Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7802179a-c80f-42f1-a50b-a0af1df078c2.roa
File: 7802179a-c80f-42f1-a50b-a0af1df078c2.roa (raw, json)
Hash identifier: bAaaxdzgI6fnYSYEV86saOkLgsqVXh1ItYDS6tXUMLQ=
Subject key identifier: 7E:31:68:ED:27:61:EC:1D:32:32:45:45:54:30:B1:6B:D5:4A:86:3E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BC0069EB196C5738FB384EC44B2C44077C933A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7802179a-c80f-42f1-a50b-a0af1df078c2.roa
Signing time: Tue 01 Apr 2025 15:01:22 +0000
ROA not before: Tue 01 Apr 2025 15:01:22 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c0:06:9e:b1:96:c5:73:8f:b3:84:ec:44:b2:c4:40:77:c9:33:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:01:22 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:ee:3a:d7:83:8c:97:ae:f3:60:d6:67:e6:
59:ef:66:22:a0:8b:5f:87:49:e2:a2:70:c7:66:76:
80:2f:ce:da:1d:32:52:8e:7a:4c:d0:8a:60:5e:d0:
46:a2:9a:5b:24:98:da:0c:bb:da:ec:19:68:10:74:
ef:77:41:4c:4e:c9:c3:3c:8c:a8:4e:b8:bf:bc:6a:
ce:76:d6:7a:32:de:d4:89:e7:2f:e9:63:30:82:62:
f6:03:d4:e9:f4:8b:91:5b:32:51:a5:ba:be:69:76:
9d:08:1a:39:b7:e9:a6:e2:24:a1:33:42:ec:a2:fb:
02:be:5a:b8:ba:a5:b2:91:6d:df:4e:db:4c:ab:62:
09:7d:45:42:3a:67:58:8c:f5:c3:a9:76:c2:f3:13:
f8:cd:24:4b:04:55:a5:67:9d:2d:29:95:8e:52:d2:
e6:b6:8f:17:1b:2c:96:90:94:7a:85:83:33:bc:f8:
16:3f:0e:e8:4c:2f:42:ef:8c:48:fe:29:0c:38:0c:
09:1f:27:1d:dd:11:39:f1:d8:03:7e:27:ed:42:44:
46:2b:a9:52:b5:e1:33:43:0b:a0:47:27:64:32:f5:
12:b1:ae:50:c5:b8:e7:e0:0f:b6:7a:ef:55:00:90:
d1:20:07:62:16:a2:c2:57:a6:3c:ad:df:9f:d1:32:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:68:ED:27:61:EC:1D:32:32:45:45:54:30:B1:6B:D5:4A:86:3E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7802179a-c80f-42f1-a50b-a0af1df078c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:4000::/40
Signature Algorithm: sha256WithRSAEncryption
1b:5e:d7:fa:09:02:64:44:b7:d7:05:fc:24:05:3b:8e:54:32:
83:b8:1e:a9:23:7f:49:aa:5d:0e:75:64:2f:57:fe:28:b4:bc:
60:0c:c1:e4:4c:f6:14:f8:8c:21:0b:86:f2:d0:fc:79:86:24:
e8:7e:0e:88:0b:46:ed:e3:a5:92:a5:02:86:b9:03:0a:34:31:
f1:d6:46:cb:c1:32:c3:fb:a8:3d:ce:57:fa:f8:27:bf:ec:ef:
4f:fc:9c:61:0e:db:be:c0:41:e9:69:f8:90:5d:8e:c6:6a:6e:
5f:1f:d5:7d:46:5f:0e:01:08:0f:c6:c9:ff:24:95:6e:05:96:
e3:91:dd:90:ef:9f:c2:03:d7:98:eb:ac:d0:e9:34:3b:26:6b:
d4:6e:04:a5:55:63:71:7e:74:27:0f:10:3a:df:40:ae:32:aa:
3e:1c:fe:3d:a9:49:c1:c6:30:b7:ba:03:1c:9b:b2:ca:83:a4:
1f:23:14:c5:e8:06:34:50:59:44:82:34:ed:41:5a:8a:70:e9:
77:3c:bc:d9:6d:b6:0a:04:f6:2a:a6:e7:7c:ba:58:de:20:6c:
0a:19:84:0c:0d:8f:4e:4a:a0:4d:36:70:b1:a6:d8:2b:c7:5b:
e5:16:70:fa:7b:60:00:98:b3:ab:f9:cb:59:3e:a2:6b:d2:ae:
4a:c8:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:58 2025 by rpki-client