Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/548c7809-c2c8-4bf5-a33c-448c8e554df7.roa
File: 548c7809-c2c8-4bf5-a33c-448c8e554df7.roa (raw, json)
Hash identifier: NY7E7uT42QJJa8QR5eKoBNMkHnnxZ4pX0IvvmGWyn+Y=
Subject key identifier: 69:04:90:89:AE:2E:12:92:B5:93:26:4D:E1:62:7D:0A:83:86:40:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 74675686C2A4CF076E014CB6621193325564AD87
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/548c7809-c2c8-4bf5-a33c-448c8e554df7.roa
Signing time: Mon 31 Mar 2025 19:31:03 +0000
ROA not before: Mon 31 Mar 2025 19:31:03 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:67:56:86:c2:a4:cf:07:6e:01:4c:b6:62:11:93:32:55:64:ad:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:31:03 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:88:b0:fd:29:a1:87:ac:de:34:1c:d4:dc:
77:08:05:c9:6e:a7:a6:d3:17:58:9e:65:36:4f:b0:
16:55:2f:77:7b:40:3b:17:1d:51:39:a3:dd:36:3a:
2e:01:63:3c:83:a0:29:d0:b4:66:b6:15:26:11:cd:
f8:bc:23:aa:2b:04:a4:d1:55:91:26:2a:0d:6a:d3:
a8:84:6b:30:25:14:73:ee:38:96:ec:bc:0f:28:ab:
06:04:ab:fb:e4:24:53:48:84:0d:bc:b2:22:e6:97:
d8:9b:61:11:1a:c3:3d:ed:97:c5:c3:30:87:a4:cb:
5b:d3:32:f7:10:a4:9c:a8:3f:00:d3:d6:25:90:31:
4d:09:24:f7:e0:25:87:7b:61:bf:d9:11:7b:94:fc:
d0:bf:c4:f9:a3:36:4d:00:a2:7a:01:41:c6:8b:c2:
b1:1a:43:a3:fd:f6:85:38:15:35:bf:1f:eb:32:6e:
42:f3:82:b2:60:3e:3d:67:b3:b8:a8:24:26:00:cb:
76:65:60:2a:c2:7a:5b:40:a9:4b:27:58:7b:97:d7:
e3:b9:e6:08:4b:09:ab:f9:c0:79:12:f3:2d:ce:c3:
f7:6e:59:de:1f:37:30:a4:0a:a6:2f:14:a9:73:7a:
9a:93:49:13:fb:3e:2f:b0:24:66:da:34:85:ba:03:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:04:90:89:AE:2E:12:92:B5:93:26:4D:E1:62:7D:0A:83:86:40:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/548c7809-c2c8-4bf5-a33c-448c8e554df7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
b0:60:75:07:55:f4:0d:d5:c1:06:b8:ce:2c:ba:a1:09:40:8e:
fa:bd:99:7c:f6:58:d4:69:8f:6a:0e:f1:df:3e:48:d9:d3:f4:
9c:99:a0:54:b9:ea:56:d1:94:1f:36:5a:25:b0:1f:6b:25:56:
cf:2b:47:83:79:70:01:d0:0a:a5:79:40:fb:71:dd:25:ad:4c:
ff:f7:1a:de:78:ec:a8:4f:47:b8:c7:b1:dc:32:35:35:66:c8:
2f:0f:6d:ac:88:30:5b:e5:6e:59:ea:99:f7:95:9c:60:86:8a:
48:4c:90:92:68:67:82:1f:fe:aa:c0:a9:29:4f:c7:c5:a1:01:
24:43:b0:c9:06:ee:9f:da:2f:36:ac:b6:88:d6:66:b8:4e:3a:
b9:ab:dd:d8:16:f8:3d:38:56:37:f6:0d:77:c4:1a:ea:df:55:
16:7a:b7:0e:a2:dd:c2:62:a0:09:28:a9:7f:fd:48:ba:7c:9e:
12:38:29:e6:1c:65:d6:ff:e9:96:a7:61:35:da:cd:3d:4c:31:
16:8c:ee:be:e4:78:18:9d:58:2a:80:b5:f7:cd:bd:ab:23:53:
b1:5d:8e:07:67:47:04:5a:cc:a3:28:70:76:f3:d8:dd:f4:12:
95:ad:9e:92:46:f1:dc:ea:f9:30:60:63:c7:af:b0:8d:c7:de:
41:1d:78:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:58 2025 by rpki-client