Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa
File: 773f4606-0d98-4350-9ccd-3aba599136ef.roa (raw, json)
Hash identifier: O2TA6TYro9JuDLSfFbu5XmXBDwOuPbdaloCxh6LXS5s=
Subject key identifier: 32:FB:EC:1C:F1:3E:4A:6B:66:0D:5D:75:47:E9:F9:95:78:A2:94:9A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79C01478444A18AE101E03B98CA9B65970AF8AB7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa
Signing time: Wed 26 Mar 2025 19:23:38 +0000
ROA not before: Wed 26 Mar 2025 19:23:38 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c0:14:78:44:4a:18:ae:10:1e:03:b9:8c:a9:b6:59:70:af:8a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:23:38 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:1c:85:7a:59:66:2c:f2:ad:ff:70:95:11:
14:4e:57:1d:62:11:2a:e3:da:66:e4:1c:b8:a5:d5:
6b:2a:a9:30:f5:e6:85:63:9e:02:6a:76:87:fd:12:
d1:72:dd:66:b5:0e:99:29:38:dc:28:fa:fc:ad:c7:
3d:7f:80:dc:a5:ed:41:75:6a:56:b2:35:3a:03:ed:
a8:a6:bf:b0:75:5f:e7:fe:df:4c:d3:2c:d8:4c:c5:
5b:1d:a5:b4:14:27:f6:89:61:1c:51:8c:eb:9b:c8:
04:19:ef:71:6e:93:97:63:1d:b2:b3:7c:1c:36:10:
9d:c6:2b:d4:4e:c2:dc:ac:1a:e9:c1:89:b5:3f:06:
70:a0:76:13:d2:0c:55:c2:f9:b4:ee:97:5b:1c:67:
a1:ab:9a:7d:0c:30:ec:39:e4:7d:e6:47:ab:38:91:
a4:1e:cc:db:6b:c7:bb:24:21:bf:a3:4d:a3:36:29:
21:33:ba:fd:2e:63:94:ce:f1:da:3e:da:93:4b:93:
1b:79:d5:69:3f:34:1d:7f:f3:b1:28:fa:3c:54:8e:
2b:9b:ad:c8:4f:b6:52:89:a3:4c:ca:12:77:7b:2e:
59:15:7d:c5:fa:88:09:17:c4:aa:3e:91:2c:4c:d1:
28:4a:c2:df:0e:4c:f2:f8:77:0d:9e:69:13:e8:eb:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FB:EC:1C:F1:3E:4A:6B:66:0D:5D:75:47:E9:F9:95:78:A2:94:9A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/773f4606-0d98-4350-9ccd-3aba599136ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:800::/40
Signature Algorithm: sha256WithRSAEncryption
2d:b1:00:76:d5:22:3c:2a:c1:93:6a:54:09:9c:08:fa:d7:11:
d2:5b:53:41:d6:4d:05:cb:d0:31:ee:12:5e:2c:e5:d6:02:bc:
33:75:82:77:7a:fb:b1:35:c9:72:9d:11:13:0d:d3:b4:cc:04:
d7:bc:73:d4:70:bd:4c:14:50:fe:d8:a2:71:96:ee:23:96:8e:
a2:71:03:61:32:8a:e9:69:38:ac:81:6d:5d:44:73:56:f9:3c:
3f:1e:3b:d5:1b:ee:5c:e3:6a:59:b8:d2:1e:35:75:14:4b:21:
4f:e6:d5:2e:a3:54:2d:78:e8:90:cd:1f:65:7c:41:79:d4:f1:
06:cd:43:41:96:a7:db:6d:6d:47:72:55:28:9e:75:e8:6c:b4:
35:e0:a1:18:31:da:5f:af:03:f7:a3:73:4f:ed:b7:fa:47:1c:
dd:66:9a:38:58:4d:11:40:fb:ba:7c:2f:70:4f:91:0a:1c:3b:
03:6d:1f:73:b9:30:7f:fc:ce:cf:43:58:d1:c0:b2:21:2c:13:
15:fd:b7:72:50:16:6d:bd:5c:74:42:b7:89:81:71:c4:6d:3d:
8d:c1:12:71:26:d2:cd:ca:46:c6:7f:f4:3e:78:39:66:45:f8:
68:f0:db:d7:b2:ce:dc:28:c3:87:b9:17:37:b2:58:71:fb:05:
10:a3:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:23 2025 by rpki-client