Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa
File: 52630693-0f5d-4126-ba07-ad0c0c999660.roa (raw, json)
Hash identifier: gj10cWY59ErtU074xdjka5KvR2hwzB97sZkrfJ2EeiY=
Subject key identifier: C6:44:9D:82:28:BE:53:D1:0F:53:E8:FB:1C:DC:48:5A:9E:12:80:C8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67DC25BF2B767CCACCB65DCEA03CF04DF30CDA83
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa
Signing time: Mon 31 Mar 2025 20:50:53 +0000
ROA not before: Mon 31 Mar 2025 20:50:53 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:dc:25:bf:2b:76:7c:ca:cc:b6:5d:ce:a0:3c:f0:4d:f3:0c:da:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:50:53 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:e0:59:dc:b7:fa:60:fc:1e:82:bc:db:a0:
bf:1a:4c:b0:25:bc:a9:a0:9d:c4:e0:80:71:ae:7c:
30:da:f1:44:24:35:ee:61:99:b4:02:b2:31:73:5c:
fd:08:50:29:cd:91:f3:77:e0:f5:53:60:3d:17:fc:
65:e6:5b:62:dc:42:dc:eb:7f:a0:50:ce:ca:13:e4:
ed:bf:53:d9:0b:ef:9f:76:30:6b:67:83:bd:f8:3f:
99:e7:9b:7c:a5:b7:ca:cb:50:a4:a3:f3:df:cd:a1:
3a:97:2c:63:f0:74:82:b2:86:f1:9d:50:06:ee:34:
d9:29:3b:6f:e6:3b:58:f0:56:e0:82:0a:59:4a:ee:
08:02:9e:b1:0e:34:4d:69:ac:01:96:6e:3f:c3:31:
49:e7:e4:58:ce:a6:3b:8c:69:fa:b2:09:94:df:4d:
b9:81:ec:b5:2f:4d:16:1f:1d:36:5d:52:61:4b:14:
47:79:b4:37:3d:89:06:c7:74:b9:49:cb:91:76:c8:
a8:b0:60:11:75:9e:f5:ac:08:40:c6:b1:31:52:25:
52:ec:33:06:1f:d6:cc:9e:18:1f:36:82:fb:d7:20:
9a:2f:bc:5a:99:36:83:a2:44:8e:4f:37:b6:24:43:
68:26:ca:5c:86:c8:08:3b:02:16:60:e8:95:a7:66:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:9D:82:28:BE:53:D1:0F:53:E8:FB:1C:DC:48:5A:9E:12:80:C8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/52630693-0f5d-4126-ba07-ad0c0c999660.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:e000::/40
Signature Algorithm: sha256WithRSAEncryption
71:43:4c:12:58:92:5c:35:5f:ba:87:ff:6e:d9:4a:2a:72:f4:
4e:b0:a5:5d:27:35:b5:f8:0b:47:95:99:6b:72:a4:c4:d7:d9:
94:0a:32:f1:a7:cc:ca:18:b7:03:81:3c:c3:4b:c6:ff:90:d7:
08:6b:7f:3d:08:9d:59:3d:14:a7:20:a5:07:d6:ce:7d:8a:12:
19:4a:31:15:87:3d:22:e1:01:e5:92:48:00:74:52:57:9e:0c:
fe:81:bc:bf:a5:f1:ed:08:6b:44:31:d3:fb:86:bb:b5:33:4a:
08:be:85:46:5e:1e:24:91:92:fc:72:7b:be:b9:23:68:44:45:
27:39:54:fe:9d:38:83:8a:4a:e1:e9:4d:db:13:ed:be:bd:1e:
78:26:43:7b:5c:a9:c6:1c:2e:4c:3f:88:60:1a:f2:84:78:34:
9c:7d:2f:3c:7b:a4:ec:12:57:f9:c4:ab:6a:78:13:0b:02:d5:
18:4e:7f:2f:af:0f:64:15:32:a5:fd:83:89:15:39:e5:b3:44:
9e:47:9d:e5:17:c4:fd:ff:e4:f0:6d:39:8b:80:bf:c9:08:df:
85:de:f4:6c:71:0e:43:48:64:38:c5:64:64:83:23:30:5a:85:
30:e0:b7:b3:48:bf:cf:0e:4d:cf:bd:3c:d3:3b:a3:99:bd:11:
6d:5a:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:03 2025 by rpki-client