Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
File: 67233a4e-590e-4497-a72c-fe940d42b798.roa (raw, json)
Hash identifier: SUGxFyx1ZYtNQseQdVqjyYeSkPwYaczaQHk1u0fIOlc=
Subject key identifier: C6:69:C4:65:17:88:6D:50:92:A9:E9:F8:F9:C9:13:A5:DB:41:2E:BD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 730CFCC2390EBE8D7C4C2DB786006FC3BE8FA453
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
Signing time: Mon 31 Mar 2025 21:21:06 +0000
ROA not before: Mon 31 Mar 2025 21:21:06 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0c:fc:c2:39:0e:be:8d:7c:4c:2d:b7:86:00:6f:c3:be:8f:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:21:06 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:ea:80:ee:82:ed:dc:25:80:85:f7:e6:84:
d6:bf:bf:21:20:25:46:53:fe:8e:7b:be:54:81:9b:
1c:62:c3:30:83:e2:51:d4:7f:11:8b:89:16:93:65:
12:b2:33:1a:e6:c2:7f:09:21:59:27:53:5b:5b:09:
c0:b3:71:f7:fc:7d:e9:b5:cc:7c:8f:66:45:58:ce:
de:ca:5d:5d:87:fd:5f:00:c4:58:c6:51:db:42:2c:
f5:b0:e4:be:b3:07:2c:a2:b1:dc:f7:73:5e:75:37:
4e:69:6d:77:d1:ef:b9:6e:14:da:fa:24:58:b2:22:
54:c0:31:8a:e1:ff:bc:c8:43:8f:2b:a6:64:ae:3a:
e9:29:98:42:ab:68:37:69:1e:b0:5f:7e:72:ee:27:
11:1a:8b:07:c4:45:b4:b2:69:2e:f0:c7:4f:2b:02:
b1:c7:3a:c8:73:bc:49:4a:db:48:de:63:49:2b:50:
fb:bf:17:e4:60:87:af:25:4d:53:20:1e:cb:5e:2f:
60:19:a2:10:ef:a5:2f:a8:91:1f:cd:d0:b3:a5:bb:
d9:fd:41:63:61:90:b7:2d:67:1d:5b:68:c2:ce:e4:
74:22:98:1a:18:d8:1f:d1:de:fb:c7:e7:0c:ba:53:
f3:f5:5a:2e:eb:d7:7a:9b:24:e8:79:62:b0:38:e2:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:69:C4:65:17:88:6D:50:92:A9:E9:F8:F9:C9:13:A5:DB:41:2E:BD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c::/32
Signature Algorithm: sha256WithRSAEncryption
72:32:4c:ce:e3:b5:88:a7:2a:c7:71:d8:99:30:1e:de:61:8d:
3d:63:a6:24:76:df:2c:17:98:b7:32:f0:82:77:41:9b:0d:1c:
16:33:e4:04:5b:71:83:9d:11:69:f9:0e:14:65:e7:c9:a9:51:
63:b0:d4:1e:e6:5f:83:71:50:6c:eb:a9:9b:f8:12:a1:29:43:
83:35:b7:5a:ce:10:0c:05:f1:e8:98:98:65:98:e9:f2:df:ee:
12:46:00:c6:e2:67:14:39:0b:e2:c0:ce:50:af:a8:b2:9f:c5:
9b:37:79:50:c1:b9:2f:54:88:75:29:36:a6:6c:5f:3f:92:6c:
8d:12:bb:ef:d3:dc:ed:f9:a0:e6:02:e8:01:1d:80:25:3e:97:
40:63:f6:51:0e:1e:f5:62:02:3e:95:29:ba:b1:a1:b2:90:8b:
9d:fd:d8:4c:2f:b2:d0:dc:32:4b:61:62:25:19:f9:84:5b:f6:
f5:b0:17:ae:1a:7e:11:81:8b:aa:d5:5f:5f:91:27:5d:68:53:
d7:00:10:e2:bd:4d:0e:b7:87:7b:68:f6:80:cd:4f:66:17:bb:
07:66:83:cb:39:f5:f8:c7:f6:a2:de:ac:64:29:a4:47:aa:83:
0f:60:5e:31:04:4a:f2:2b:1f:b6:8b:5d:fe:cc:80:3e:8f:2f:
30:9f:46:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:03 2025 by rpki-client