Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
File: 70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa (raw, json)
Hash identifier: VR7HNxccZHkoyFX3fsFuvieVaoM406XLqrE4FBp7/sQ=
Subject key identifier: A5:F0:41:32:A0:E7:B3:DC:FD:12:47:39:D6:DE:E0:14:47:21:FA:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D6D3BB068AF5CDEB1DEC014DB88EF967BE4FF43
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
Signing time: Mon 31 Mar 2025 20:40:51 +0000
ROA not before: Mon 31 Mar 2025 20:40:51 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6d:3b:b0:68:af:5c:de:b1:de:c0:14:db:88:ef:96:7b:e4:ff:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:40:51 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=099e486848860f4126541573374e521eab83081b18bcc7edc6397deffafd6f9f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:3a:42:2b:e6:dc:95:2a:d8:0b:0a:1c:0e:
19:77:ba:91:8f:90:5d:e7:f6:f9:31:2a:77:c9:01:
9a:00:4c:a2:98:f1:cf:a7:f3:e8:e9:02:87:8a:78:
ec:61:57:8d:25:d4:6d:dd:2f:34:6d:ea:33:4f:9f:
c9:8b:6e:ef:f5:72:c1:11:d3:83:b8:64:0f:a5:aa:
62:22:40:fb:32:85:0f:0d:46:f6:d2:79:e5:ce:54:
b5:63:17:53:0f:36:b9:3d:6f:dd:96:66:19:23:91:
e0:db:6d:1a:3e:28:3f:c2:93:fa:e3:4e:49:ac:e2:
da:ea:e3:b9:5f:58:40:b9:d8:86:a5:99:dd:b8:37:
d6:8f:fc:32:74:98:8f:a4:43:b1:6b:2e:8c:5a:21:
e5:93:9e:f9:52:1b:f4:30:ba:ed:95:d1:a0:3b:0f:
1c:05:a4:1c:dd:59:00:f1:54:08:31:f7:32:a8:e8:
8e:7a:b7:ff:bb:4a:a8:d2:af:fa:1d:8f:8f:6f:c8:
ad:9e:2b:bd:12:f6:37:80:47:f7:54:02:c5:2b:fa:
dc:38:c3:5f:f6:83:57:47:6e:90:ca:b5:70:5b:e0:
74:51:11:28:10:f1:1e:a3:06:0c:61:b6:6b:af:92:
f8:42:71:92:5a:85:88:a9:85:70:60:e8:5f:b6:99:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F0:41:32:A0:E7:B3:DC:FD:12:47:39:D6:DE:E0:14:47:21:FA:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:5000::/40
Signature Algorithm: sha256WithRSAEncryption
04:bd:7b:3d:b0:09:e7:d6:23:49:4a:d4:09:b0:0a:60:45:ee:
d0:a8:82:3a:2e:97:0c:2c:12:8e:5c:bd:0f:34:54:5d:82:b8:
fd:c1:04:08:c3:58:90:01:70:b7:b4:4e:a5:01:0c:b6:8e:51:
e4:07:02:e2:0c:62:81:a7:85:01:7d:7a:4b:cc:d2:07:59:cf:
73:43:50:81:1a:01:16:79:77:39:10:35:77:48:61:d1:63:88:
e9:74:0d:2f:3b:65:93:bd:a6:75:48:5e:ea:b9:9b:78:bf:4a:
de:af:57:d1:19:4e:b5:df:c5:da:11:d5:2d:b3:c5:26:83:76:
05:09:70:92:85:3a:6b:8d:8e:57:07:f4:d5:91:a4:74:28:96:
0e:15:a1:42:8d:b4:d6:f8:0f:75:b8:01:b9:67:12:aa:9b:34:
3e:f1:d8:c2:64:8d:41:04:79:77:d0:0e:bb:90:e5:4f:c0:06:
99:cf:ac:c7:37:19:7b:5b:a7:51:f8:c4:39:05:7d:47:f2:5c:
c1:1a:f9:37:06:3a:44:f3:a4:1a:03:89:8b:f5:b8:3f:a9:5e:
fb:3c:c6:6d:30:5b:97:7e:14:ce:b3:e1:c5:37:41:ec:26:6e:
51:fe:8f:6d:7f:0f:64:80:44:ca:54:e2:8f:c1:44:f1:2c:4e:
6d:b5:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:54 2025 by rpki-client