Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
File: 7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa (raw, json)
Hash identifier: OatRRwuVdHpDcifkkuhLTe582c1Vu3uhq4jxXhmA0Fo=
Subject key identifier: 37:E1:48:7E:30:45:CC:E9:9D:7B:F8:EF:51:E4:55:E9:A7:E6:F7:EB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4C67C5143ADAB640BC834D378A3FE1C0F3FFF909
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
Signing time: Sat 05 Apr 2025 00:10:16 +0000
ROA not before: Sat 05 Apr 2025 00:10:16 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:67:c5:14:3a:da:b6:40:bc:83:4d:37:8a:3f:e1:c0:f3:ff:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 5 00:10:16 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:1e:a7:38:d9:63:ca:b7:bc:12:d1:07:70:
3d:5a:ac:5a:55:50:56:43:40:10:cd:a6:e8:0d:c4:
ad:13:a3:62:ec:23:f9:3c:c3:8e:0a:1c:d3:24:aa:
37:fb:36:40:31:9c:6d:b5:33:b1:00:4d:db:a5:a4:
16:55:29:3f:cf:db:9c:9b:80:32:e0:4c:53:7f:8a:
89:6c:70:a1:43:98:72:84:13:0f:ef:68:02:f9:fe:
45:46:40:5d:b1:05:42:6f:5e:39:c2:58:18:1a:71:
51:53:a4:c7:54:4e:55:b6:77:f6:df:5e:64:58:6b:
f2:f9:69:e3:25:60:37:e8:1e:75:2e:a2:0a:97:05:
ac:55:c1:e3:b6:cd:9c:2e:35:33:b2:0b:7b:2a:6d:
35:7a:a7:80:b5:68:06:b4:43:63:dc:a3:b3:6b:f2:
28:22:a1:66:be:62:b7:1c:84:d1:c2:90:be:8f:fd:
0b:90:89:eb:65:25:21:d2:4f:8e:f8:be:e2:ec:e4:
54:d6:88:7d:87:05:9a:3d:b3:51:c3:07:5c:1b:aa:
85:53:4b:ab:d7:36:c3:b3:29:69:04:5a:aa:3b:cd:
73:df:ad:8e:4e:33:8a:12:0b:d7:13:94:91:01:df:
be:4f:d7:63:c6:25:3c:19:ce:0f:5c:73:65:51:31:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:48:7E:30:45:CC:E9:9D:7B:F8:EF:51:E4:55:E9:A7:E6:F7:EB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7381c075-d96b-43bf-8a89-25dbab9a1a8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010::/28
Signature Algorithm: sha256WithRSAEncryption
4e:62:95:8d:60:83:bd:27:51:20:c2:c1:dc:1c:56:fd:4c:4d:
b2:6e:c0:aa:94:e2:97:2d:ef:2e:f1:3c:82:49:12:ff:37:71:
cd:5d:69:73:93:4f:3e:fd:64:9e:7a:60:47:62:52:d2:69:4f:
f1:55:12:85:e8:7e:6d:2e:0e:11:d1:97:2b:16:59:43:84:3a:
41:9b:ba:cf:ab:3c:1d:e4:ac:2e:99:48:7f:54:e6:18:a1:47:
6d:aa:61:4b:6b:05:22:16:92:90:f7:1a:73:00:47:85:34:fe:
ec:36:de:23:db:d6:9e:3c:65:f3:11:32:31:42:60:94:d8:28:
76:26:ad:a5:18:b4:e4:e0:0d:99:57:c8:57:3b:f8:ed:fb:05:
e0:9e:0e:34:79:1c:ee:d1:79:be:8b:99:5a:13:36:5c:59:62:
25:fb:95:28:f7:f6:f2:a7:1a:b5:2a:ba:00:0e:82:80:bb:f2:
b2:76:f1:95:1f:12:e2:e5:90:9b:a7:13:df:0e:04:8d:d0:0a:
4d:11:65:f6:1e:11:c2:01:c3:3c:b2:e9:03:be:2e:7d:a7:de:
28:11:7e:e6:02:56:a5:56:ed:7c:8e:48:56:f8:2d:cd:78:6d:
18:82:0c:69:82:ef:dd:83:8e:0a:f2:4b:29:b1:01:cc:03:65:
b6:76:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:16 2025 by rpki-client