Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
File: 51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa (raw, json)
Hash identifier: r18iVPFOdjwtVFCpmF9gyflwukERhJPud6li/+AYoas=
Subject key identifier: 02:B4:4C:06:EE:1E:77:D8:DC:4A:D1:27:3A:5D:1A:9F:5E:2B:2E:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A059D4B142CA18E212FDDA52654C737939634E5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
Signing time: Mon 31 Mar 2025 19:51:26 +0000
ROA not before: Mon 31 Mar 2025 19:51:26 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:80d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:05:9d:4b:14:2c:a1:8e:21:2f:dd:a5:26:54:c7:37:93:96:34:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:51:26 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:a4:2d:3f:dc:01:1e:28:03:62:c9:cc:92:
2a:37:49:33:5d:f7:e0:ea:21:92:fe:38:c4:65:68:
ed:67:e4:a3:a4:25:a8:2a:e2:6c:52:af:1b:e8:75:
9c:fa:e8:7b:c5:f1:90:b8:fe:08:56:75:ff:29:2d:
9c:a0:be:aa:a7:96:a3:ca:17:11:e1:12:2a:b3:b3:
64:9a:2e:e0:dd:65:c5:e8:5c:74:89:09:98:82:22:
57:9e:f0:fe:e6:c8:a6:d6:c8:07:dd:1f:72:9f:c4:
d6:c3:cb:c7:c2:9a:96:75:a5:ec:10:83:2a:06:ef:
71:26:25:58:3e:6e:ef:16:35:9c:d3:b8:34:74:e8:
5d:15:bd:6a:4a:1d:c5:20:cd:a8:22:8b:6d:b8:b3:
a6:fc:33:1c:c8:df:ea:85:57:1b:86:2b:c4:81:e5:
b4:f8:23:6d:02:74:66:79:cd:0d:65:a6:3b:06:00:
e4:3a:af:b0:d7:bc:f8:2f:5b:d1:27:cb:76:fc:0c:
65:d4:c0:6f:21:05:d3:ac:25:43:11:5e:e3:4a:de:
20:be:64:36:a0:d8:26:0c:f2:d1:78:76:fc:12:f1:
72:3b:92:31:35:a2:65:15:97:83:fe:08:8a:52:38:
88:75:7c:8e:93:e4:fb:3e:da:c4:9d:0f:6f:07:61:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:4C:06:EE:1E:77:D8:DC:4A:D1:27:3A:5D:1A:9F:5E:2B:2E:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/51a1ea71-75af-4bc7-8c05-1b2e3a562792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:80d0::/48
Signature Algorithm: sha256WithRSAEncryption
48:57:e0:b0:a6:1f:fa:d4:89:bb:33:77:2f:e8:03:d7:8c:1a:
c3:58:c1:75:f8:73:d3:ca:dc:c7:49:c6:ff:cf:33:ee:2f:7f:
6b:89:62:29:a5:9e:57:89:87:65:0c:d0:02:97:b5:98:b9:b9:
aa:54:ba:65:77:fa:8a:39:87:25:2f:a4:5b:12:64:ed:63:1c:
2e:c2:93:e9:15:cc:31:b5:41:0c:b7:6c:0e:66:ed:02:cc:7e:
52:c4:9c:18:98:19:5a:27:c4:d4:30:e9:79:2f:8a:d7:f7:98:
9e:d3:cc:1e:9b:3e:45:66:06:7f:25:af:4b:44:ce:9c:f1:6d:
59:e3:b4:f6:66:af:ca:9d:54:d9:09:b7:7f:4d:32:80:3b:97:
65:55:90:10:c8:db:34:53:8c:eb:5b:d2:4d:75:af:21:e5:cf:
13:b4:64:68:26:b1:0b:79:b1:93:e8:94:b5:06:f9:df:91:d7:
d7:a6:18:8c:7d:9f:74:42:56:7e:16:50:e9:99:fb:79:8a:74:
4f:b0:f9:59:c3:f1:9d:4b:f4:d9:26:b3:f8:4d:49:a9:31:4f:
9f:a0:44:8d:b7:3f:9f:37:f6:8e:32:2c:9a:55:5a:94:ff:1b:
75:69:21:bb:04:0d:98:18:62:d4:ec:ab:45:a2:2e:61:54:df:
73:8f:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:42 2025 by rpki-client