Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa
File: 7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa (raw, json)
Hash identifier: 5+Ovt4zFky0qQurH/UyZP6QW5TaLP0uwHBFaRbrdg8c=
Subject key identifier: A7:25:C0:97:20:76:4E:2F:32:20:F5:C7:64:7B:8C:45:E1:32:A3:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 07E4789D7425EF36D9BFD6FDC22089F64F90FBC8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa
Signing time: Mon 31 Mar 2025 21:20:05 +0000
ROA not before: Mon 31 Mar 2025 21:20:05 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d027::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e4:78:9d:74:25:ef:36:d9:bf:d6:fd:c2:20:89:f6:4f:90:fb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:20:05 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:19:c0:72:73:38:dd:d8:e3:02:aa:bc:51:
ed:00:de:d2:37:1b:33:51:16:7d:9e:06:47:9a:cc:
f9:b5:79:c5:94:85:7b:28:2b:d6:9c:b6:ad:be:d8:
cf:f8:3e:f9:e7:ad:94:7a:b4:37:a0:10:84:2b:98:
d3:a8:ad:c0:ae:6c:c6:cd:63:a6:d8:ad:76:4a:95:
4f:9d:a7:d6:83:3b:78:39:09:a6:7b:cb:24:7e:04:
a2:48:db:2c:76:17:80:c2:bf:1c:32:d2:c2:c1:05:
4a:36:ff:f3:8c:03:85:35:e2:70:34:cc:3a:da:b7:
7a:d8:96:8d:ff:7c:48:2e:31:55:89:34:53:c4:3f:
0c:05:e2:b3:58:b1:3d:42:4a:95:8a:35:62:4a:89:
d5:1a:12:4c:80:b7:23:00:df:e4:9d:0b:a2:f7:29:
6c:e1:b1:2c:97:e1:a2:4c:c0:91:e1:d4:f9:cd:0c:
b1:49:a8:ae:b0:3c:1d:da:15:7f:c5:4d:68:5a:cd:
a9:ac:d8:84:0c:e9:4a:54:a5:ec:88:08:b8:7b:6e:
75:17:46:85:ad:b7:f5:cb:44:9f:e9:5d:de:3e:9d:
a1:9a:5a:5e:89:d5:52:1e:fd:5d:e9:87:66:af:a1:
f3:dc:69:33:d5:32:7c:67:01:38:46:47:ba:ca:a5:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:25:C0:97:20:76:4E:2F:32:20:F5:C7:64:7B:8C:45:E1:32:A3:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bcbf9f3-7a63-42a2-9b58-4c0c10fc34dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d027::/36
Signature Algorithm: sha256WithRSAEncryption
38:6f:91:fe:06:29:47:c4:1a:f6:06:99:97:37:0d:b3:87:fa:
b8:cf:50:c0:96:2e:93:0b:de:ef:68:15:95:3e:98:0c:87:e8:
5e:5f:65:be:45:b8:8e:01:0a:fc:a6:53:53:ee:f6:08:a5:97:
e3:2f:99:67:0f:e5:b8:1c:18:65:6f:56:00:a7:ac:e9:86:94:
24:2e:c0:d1:98:d8:2a:fb:11:5c:3f:9e:8e:a9:df:e3:cc:44:
a6:de:ab:4c:dc:98:29:c6:dc:e9:1d:61:19:a8:d2:91:b3:8e:
1d:c4:a9:05:7c:62:f1:f2:b1:3f:c0:8c:73:f5:89:ab:02:25:
ee:34:fd:9d:1c:1b:7f:3a:b2:f6:bb:c1:05:11:7b:9b:0a:fd:
dc:1c:b7:26:51:9f:c5:2d:12:92:7e:f4:a3:36:ca:49:ef:7a:
35:44:6c:aa:01:5a:75:7d:b1:15:f8:ad:d3:59:c3:5e:b5:44:
03:25:bf:f8:07:c3:93:2a:b2:cf:53:fb:db:2b:0e:ad:aa:45:
7f:66:1c:ba:34:d4:a6:23:fe:fc:f0:9c:c1:bd:0f:28:52:d5:
d6:a5:d5:91:df:17:76:73:13:5d:2f:b5:c5:25:43:ab:49:a9:
ed:02:11:2e:d8:99:3f:8b:5f:b2:a3:eb:88:03:0e:c8:03:b5:
b9:6d:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:20 2025 by rpki-client