Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2d4941-4e42-4d31-b1a5-7a3644a1b6bb.roa
File: 7a2d4941-4e42-4d31-b1a5-7a3644a1b6bb.roa (raw, json)
Hash identifier: ZixPgfCKGQCIamJFPRNK7eJvogS7IYcGHElRDW5QDzM=
Subject key identifier: A5:71:8B:82:39:B9:F5:A8:03:28:DE:3E:69:EF:F2:C5:A9:B2:BB:5E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 455BAC795A75C1FB8DD0AFEB87835188DAE4821D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2d4941-4e42-4d31-b1a5-7a3644a1b6bb.roa
Signing time: Mon 31 Mar 2025 20:40:06 +0000
ROA not before: Mon 31 Mar 2025 20:40:06 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5b:ac:79:5a:75:c1:fb:8d:d0:af:eb:87:83:51:88:da:e4:82:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:40:06 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:c5:e3:8e:ac:87:df:93:b4:c3:1a:38:20:
16:70:2c:25:29:ec:57:0b:ce:53:03:b5:8b:61:87:
a6:81:0d:1c:5f:a7:ee:1a:f7:21:d6:42:c8:e7:e2:
d9:8e:d9:9c:03:96:7e:9c:d1:4c:23:2d:fa:f4:fc:
b3:8c:0c:8f:d9:e0:9e:11:4a:49:a0:f6:e6:ee:89:
23:29:d5:fd:64:27:1f:43:6d:3b:52:03:0c:7a:b3:
67:94:ca:9f:35:dd:51:0f:18:f9:6d:ff:7c:b3:84:
d9:d4:e7:9f:e4:9d:91:47:d9:e4:21:6e:8e:b0:70:
a6:7e:22:a6:c2:d9:c9:86:e6:00:a2:0d:42:94:1d:
75:22:e3:db:91:78:76:1d:cf:3b:a1:86:14:91:c8:
ef:d6:4d:53:99:3c:68:d2:7d:4c:5a:46:7a:55:3e:
a8:d7:09:00:46:5a:23:bf:d5:25:b0:8e:f7:1c:74:
e6:5e:74:9a:63:c9:a0:96:bb:b4:7e:ef:ac:c3:45:
0d:75:44:f8:bf:ed:71:a1:8b:c7:ba:fb:d2:df:c6:
86:ea:7e:c8:d3:0c:b3:85:1b:95:21:d9:b3:3e:3f:
36:7f:05:61:56:2e:6c:ec:fb:89:93:a3:3c:a1:88:
b4:88:ea:a2:39:60:7c:c8:9a:b1:25:5d:d3:3d:be:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:71:8B:82:39:B9:F5:A8:03:28:DE:3E:69:EF:F2:C5:A9:B2:BB:5E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a2d4941-4e42-4d31-b1a5-7a3644a1b6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:c000::/40
Signature Algorithm: sha256WithRSAEncryption
5f:dd:18:65:f9:c5:61:74:31:4b:76:40:7f:8a:22:8f:1e:c8:
15:5b:03:80:c4:d9:dd:91:0a:e4:27:b6:4e:f8:cf:fa:50:85:
e2:81:cd:28:8e:ab:ba:0a:fe:b0:2b:dd:95:c3:fa:41:dd:1c:
05:61:f1:35:f8:a0:ac:6c:b1:45:78:8f:3f:ad:c6:b1:66:b6:
9e:8d:7c:f9:20:ce:79:e7:0d:4d:64:10:b7:ee:a9:bd:7f:6f:
e2:3c:6a:36:6d:6c:15:1f:bf:b5:87:8e:73:51:84:d6:6b:37:
4e:28:37:9c:d6:a9:71:37:71:bc:c3:98:21:c4:3b:a1:b3:cd:
5b:5d:1a:19:ed:aa:50:f7:85:b9:7b:e8:69:de:cb:23:f7:4b:
99:3d:74:ef:8a:13:02:fa:df:56:ce:10:30:36:2f:58:18:ed:
2d:13:85:eb:44:50:e3:c4:ae:5b:ad:1d:9d:e8:1c:ff:b0:eb:
d2:c0:3e:8a:0d:1a:7e:5b:5f:71:ea:50:ee:42:6f:06:66:9e:
6d:3a:5b:00:98:98:3d:7e:96:dc:88:1a:7c:29:95:a3:8e:5d:
f6:46:af:7f:23:df:87:fe:42:73:92:04:77:1a:bc:86:6d:4c:
6e:af:c8:49:a6:85:cc:78:4b:54:da:18:4e:36:f6:9a:5e:08:
0f:e0:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:12 2025 by rpki-client