Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
File: 739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa (raw, json)
Hash identifier: F3JO0RtThxGVYvjNO/u9nxTwzRfR/AJBKyGL0JtSXgo=
Subject key identifier: 61:5F:92:BD:68:FE:DB:A3:CC:1D:3B:70:89:38:3A:75:38:25:F5:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 041DBD2C61255DD306F873D9BBC147008DDDF828
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
Signing time: Mon 31 Mar 2025 21:01:18 +0000
ROA not before: Mon 31 Mar 2025 21:01:18 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:1d:bd:2c:61:25:5d:d3:06:f8:73:d9:bb:c1:47:00:8d:dd:f8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:01:18 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: serialNumber=842cf98e6a0a51c0ea3ac0f1aee6324de68f30d14b260c48d6f9912cfb9f4955, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:4b:99:c7:6f:d5:1e:c1:b6:83:8d:6c:b4:
67:de:a5:c0:27:e4:c7:00:fa:41:e9:66:80:ac:60:
da:be:11:35:94:a7:8c:d8:53:2a:19:05:db:04:2c:
50:6e:bc:6f:d9:09:1a:d9:38:76:7b:a1:06:f3:ff:
d8:f7:f6:31:de:31:ca:e3:56:7f:e1:4c:2f:15:2a:
e7:f8:16:89:01:22:95:6f:af:db:b8:6e:9a:12:19:
36:6b:93:bd:39:3f:58:da:19:b6:69:41:c7:cc:a0:
b5:61:12:9f:fb:af:59:df:9f:49:b9:1d:d6:ad:23:
b6:8c:cd:48:ee:a8:8a:34:d2:9f:73:77:e4:36:7a:
65:78:b7:79:39:8e:05:dc:3d:b7:77:e9:a6:87:f5:
28:b9:e3:ed:f9:30:fd:19:66:56:9b:ba:6d:e1:5f:
18:be:22:5f:7b:a5:77:f6:46:70:ea:14:c7:74:c1:
5f:ba:ab:f6:5b:39:37:58:c3:76:60:20:85:f7:d6:
bb:23:05:d5:36:c2:ed:f2:6c:17:9c:7b:13:e8:3a:
f3:97:88:87:2a:5b:ca:b1:95:da:7c:02:cb:2f:12:
7a:26:d9:c5:48:c7:37:99:1c:b8:60:21:0c:0f:2c:
b6:6f:2b:0c:0c:d8:d6:e1:0d:32:e9:ac:8b:ed:9e:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:92:BD:68:FE:DB:A3:CC:1D:3B:70:89:38:3A:75:38:25:F5:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:9000::/40
Signature Algorithm: sha256WithRSAEncryption
05:e2:3e:5d:a8:5b:3a:ab:3c:97:b2:82:8a:2e:3d:e9:da:d4:
83:25:f1:f9:c0:bd:98:bd:de:e0:97:ef:ff:51:40:22:72:93:
83:77:14:96:e2:8c:1f:d0:7d:ec:c9:9a:b3:f6:3f:2c:0d:4f:
cd:7b:bb:d0:c0:b3:e5:0c:b3:d8:a6:82:c7:9b:e8:22:4c:47:
67:0d:b5:b2:a4:f6:3e:0e:e7:1d:08:a5:17:4c:66:bb:47:01:
9a:7f:07:80:62:ad:1b:ae:b5:8d:c4:4c:8b:c7:b5:80:c3:5a:
ab:b4:cc:01:d9:7b:ef:07:b7:0a:02:b6:bb:54:ac:8b:5b:0a:
e8:9a:16:e5:2b:68:04:d7:3f:31:0a:61:7e:e5:22:cc:be:a0:
72:ce:42:dc:9f:8e:6d:e4:11:f9:c3:1e:10:66:c1:6a:d9:99:
92:97:6d:32:6e:df:c9:dc:36:a3:42:3a:30:7b:92:1f:fb:45:
bd:e6:8b:b0:e0:0c:bb:d5:a2:72:6a:15:3f:1d:7c:28:0f:fd:
33:49:19:cf:e9:12:1a:4e:16:0a:65:87:b1:81:df:fb:24:47:
e4:0c:91:67:73:04:55:87:21:92:f1:76:2d:f7:8f:c5:e0:2e:
d8:f2:b0:65:3d:d1:e8:a5:67:e8:db:78:6d:d6:7b:b9:2b:2c:
3d:1a:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:06:21 2025 by rpki-client