Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
File: 4cf83881-74f7-4033-977b-362e08e8d6d2.roa (raw, json)
Hash identifier: 1NQ7QwJfnOztwJAV3tgthGJWbie7M92/gXGtRiQPtC8=
Subject key identifier: 4B:1E:79:D1:78:A1:06:2D:C5:9D:93:76:32:7B:A3:64:C0:7F:22:D8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7C501669EF624526ADF556C40B95247391940C62
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
Signing time: Wed 26 Mar 2025 19:23:24 +0000
ROA not before: Wed 26 Mar 2025 19:23:24 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:50:16:69:ef:62:45:26:ad:f5:56:c4:0b:95:24:73:91:94:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:23:24 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:0e:81:08:b8:81:25:6d:7e:e6:30:0a:fe:
61:9e:59:8a:2b:a0:76:56:9c:6b:f2:fb:f9:97:51:
64:3c:d1:78:a0:2d:df:db:40:76:59:1d:43:54:34:
89:60:22:3d:d5:81:52:df:c7:0f:be:eb:46:93:51:
64:93:e2:38:87:c2:6f:fe:00:2e:cc:15:f4:44:40:
45:7f:a3:17:20:66:55:43:c3:74:55:34:41:d8:c1:
91:e6:10:2f:a0:b2:62:0b:0d:f1:b6:bc:09:35:e3:
ef:87:f9:a9:26:02:bb:67:a8:14:ae:8a:d0:87:c1:
cc:d0:1b:25:c7:80:c9:78:4e:a8:8d:9b:f6:c8:e7:
d3:73:70:c1:6e:7a:14:99:d8:34:df:60:cb:f5:c2:
bf:55:2e:6b:1a:fc:92:7d:9b:a8:50:41:18:c1:f0:
a6:2a:aa:15:a1:a1:8d:c0:45:67:12:c2:ae:ea:0b:
19:8d:f5:f1:ed:54:61:84:5e:fb:40:32:84:45:1e:
01:11:02:20:8c:8d:6e:05:e1:92:b9:fa:41:91:69:
b8:cb:0d:b6:dd:79:fb:e6:5a:36:f9:62:37:b8:5f:
3b:a5:26:4d:a1:19:36:4a:82:5a:d5:f4:36:61:9b:
4b:6d:1c:27:fd:ea:89:88:f1:0c:b8:f9:c1:30:72:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1E:79:D1:78:A1:06:2D:C5:9D:93:76:32:7B:A3:64:C0:7F:22:D8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cf83881-74f7-4033-977b-362e08e8d6d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:840::/48
Signature Algorithm: sha256WithRSAEncryption
c8:0e:0a:99:e1:5a:b8:85:91:74:29:89:9a:6a:e9:40:8b:13:
32:ce:f3:23:23:1c:6c:9b:69:64:ca:8f:97:df:85:4d:e1:a5:
93:29:ab:bb:f6:c4:27:0f:b0:b4:db:d8:c8:83:e7:83:68:55:
7d:28:03:db:8a:0d:3e:33:dc:45:36:c6:db:39:05:b6:54:7a:
82:4e:ab:a2:68:27:a9:5c:d4:97:91:a6:f5:ef:4a:81:10:fe:
71:44:ab:da:40:ba:ad:f5:09:e4:e5:00:54:df:28:cb:37:00:
69:9f:11:f6:cc:c5:e3:72:80:5a:d8:d9:eb:85:39:0e:57:6b:
5e:30:c0:6c:c0:3f:42:89:d8:ff:cc:96:56:1a:0e:6e:54:17:
70:a5:2c:83:01:20:76:61:57:72:40:44:2b:b9:e9:d0:a9:7e:
15:0e:f7:b1:97:78:56:0f:59:2b:95:b3:26:1c:bf:9b:e2:a1:
66:4a:ef:1e:4c:22:80:f1:66:7b:e3:30:29:9b:e3:35:ed:94:
ea:86:36:77:e7:1c:c0:0f:da:bc:ac:24:f0:fb:0e:99:b4:20:
8f:94:c4:78:ef:91:24:f2:ed:8e:e9:9a:34:fa:2a:7d:09:fb:
dd:43:c9:59:df:1f:b1:28:14:67:7d:c5:14:dc:81:1c:5d:19:
a3:5a:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:32 2025 by rpki-client