:13:a7:d8:b9:87:e2:cf:42:e4:d7:1c:4b:
c0:b8:ce:22:25:89:91:2a:ba:31:f2:d2:24:10:42:
54:e1:7c:31:e1:ee:10:d7:6f:c8:e9:f7:29:85:96:
cc:50:69:15:b8:a7:2a:e9:d5:3c:b9:b0:91:62:c9:
92:84:60:ae:13:b2:48:8f:07:9c:e7:c1:44:d0:7e:
c5:93:a4:67:18:f4:e7:67:67:ab:bb:93:d8:85:b6:
a0:58:a4:65:64:dd:97:16:b4:34:fe:d6:6d:09:fd:
bd:21:c9:19:32:02:cb:d6:f6:19:ee:b8:bb:7a:ff:
3c:0f:ab:06:4b:19:e4:f7:db:12:88:5f:5a:13:fa:
ca:94:74:ce:54:11:e4:35:ae:68:9a:ee:bb:de:07:
65:f4:f3:4d:a2:7b:ee:43:49:0e:19:bf:ec:aa:63:
bc:3e:ba:f9:1d:7f:b1:a6:62:bc:b2:ca:da:f0:1d:
8c:b7:be:96:10:1c:b9:c6:a5:5f:fe:99:b8:47:68:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:40:C8:80:39:3F:97:3B:D9:28:14:EF:B8:48:04:62:1B:07:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:c00::/38
Signature Algorithm: sha256WithRSAEncryption
1b:1f:44:da:1d:4e:a5:fc:53:e9:04:b3:23:21:ab:58:ad:30:
46:c4:11:1f:c2:b3:8e:74:9a:55:a1:dd:93:d2:d6:1f:31:fa:
a1:57:4e:77:1a:9f:eb:8c:d1:43:6b:fe:bc:a7:22:76:66:50:
02:98:bb:6e:69:cc:99:af:f2:f9:fd:09:17:bb:fc:c1:1c:7e:
53:28:77:71:36:47:95:3f:67:03:6c:65:09:64:c1:69:5b:17:
c1:b1:92:94:96:b1:14:31:63:32:a8:9a:08:a0:3b:6f:84:74:
2a:83:77:9e:b6:03:b2:3f:5c:8e:de:8d:57:49:01:cc:a4:c8:
63:f7:d2:fe:90:26:f5:c5:b3:9d:fb:74:e9:43:2b:cb:d2:41:
41:b4:80:23:d7:9d:96:a4:c6:0d:0c:1e:27:88:e8:ae:d9:78:
24:d3:08:d4:77:b2:a3:cb:2c:1d:3e:59:3e:35:79:71:7e:f2:
3b:0a:9d:ed:e5:d4:62:0f:86:48:70:ce:6b:22:a3:d1:7c:1e:
51:b6:0b:17:60:98:ab:ae:3c:87:38:a5:2d:16:5d:0f:7f:f9:
2f:19:61:11:e5:02:ac:68:b9:e1:f2:e0:b2:78:31:fc:cb:38:
eb:63:56:4d:25:5f:5d:3e:94:5e:07:93:3e:0f:7a:c9:74:9c:
45:3e:83:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:09 2025 by rpki-client