Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e276817-fa44-4713-a36e-7aa0cf282f8a.roa
File: 6e276817-fa44-4713-a36e-7aa0cf282f8a.roa (raw, json)
Hash identifier: a6EFlZFrewNynsrFcLYxcFu8PEUhHlIKUTDhnFjNYV4=
Subject key identifier: 16:2F:94:9A:DE:F1:90:3E:81:36:2B:CB:1B:2F:4B:FE:CD:58:F8:3D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 707286D7D4D5BAC76DA0019CD246A79C87E47A2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e276817-fa44-4713-a36e-7aa0cf282f8a.roa
Signing time: Mon 31 Mar 2025 20:21:50 +0000
ROA not before: Mon 31 Mar 2025 20:21:50 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:72:86:d7:d4:d5:ba:c7:6d:a0:01:9c:d2:46:a7:9c:87:e4:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:21:50 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:26:b7:eb:bb:50:27:76:3d:40:23:e5:17:95:
78:5e:af:0f:fa:22:d3:09:83:6d:c4:c4:90:95:8b:
0e:5e:44:60:38:df:79:18:91:a9:6a:3e:fa:71:c8:
7b:00:ec:2f:85:ed:ef:ac:32:d2:92:eb:4d:0f:15:
0b:4b:15:b4:5e:59:79:dd:43:d2:c6:4f:29:4a:1f:
85:25:5a:18:5a:4b:a6:45:fe:c7:45:00:3e:14:c9:
47:0f:40:a0:a4:b2:f8:19:dd:c5:c9:26:b6:f5:92:
f8:25:20:38:e6:2e:0c:41:ff:09:c6:59:29:5f:fc:
bb:be:22:de:fd:22:c5:2a:96:b8:50:10:9c:29:bc:
07:dd:0a:6e:10:5d:34:06:c1:fc:0d:29:00:bf:f5:
32:fd:79:ea:93:4d:4e:a3:e4:b0:a5:39:e8:f5:54:
05:f9:18:c8:90:8d:95:2e:67:12:70:f3:67:5a:7c:
cd:5e:0e:d7:00:59:84:94:92:2e:a4:ef:e6:9a:08:
04:30:e7:d5:76:a3:2c:83:2d:96:c4:30:4b:e8:66:
4a:a1:e0:dc:7e:1f:fd:ab:6b:19:79:4b:df:ca:86:
01:b0:c2:d0:c7:ec:3f:ae:2f:44:f7:65:c0:2f:4d:
6c:34:cb:87:b4:f4:c5:b4:f3:9a:d5:48:55:51:3d:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:94:9A:DE:F1:90:3E:81:36:2B:CB:1B:2F:4B:FE:CD:58:F8:3D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6e276817-fa44-4713-a36e-7aa0cf282f8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:9000::/40
Signature Algorithm: sha256WithRSAEncryption
13:dc:ea:db:8d:34:93:07:2d:66:72:2c:8b:fb:e0:6d:0f:28:
da:b3:7a:fb:ae:6e:0f:6b:6e:c5:c0:b5:0b:ab:f0:31:2e:51:
58:d1:08:32:52:0e:6d:a1:4d:12:fb:66:15:20:e7:fa:cb:37:
51:3c:f4:7a:97:ae:c2:78:65:fa:f9:35:0a:2a:3a:f2:cd:f2:
78:15:d8:0d:73:0c:35:62:63:9e:02:8d:db:cc:92:5e:0c:bd:
d9:e0:3f:4a:57:a2:57:21:02:1c:09:cb:4a:12:0b:42:03:23:
84:10:41:1f:f2:2f:a3:8f:7b:4d:dd:08:c0:00:eb:5d:5e:e7:
e5:36:20:97:e2:22:d5:a8:ca:02:fb:f8:01:87:ac:11:61:c7:
a8:11:88:3c:5d:2d:44:4c:5f:c0:3c:73:fa:46:b8:67:68:f7:
91:45:79:67:74:8a:8f:58:51:10:5a:93:1c:d4:57:cb:c4:d7:
c0:76:43:1a:71:0e:09:9c:de:ac:f8:80:86:39:c1:f2:b4:51:
08:8e:b2:85:e3:c9:1f:09:05:da:d8:4b:87:72:47:ce:62:84:
79:0c:74:9f:28:4d:1a:f3:23:10:1b:48:09:84:66:d4:4b:0a:
2e:cf:31:b2:96:88:27:d1:c1:d7:6c:fc:50:ce:aa:27:08:2b:
91:cd:30:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:25 2025 by rpki-client