Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69802baa-274e-464f-9528-c2e45ae56d0d.roa
File: 69802baa-274e-464f-9528-c2e45ae56d0d.roa (raw, json)
Hash identifier: KcqVrksGBT9wmtzA4YW2VKUQ4Zn6mqufZdrakn370Hk=
Subject key identifier: EB:C3:C4:98:7F:8F:F4:70:49:CD:2E:D7:30:86:77:58:DC:C8:D8:29
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E072CDA33BC19458F49670ABE1B50B7BC857597
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69802baa-274e-464f-9528-c2e45ae56d0d.roa
Signing time: Mon 31 Mar 2025 19:00:58 +0000
ROA not before: Mon 31 Mar 2025 19:00:58 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:07:2c:da:33:bc:19:45:8f:49:67:0a:be:1b:50:b7:bc:85:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:00:58 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:62:b5:88:6e:c5:8f:26:5d:5f:8b:2a:22:
f4:10:b8:b1:5a:8b:fd:0e:a6:e9:5a:8a:c5:5a:3f:
14:3b:2b:67:8b:68:0c:06:e4:cc:46:ff:8e:44:9b:
13:14:fa:18:ca:1a:9b:b3:c1:46:98:7e:dc:6d:5f:
e7:91:42:31:24:91:38:7a:04:62:b3:14:3a:23:c6:
a8:1f:7e:49:7e:ea:b8:cc:9a:3f:7d:64:04:85:e8:
99:58:d0:86:0a:88:10:28:de:53:e8:e9:e4:86:c6:
d3:35:b9:19:05:4a:96:b8:fd:42:ea:cd:47:58:73:
5a:cd:c9:a0:63:e4:8d:42:70:0e:32:8a:b0:36:83:
fc:f8:57:f5:84:a2:13:7d:dd:56:58:01:84:60:73:
23:5a:a8:fb:6b:53:98:c3:06:a5:a7:c9:5e:d5:92:
8a:cb:88:f2:d2:bf:24:b5:32:64:96:97:91:fa:50:
77:b6:3c:90:44:95:d9:03:ad:52:c6:a7:88:60:33:
74:47:35:09:03:74:48:31:44:50:b0:dc:00:4a:e0:
7b:6d:c6:b4:d2:63:f6:47:cd:fc:82:80:9a:65:e7:
c2:19:1c:dd:19:5a:4c:5f:da:87:2a:39:82:c2:84:
94:41:59:8f:f5:8b:f0:e4:19:a7:5f:f0:13:f4:38:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C3:C4:98:7F:8F:F4:70:49:CD:2E:D7:30:86:77:58:DC:C8:D8:29
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/69802baa-274e-464f-9528-c2e45ae56d0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e040::/48
Signature Algorithm: sha256WithRSAEncryption
10:5c:7d:aa:f3:fd:af:d9:b2:ab:25:e5:94:b9:b6:ed:7e:97:
a9:0a:7b:fa:9e:66:01:8e:c1:76:d2:15:80:3e:40:5c:99:45:
aa:7d:17:2b:f3:e2:6d:7d:50:73:bd:76:e0:e3:93:4a:5e:2b:
08:16:79:19:1d:74:38:74:73:be:82:cb:b1:ee:4a:07:fb:cd:
51:86:c4:de:16:92:c4:83:aa:3d:15:00:0f:8a:ab:73:73:4f:
28:80:23:74:3b:a4:30:46:c2:11:93:35:ba:f2:31:70:8d:e0:
fc:f8:2c:b1:9f:f2:3c:1d:7f:0e:89:86:68:4f:f0:d2:cc:e1:
75:0c:18:0b:de:c1:f3:cd:83:ae:f3:ce:19:7f:3a:19:79:6c:
02:32:bc:34:cb:18:95:0d:b1:d1:6d:16:1a:1b:53:ed:ea:82:
9c:0d:6b:49:e1:1e:c7:3e:81:97:66:0e:cd:19:05:43:b1:e0:
e2:b0:f5:c6:8e:b8:54:a3:4e:d1:2f:ce:09:27:97:63:df:c2:
c3:32:b2:b4:92:23:c8:5f:d8:b6:43:c3:57:55:6d:a3:09:ae:
a0:b1:0f:28:ab:67:9f:f9:89:cb:56:21:4e:84:91:0c:27:09:
1f:de:3b:12:71:c9:d8:65:3f:86:c4:a8:06:3c:6a:1a:bc:15:
42:86:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:08 2025 by rpki-client