Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa
File: 7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa (raw, json)
Hash identifier: WpO+FogoJCwhP/vzAkkS9QNjGkZLJJTP9ONbP93MfCI=
Subject key identifier: C6:91:85:D3:8B:89:36:EC:B5:BC:E3:E9:7A:08:E7:64:54:34:03:1B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A362641DC8DC9F619621DBC08BDD7CD7F1A4D78
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa
Signing time: Mon 31 Mar 2025 20:21:10 +0000
ROA not before: Mon 31 Mar 2025 20:21:10 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:36:26:41:dc:8d:c9:f6:19:62:1d:bc:08:bd:d7:cd:7f:1a:4d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:21:10 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:72:44:c9:e7:f4:ac:c9:10:25:68:76:13:
07:ad:6e:fa:7d:a2:28:0e:e4:28:4c:8f:33:ab:28:
c9:e7:f0:90:f3:e2:cc:3d:c8:85:20:51:b5:61:d8:
97:40:ae:3e:e7:d0:3f:6b:f3:2c:3b:de:78:e7:25:
d8:97:8a:46:dd:38:ac:bc:e0:83:8b:0d:6a:6b:3b:
bf:7a:36:98:31:4f:37:84:65:ff:b6:da:d2:1f:b6:
b5:e2:ff:e1:2a:ca:b5:ae:7c:d6:a3:e7:9d:9c:70:
95:06:fd:e4:88:06:f3:25:8d:96:2c:ff:f0:40:f4:
f5:42:d3:83:61:df:0b:bb:60:85:d6:eb:97:7b:c0:
6f:0f:14:f5:c3:53:6f:55:56:13:b0:b0:80:88:fb:
ed:00:1b:fe:2c:00:5e:b3:cd:31:9a:f3:82:02:fe:
30:3b:ba:4c:88:76:67:c7:06:18:89:07:52:65:e0:
12:6a:c4:10:97:28:f5:3e:78:16:28:07:53:ef:ad:
35:0e:ca:a0:7b:b9:85:2c:12:b3:f0:e9:24:9f:74:
da:85:45:2c:d5:83:3a:33:2c:a9:9b:bd:a4:81:ab:
b9:94:e3:ee:7f:83:ad:da:84:24:df:f9:88:2a:b8:
aa:75:d4:42:ae:02:04:fa:08:5a:12:0d:84:f9:22:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:91:85:D3:8B:89:36:EC:B5:BC:E3:E9:7A:08:E7:64:54:34:03:1B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7be7b1a7-fc94-4ff6-9fe8-9e8c1a28d695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:6080::/46
Signature Algorithm: sha256WithRSAEncryption
2b:eb:c7:8c:b0:80:60:51:a7:cd:01:03:90:86:8e:a2:93:c3:
32:71:30:ee:5a:a1:1c:bc:e2:49:d8:04:d4:d2:b0:33:1a:d2:
10:8f:14:8d:d7:49:ef:22:43:7c:30:1b:20:b6:52:9f:44:0b:
3d:4b:e0:f0:4f:6a:93:ae:7e:d4:44:ad:82:cf:5f:59:1f:a5:
3a:b3:be:5a:3a:8a:e9:b1:74:c7:cd:3b:a5:fc:fd:9f:8a:40:
26:c5:0d:91:84:e2:b3:7f:67:70:d4:1a:de:5c:35:eb:92:28:
ce:e3:ff:0d:0f:cd:37:04:57:65:da:87:75:28:80:db:8a:f1:
85:b8:c3:78:a2:0f:3f:33:e6:0d:aa:5f:3e:80:f3:16:3d:03:
5e:b1:09:ef:eb:a1:d2:31:46:de:f2:68:17:a1:6b:d8:39:8e:
83:42:37:e4:31:da:c3:bb:23:5d:ec:00:4f:fa:eb:ab:33:dc:
63:71:ec:51:b8:ea:62:25:10:53:23:20:5c:6f:82:e3:b1:d8:
2c:0c:b2:62:c9:b3:b9:ba:d3:3e:5d:27:77:2c:b3:74:87:21:
8e:71:0b:ea:a8:18:cd:5b:b7:c7:98:9e:b4:fd:34:0b:84:79:
71:99:3d:9c:bc:bc:c6:c1:8d:65:1e:e0:ac:bf:48:67:7d:50:
b9:4c:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:22 2025 by rpki-client