Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81feff8e-07ef-4f8b-a3c9-5d68d6e74619.roa
File: 81feff8e-07ef-4f8b-a3c9-5d68d6e74619.roa (raw, json)
Hash identifier: tX1MviFo8Bkj57/G2FWdLouf81C2UAeZ+tv3yOYWWqw=
Subject key identifier: 47:DA:25:18:48:D6:81:38:40:BA:86:5E:46:9C:99:6D:14:79:19:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1E57E002501150BE42DACAF3BCAF2201530DC1ED
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81feff8e-07ef-4f8b-a3c9-5d68d6e74619.roa
Signing time: Mon 31 Mar 2025 19:50:18 +0000
ROA not before: Mon 31 Mar 2025 19:50:18 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:57:e0:02:50:11:50:be:42:da:ca:f3:bc:af:22:01:53:0d:c1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:50:18 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:92:a8:fb:61:03:d9:18:54:9e:ae:f0:28:
c8:ce:74:64:85:26:16:78:7b:d4:c0:68:67:a5:47:
43:af:4d:ab:72:61:9d:11:94:2a:15:42:81:b6:0c:
6e:37:4d:4e:e3:24:26:b4:cd:05:ab:a0:06:44:36:
72:13:11:62:0c:3d:fa:fb:95:13:94:00:c7:8f:fe:
88:39:84:db:eb:8a:c7:89:22:a8:ae:0f:3b:a6:b5:
8e:aa:ab:fb:b2:75:d9:0a:a2:ae:da:7b:b2:55:72:
0b:a4:ee:1d:ce:ef:b2:8f:97:bb:61:d2:09:80:cf:
03:a9:9e:c3:20:9a:5c:91:57:e5:b8:74:b1:45:fa:
62:c6:ad:fe:2e:61:a1:63:34:1c:13:6e:96:11:d9:
d9:3d:fc:39:43:0a:90:05:d9:35:bc:a5:68:34:9e:
02:63:31:2a:3e:ee:54:ef:9d:38:59:8f:e7:b5:50:
3f:60:a6:5e:4a:b9:5d:52:b2:7c:6c:4f:cf:08:ff:
f4:b1:48:24:44:6a:8d:5b:53:52:e9:07:09:ef:f8:
e3:7d:f1:15:de:75:e8:50:a6:ec:b9:1c:6d:02:5e:
63:2e:1c:17:e2:74:9d:a5:7e:22:7b:b1:6b:0f:f4:
da:44:f2:8c:26:69:b7:97:b7:aa:38:2f:0e:11:ef:
62:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:25:18:48:D6:81:38:40:BA:86:5E:46:9C:99:6D:14:79:19:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81feff8e-07ef-4f8b-a3c9-5d68d6e74619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:5f:25:54:4f:28:c3:41:3d:4f:a0:b0:41:6d:3c:31:da:68:
44:42:63:77:d0:bb:f0:83:7b:73:15:5f:a8:72:cd:d5:91:ca:
8a:f7:da:48:3e:45:d6:72:75:3e:85:83:b6:1e:64:dd:e1:b3:
d5:18:0e:b5:5d:59:b1:fc:2c:b4:09:72:7e:d1:c3:de:f8:1d:
03:c8:a5:08:60:58:1e:64:52:dc:66:4d:da:b0:00:c8:29:27:
77:1a:ea:2e:d0:f1:d5:72:f5:6d:85:83:43:39:09:ad:95:d2:
ed:02:41:b4:fe:22:25:ea:3d:64:c7:b7:c4:38:9f:cd:34:64:
07:62:c0:9d:b4:e8:28:2f:fb:34:ef:c0:d7:14:84:ce:0a:46:
1e:dc:ce:7a:3c:3a:c3:cf:6f:dc:73:35:58:c3:a1:e1:a9:e9:
81:be:04:49:bf:3c:6e:ee:0c:1c:1e:9e:ef:75:5e:fd:14:e8:
c0:f6:41:09:c4:05:2b:2f:99:9c:4f:ff:e6:0f:99:71:4b:d7:
2c:aa:1d:0b:6c:8d:6b:31:3b:81:e7:30:11:26:d8:c7:a2:9a:
e9:d3:aa:95:34:81:2e:ef:a4:44:4f:a3:73:0c:c5:e4:92:09:
c2:d3:79:9f:e6:35:89:b8:f6:43:76:0b:a6:76:1c:8b:e7:45:
c8:08:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:55 2025 by rpki-client