Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/63af811a-6e40-455f-b7a8-223951036a11.roa
File: 63af811a-6e40-455f-b7a8-223951036a11.roa (raw, json)
Hash identifier: gHgP3/iO5M/VLItCcQgzfOOFIiWxavpNevqaMd/1uEI=
Subject key identifier: 40:7D:5D:9C:F6:42:20:41:26:A8:DB:47:DD:CB:12:3E:12:A7:0D:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5AEA740F7EE0C046D11C33C34237B1177610D09C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/63af811a-6e40-455f-b7a8-223951036a11.roa
Signing time: Mon 31 Mar 2025 20:00:09 +0000
ROA not before: Mon 31 Mar 2025 20:00:09 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ea:74:0f:7e:e0:c0:46:d1:1c:33:c3:42:37:b1:17:76:10:d0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:00:09 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:d1:52:47:7b:ae:e9:16:d8:c8:37:40:7e:
c3:5e:70:a3:14:00:05:3e:19:54:b8:32:40:9c:94:
25:0a:7d:d1:45:14:9a:bb:79:01:a1:2d:16:db:d8:
fc:a1:16:11:fc:7c:54:ca:34:62:55:e7:67:d5:cd:
26:ac:37:01:0a:93:ae:20:6b:00:fb:88:cd:22:31:
8e:ab:09:1d:b5:b4:30:bd:be:3a:c6:dc:37:55:ae:
c1:dd:a2:3b:93:dd:07:b8:54:45:68:22:0b:17:06:
d2:9c:d2:b3:c4:0e:94:ee:47:47:36:74:ad:2c:72:
49:ba:27:eb:f9:28:31:e3:65:50:14:95:85:7b:bc:
cf:66:86:17:03:6b:03:9d:60:d5:1b:fe:04:23:41:
1c:c1:57:da:fe:91:1c:5f:d9:17:d3:84:7b:fd:af:
38:e6:c9:76:7f:09:b5:ba:19:57:91:60:a9:64:c3:
1e:db:fe:56:e1:36:99:b1:e8:b5:4b:50:be:02:78:
5f:68:00:49:4b:fe:62:ca:ff:15:02:85:7c:e7:d8:
1c:c9:6c:5c:bf:d4:a7:92:03:31:75:5f:cf:65:6a:
b1:44:69:aa:bb:7e:3c:3e:97:89:42:8f:2a:8f:90:
6b:cb:e9:3e:d5:6c:a4:4c:f6:64:bb:41:d3:74:bb:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7D:5D:9C:F6:42:20:41:26:A8:DB:47:DD:CB:12:3E:12:A7:0D:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/63af811a-6e40-455f-b7a8-223951036a11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:9000::/40
Signature Algorithm: sha256WithRSAEncryption
53:dc:3f:51:fc:5d:ac:f3:56:73:28:99:63:3d:12:b9:d2:9b:
03:4d:d5:e1:97:c6:40:c9:b7:81:25:d4:e4:8b:c6:2e:c8:27:
25:4a:c9:cd:54:c5:92:1b:46:69:21:36:57:07:b2:a7:30:9c:
3c:8e:ce:b2:81:e5:76:62:b0:1e:6d:c0:1a:3b:01:c1:55:e5:
92:e9:be:ae:57:0c:36:aa:5a:cb:89:2d:1d:ce:d9:e1:e1:a4:
8d:0b:a0:70:2f:bf:7b:16:3c:c1:d0:77:42:47:e3:05:d2:db:
c2:bd:8e:a4:0c:6c:6f:4f:ca:8d:fa:c4:6e:87:af:f6:70:fd:
0b:88:27:68:c8:b8:cc:5a:38:82:37:b3:ab:f3:85:16:ad:91:
6a:0d:99:55:2c:45:fc:7a:3b:e5:c8:7b:77:d0:32:53:a3:95:
cc:23:77:d0:8d:0d:06:8a:dd:06:66:60:79:16:24:6a:96:61:
d6:b7:70:1a:38:25:c6:16:54:51:5a:89:d3:bd:73:20:2f:1c:
66:c5:59:f5:66:03:95:b9:c1:e3:1a:be:06:0a:9a:81:69:34:
87:17:f6:a6:4c:b5:0e:2b:9f:32:2f:ed:d3:c2:5a:ce:f7:81:
8a:e3:13:71:37:22:04:4b:0c:e8:91:3f:c9:ae:ea:b9:3c:4b:
12:3d:df:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:00 2025 by rpki-client