Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ddb8169-a0ba-4989-b488-a344085c56c9.roa
File: 6ddb8169-a0ba-4989-b488-a344085c56c9.roa (raw, json)
Hash identifier: i7Z0N3LdJfJAUMIjX1YXBvOATqONDrtuNTOQulWjL1c=
Subject key identifier: B4:5C:5C:0C:7C:B0:5F:0B:E5:E1:8E:4F:ED:F8:68:70:D4:97:0F:93
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 662F3275D2AFD19EAB7AFF55B013B4B12A7BB1FE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ddb8169-a0ba-4989-b488-a344085c56c9.roa
Signing time: Mon 31 Mar 2025 20:51:42 +0000
ROA not before: Mon 31 Mar 2025 20:51:42 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2f:32:75:d2:af:d1:9e:ab:7a:ff:55:b0:13:b4:b1:2a:7b:b1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:51:42 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:e1:62:cd:51:a6:00:e1:87:39:07:f5:05:
cf:0f:8f:bb:98:1d:90:69:28:75:d1:9c:33:1d:c0:
d7:01:15:c0:34:86:75:4f:ac:f8:08:20:b3:b3:5a:
c6:5b:4b:a2:30:28:4a:fa:3f:8b:7e:18:4f:62:14:
fb:3b:76:4f:a8:80:99:e9:3c:1a:e2:21:d5:47:46:
a7:5f:d9:ce:76:be:c6:8f:46:c7:f4:6d:23:68:e5:
61:ae:ff:62:63:e4:07:b4:12:c3:ee:98:89:51:e2:
3e:08:3d:07:8c:0c:d7:23:ae:92:ed:4f:d8:4b:2b:
d4:f5:b2:54:16:05:22:d4:46:88:0d:51:58:75:57:
86:6c:5a:39:e5:70:69:63:f5:92:51:fe:97:e0:9c:
85:76:75:ae:8f:f0:05:70:8c:98:ff:b1:90:4f:4f:
42:b8:e4:e6:de:58:36:2a:cd:fa:fc:b5:65:b6:1c:
e1:87:59:25:81:4b:60:53:bc:ca:28:77:b9:04:09:
f0:7c:62:ac:35:72:26:1e:91:4d:89:1a:6e:87:6e:
49:24:73:6e:c3:ce:f4:88:b7:33:44:4e:df:4a:91:
4e:54:08:9b:81:9a:83:da:2e:f2:f5:ee:b4:2a:c0:
9c:bd:11:28:c3:e9:f5:02:a5:49:c8:5e:af:d9:1c:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:5C:0C:7C:B0:5F:0B:E5:E1:8E:4F:ED:F8:68:70:D4:97:0F:93
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ddb8169-a0ba-4989-b488-a344085c56c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:c000::/40
Signature Algorithm: sha256WithRSAEncryption
35:65:0c:62:e9:f7:3a:b4:56:f7:5e:ef:17:1e:55:8d:3e:5d:
58:a9:51:e1:ab:fa:4d:e3:6d:54:ac:89:ec:9c:a8:ff:61:70:
b5:4b:f1:2b:ed:f5:8f:16:86:75:9e:5a:c5:13:7d:85:66:10:
66:7d:69:b9:8a:0c:e6:2f:03:fd:a8:a2:22:35:dc:3b:b3:8e:
62:f9:e0:de:13:12:4e:0c:9f:73:1c:4d:47:2f:a3:a3:b8:4d:
be:a9:ae:19:72:b4:c9:05:ea:8b:c5:e4:7b:0b:8d:b5:24:ec:
18:9c:51:da:ae:cb:2a:32:13:52:e1:a7:6e:8e:23:ce:a4:23:
b2:54:ca:50:e3:20:24:74:fd:11:97:9d:5c:ed:ce:8e:74:44:
14:88:70:02:b3:9a:00:eb:70:72:e9:24:ae:28:6d:28:bd:fe:
9c:56:71:1e:70:fb:37:59:90:a6:3c:47:3d:c1:71:2d:dd:13:
e2:4b:0a:3b:0f:cc:11:e1:99:cf:10:35:90:33:f5:8f:49:3a:
9b:d6:69:c3:a0:15:ad:d0:b4:3b:48:36:fc:a3:6f:d0:aa:09:
bd:47:a5:ad:1a:23:62:05:45:a2:b0:ba:30:f5:0b:b9:50:dd:
63:df:96:65:5c:1d:0a:fd:75:74:3f:80:18:9c:e8:b1:57:01:
43:b0:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:08 2025 by rpki-client