Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File: 4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier: irgLgRCL427sVzG0ppVBMrruax9oWUdAm/JO64iKA6g=
Subject key identifier: 80:A6:D0:9D:E1:8B:25:ED:33:26:B2:35:42:D6:D8:AC:40:B9:90:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6953C71F7DAB1A4E484C46403608B8FEE478773B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time: Mon 31 Mar 2025 20:01:17 +0000
ROA not before: Mon 31 Mar 2025 20:01:17 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:53:c7:1f:7d:ab:1a:4e:48:4c:46:40:36:08:b8:fe:e4:78:77:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:01:17 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:27:8d:48:de:a6:a1:b0:6e:bb:3f:bf:0d:
f5:b9:bd:90:ca:52:ff:66:a9:7e:4b:e5:e2:1e:c6:
06:c7:55:76:98:4f:00:0d:0b:40:a5:fd:81:db:59:
f5:31:7d:c1:b8:4e:97:3c:ca:67:fc:31:d8:12:23:
a3:53:1a:89:ff:e6:39:df:5a:43:6c:56:44:30:e6:
fd:00:96:37:f9:13:91:df:96:9a:3e:82:21:4f:26:
79:af:3a:00:a1:c3:32:2e:04:fe:cf:d7:f5:66:43:
b0:1d:f5:05:69:a5:90:d2:a2:fa:ff:85:d8:a1:64:
6a:2b:7f:cd:45:0b:bf:a8:02:fe:04:1d:fd:d6:55:
93:f8:57:7b:af:62:7c:7d:df:4e:32:ad:4b:41:65:
f0:77:e2:b5:e8:bb:84:6f:34:cd:4d:ae:1f:2f:43:
df:2c:ed:bd:cf:67:34:e7:05:fd:9d:3d:b9:41:3c:
67:ed:a5:d5:dc:f9:6c:72:ff:de:f3:42:7f:27:87:
07:7e:ff:38:85:c2:82:02:97:a9:b8:c2:1d:17:d9:
51:a3:f3:f6:65:30:35:c9:41:17:1e:51:26:b5:54:
b2:db:e6:e1:4b:ad:2b:b3:01:53:81:2f:31:bb:dd:
7e:da:0b:cb:88:e8:a2:68:27:67:ad:09:70:70:b0:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A6:D0:9D:E1:8B:25:ED:33:26:B2:35:42:D6:D8:AC:40:B9:90:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5080::/48
Signature Algorithm: sha256WithRSAEncryption
c3:4a:80:c7:66:2a:8b:1b:b3:cc:94:a7:a7:a2:83:4f:b9:43:
81:6a:e5:99:ec:62:36:75:2d:8a:2b:e6:c3:19:96:d6:ec:85:
e1:00:a7:c3:51:e1:e1:a4:6d:1b:15:59:2f:ad:ac:c9:19:e4:
0e:64:35:ba:14:e1:48:ba:46:c3:1e:7b:d0:33:74:9a:d4:cb:
47:15:1c:af:e7:28:22:ed:5a:97:7d:d7:7e:7e:21:ac:e5:23:
ac:d6:19:90:59:b0:30:a4:df:cd:f1:f0:b9:70:e9:8f:f8:1a:
e0:e4:6e:92:de:16:8d:da:cd:6c:7f:16:75:84:7d:7c:c3:52:
f6:b2:d8:8a:1c:2c:e6:48:28:46:93:b9:04:11:75:39:c1:3b:
a5:d1:e0:58:3b:b5:a3:9b:b5:3a:39:2d:53:6b:c3:a7:6e:ef:
77:1b:f4:e9:a7:cc:ee:64:02:77:66:67:a1:63:db:66:b8:8b:
e5:07:34:cd:6d:44:f7:1f:61:1a:d9:c1:bd:35:0a:8e:f8:4d:
3b:82:ab:7f:be:5e:33:59:c7:0c:1b:f7:69:6e:a3:71:b4:ba:
c5:cb:38:da:e0:06:24:db:88:85:12:47:48:2f:ff:8b:9c:cb:
af:46:ad:90:54:55:97:da:5a:52:f4:71:c6:40:87:b4:94:78:
c4:db:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:23 2025 by rpki-client