Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
File: 7116ef93-bff5-462e-a725-ae90147ffd39.roa (raw, json)
Hash identifier: 06n6qZyziReqDA0MfBWiJ7oxjcKAc3zAd6YTYf9vj24=
Subject key identifier: 3C:2B:35:21:B1:CC:56:8A:17:A9:2C:E2:CE:04:49:DC:3B:5B:0F:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 06F9770462A7494C4D126B0F333B25C0652DCF69
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
Signing time: Mon 31 Mar 2025 19:41:09 +0000
ROA not before: Mon 31 Mar 2025 19:41:09 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f9:77:04:62:a7:49:4c:4d:12:6b:0f:33:3b:25:c0:65:2d:cf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:41:09 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:c2:47:2b:68:22:19:c9:77:8e:90:1d:b9:
bc:85:67:1a:e9:4b:32:9e:ee:99:d2:d0:63:0d:6a:
03:8e:11:8b:03:c7:15:1a:b3:78:26:3e:81:7c:d8:
cd:fd:a4:f8:6f:07:b9:8a:35:86:16:b7:ea:1f:54:
4e:22:b4:e1:81:34:1c:73:4b:ca:c0:42:ea:a6:3e:
46:e8:5c:23:c1:d9:59:df:b2:5b:e3:83:b4:55:b9:
e3:b1:76:4f:14:60:1b:dc:51:6d:37:06:5e:49:e6:
58:c7:ff:c3:35:ee:9d:c7:9e:93:16:3e:94:b4:39:
83:ca:b5:e4:c7:e4:5a:8b:9e:d7:94:c6:8b:a1:7e:
49:9e:dd:2c:76:bd:e1:43:5f:9d:d4:84:b1:c5:af:
33:07:dd:29:ca:5a:a1:20:80:14:f6:ac:bb:1c:1b:
0b:39:89:99:b1:e5:db:c3:34:d2:ee:e0:34:a3:11:
a8:0a:3d:65:8d:d0:98:b0:ba:fe:8f:d8:e6:75:91:
c1:a0:2b:63:b8:bc:0f:c4:6e:d9:b1:3e:23:3c:a5:
08:53:b1:3f:9d:8c:32:05:1d:dc:60:31:5f:20:1b:
4e:6a:1a:90:1e:b1:9b:e1:97:29:70:7b:3f:ff:25:
fe:a1:ce:17:79:0a:30:27:66:02:45:76:5c:5a:e8:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:35:21:B1:CC:56:8A:17:A9:2C:E2:CE:04:49:DC:3B:5B:0F:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7116ef93-bff5-462e-a725-ae90147ffd39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
10:3a:f1:a4:44:8d:62:f6:a0:81:64:ce:de:64:89:04:17:0e:
7b:05:1a:9f:79:62:8a:b0:e6:ea:0b:f7:0b:5a:2f:af:79:3f:
1e:b2:81:2a:f4:e1:20:00:35:07:9e:9b:c4:a0:17:92:42:16:
2d:f3:f2:ea:1f:1e:0e:6a:e5:97:8f:6c:84:94:d5:45:f0:69:
16:46:67:8d:5d:bc:df:c0:8e:0d:03:fa:24:50:74:a9:34:b6:
9a:98:ae:6f:32:ce:54:87:de:f4:f1:c0:3d:04:27:5b:dd:90:
26:31:dc:e4:58:f7:d6:9a:56:ef:db:40:b2:d0:ea:74:42:d1:
2e:2d:db:44:ef:d3:95:a1:ac:e6:13:ac:ca:fb:13:4f:f9:da:
6f:ab:54:dd:a8:8d:c5:10:1f:b9:ba:ae:45:14:cd:08:57:b0:
58:76:eb:b7:da:e9:0c:6b:60:9f:e0:29:b3:f5:87:4a:1b:07:
e7:07:85:d7:7b:c1:81:58:25:32:88:07:c6:b9:c6:2a:e8:32:
59:5f:14:ca:e2:a4:ba:a3:9b:82:fd:b4:9b:34:35:49:83:df:
71:75:85:3a:55:59:91:5e:52:63:28:9d:0e:5d:ad:a4:5f:5d:
d8:82:29:7e:2d:7a:6c:4d:58:43:2c:0b:1e:54:14:d2:38:f5:
ae:25:f8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:59 2025 by rpki-client