Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
File: 4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa (raw, json)
Hash identifier: 3PbqNnDBdbbytOu9IKlXzSKoxF39CskzmUQZY7HyTYI=
Subject key identifier: 7A:ED:D6:61:CF:71:A9:CD:BD:9D:91:8C:42:73:D4:13:50:57:DF:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 44FC0566987AB397EE43CB5C916195B95133DB74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
Signing time: Tue 01 Apr 2025 15:00:26 +0000
ROA not before: Tue 01 Apr 2025 15:00:26 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fc:05:66:98:7a:b3:97:ee:43:cb:5c:91:61:95:b9:51:33:db:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:00:26 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:52:74:d7:3f:99:a1:4d:ad:a6:a2:40:9f:
aa:46:d1:34:47:df:49:d8:c9:c8:ff:ee:f2:c6:fa:
cd:6a:75:37:03:a3:a7:5f:cb:e2:33:9b:62:0c:55:
9c:36:31:08:e3:13:81:85:fd:45:2d:48:1f:7d:ff:
1e:b3:59:51:7f:16:1d:f3:aa:75:d8:aa:54:0b:0d:
3a:a6:75:79:67:70:c6:7e:3a:c2:c2:31:1f:47:32:
0a:7c:44:f5:a8:a7:55:35:30:ca:04:a2:87:2e:11:
83:67:67:a9:95:ba:32:99:b1:4f:83:e0:1d:79:6d:
72:34:07:0f:e3:e9:e7:90:18:1a:2e:fc:81:76:1a:
30:d0:46:4c:72:f7:1c:e9:25:92:86:6e:4c:c2:4b:
3b:53:27:3b:79:4e:6b:db:42:6d:4f:88:0f:56:dc:
f5:ca:59:f1:bb:07:dc:f0:bb:01:b5:31:a9:5c:3c:
ca:cd:6a:6c:07:8b:da:42:27:9f:21:a8:7e:a4:e4:
e5:d4:09:2e:db:6f:d1:58:7a:a5:36:85:3f:30:6d:
7a:63:f1:9d:71:63:39:80:18:a6:2e:d0:df:52:71:
58:2f:79:b4:79:85:02:99:dd:49:b3:ac:bf:75:e4:
b1:e0:a1:34:8e:d3:23:d5:4d:b0:aa:8f:54:8a:18:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:ED:D6:61:CF:71:A9:CD:BD:9D:91:8C:42:73:D4:13:50:57:DF:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cc30fcc-ec23-4e26-be16-37db80dbf3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:36:a0:bf:4a:f1:1a:14:1c:58:fe:52:e0:a6:f8:45:b5:cb:
58:bd:ea:02:61:c1:b3:7b:f8:70:a9:73:31:39:3b:ea:d2:fe:
8d:ef:62:aa:00:99:02:eb:37:4b:b1:6e:29:23:f6:6d:72:2d:
00:05:70:14:09:1c:bf:18:18:e1:78:e3:6f:d3:67:8e:4d:bb:
f7:67:9c:c8:58:05:67:f0:31:50:f5:ca:86:7d:fc:73:7b:9c:
50:6e:b5:c4:99:0d:b9:17:d8:95:5e:c8:e9:8c:78:d5:80:35:
b1:e6:a1:6b:45:51:b6:f2:f5:41:01:31:ce:0f:da:df:d6:59:
e7:ef:d5:10:c8:6a:bd:d4:4a:a7:71:8b:a2:6c:73:24:3a:d2:
ac:a9:64:bc:30:f3:fb:0f:9d:db:42:33:15:6c:d9:b6:c7:20:
18:05:43:05:18:1e:e8:61:b6:fd:eb:ac:5c:75:37:91:33:55:
8b:21:e5:e5:66:11:ae:8d:58:6a:d0:1a:88:64:e3:f9:22:0a:
5c:b2:d7:5c:50:e1:c6:52:d7:bf:73:94:ca:a9:16:f4:63:66:
5d:a2:77:15:63:83:da:14:c1:fc:c5:c7:02:ef:eb:18:1f:0a:
12:dd:7e:c6:18:c3:77:b5:92:76:aa:21:62:83:28:99:43:52:
88:22:4a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:25 2025 by rpki-client