Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
File: 4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa (raw, json)
Hash identifier: 8HOb6Gc0+Lba0ni/lgVUqI/zRalcKG/FtPbuW9PUV0k=
Subject key identifier: 20:2E:63:27:68:D0:64:8F:4E:86:9B:BC:EC:2F:A6:88:89:07:81:6E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01C1B04BC0F114330D62718723788978DBC46230
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
Signing time: Mon 31 Mar 2025 19:20:05 +0000
ROA not before: Mon 31 Mar 2025 19:20:05 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c1:b0:4b:c0:f1:14:33:0d:62:71:87:23:78:89:78:db:c4:62:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:20:05 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:6c:43:ac:5c:a4:ef:1e:cd:21:19:ca:26:
d1:51:2a:12:5f:eb:76:b1:97:18:65:49:89:a4:5c:
01:b8:5d:39:6b:83:12:05:2e:ff:69:72:6f:b8:6a:
8c:86:ad:ea:07:e8:67:ed:7e:39:40:0a:e3:d4:59:
47:31:03:5e:e0:de:85:28:22:25:01:fa:e8:6b:bf:
4a:d6:02:45:33:47:36:37:e1:ce:f2:8e:93:94:1c:
eb:d2:9d:d6:5b:eb:91:e7:a9:0f:15:52:08:71:21:
66:19:48:f7:b2:6a:83:d4:0e:ec:20:f6:09:1e:c5:
62:35:fd:6b:af:ae:f3:ff:4a:ee:8a:f2:1d:e6:a4:
b1:d3:29:5e:04:8c:fb:e6:ff:90:32:d2:c4:2c:f1:
28:e4:1d:92:fd:f3:bf:be:cf:fa:ea:eb:d6:1d:88:
f5:49:0d:c8:b8:cd:9b:27:91:1b:e6:24:80:d2:29:
20:be:b3:17:8f:2a:7b:f9:51:9c:21:58:f0:e2:50:
f2:ab:3d:b3:38:24:38:f2:24:3d:97:b2:b1:b9:87:
01:45:ba:04:f6:e0:2c:c5:b3:83:51:b8:16:4c:11:
82:bb:22:63:55:e8:be:13:1f:68:32:31:fd:b7:10:
57:e1:49:06:43:90:82:0c:42:7b:27:c9:9e:a5:85:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:63:27:68:D0:64:8F:4E:86:9B:BC:EC:2F:A6:88:89:07:81:6E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4c5783ee-ddea-4cae-b6f4-3d26d328b36c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
84:50:4d:23:33:e2:f4:d8:8f:ae:ac:07:a5:26:2e:0c:18:a1:
7c:d5:6c:45:0a:e5:5a:ca:f6:9a:5b:26:a7:8a:6b:ae:3e:87:
23:b7:b9:a7:c4:ad:b2:59:8a:82:46:a1:f5:31:1a:4b:08:5d:
dd:59:26:f9:c8:0c:fe:75:aa:9a:d9:53:4c:88:72:1e:2d:d5:
f2:88:b8:8e:a0:43:53:2a:01:a5:06:f5:37:bd:66:9c:0b:b1:
4a:83:70:60:c5:6b:bb:50:be:fe:c1:47:a8:df:20:52:c0:84:
51:c8:df:72:e1:0a:1b:66:ac:d0:6d:ce:39:26:06:9f:dc:b2:
0d:9b:c0:57:6e:2e:8f:8a:8a:db:6d:cf:38:d2:90:13:38:65:
19:1c:ac:67:6e:7f:84:ab:c7:fc:bf:51:6a:67:4a:0a:2a:a4:
fe:36:a6:2d:0a:95:12:10:98:6d:5d:60:e5:fe:38:79:67:43:
b8:25:5b:7b:ad:05:33:0c:14:86:f9:1f:48:32:ac:a5:55:03:
8a:8b:9a:4c:2d:a9:2a:e4:5d:6f:24:f8:44:ac:5f:7f:dd:78:
51:0f:f2:f0:2b:e6:95:13:b9:be:4a:a0:1b:65:73:b1:73:8f:
1d:21:ad:ce:d3:a9:dc:a2:6b:ae:0f:07:99:e2:f3:44:ea:cf:
a8:9d:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:25:10 2025 by rpki-client