Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/832b2b17-f295-40de-8d29-e7f4c683fe69.roa
File: 832b2b17-f295-40de-8d29-e7f4c683fe69.roa (raw, json)
Hash identifier: Zv5+N1KHjLjYn2UVJtanMkZbDBqu9xzzcPJRItu2e/k=
Subject key identifier: 0E:5C:0C:87:E4:B9:79:37:7F:4C:45:BB:20:A4:46:87:E6:1C:F3:03
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67F9311474BDE0FC5DBD5C8E62533ECFDC2FD6D4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/832b2b17-f295-40de-8d29-e7f4c683fe69.roa
Signing time: Mon 31 Mar 2025 19:31:07 +0000
ROA not before: Mon 31 Mar 2025 19:31:07 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f9:31:14:74:bd:e0:fc:5d:bd:5c:8e:62:53:3e:cf:dc:2f:d6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:31:07 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:5f:06:c0:a3:82:b1:1c:c2:d5:4b:7b:5e:
94:b1:02:cf:d1:51:e6:97:76:27:26:81:36:4f:78:
9d:e4:79:53:37:f8:cf:41:73:c0:e6:76:9a:f6:23:
4c:f4:35:d4:42:df:31:c6:df:24:55:d2:36:b1:65:
a4:5a:3e:61:ef:44:3f:01:9c:5d:a1:7e:2f:23:a0:
9d:01:a8:8b:9d:59:14:18:8a:59:48:a0:1c:d5:5f:
b9:cc:7b:a3:fd:bf:83:96:8f:81:11:96:4d:40:f2:
9b:85:82:4e:39:83:9d:ef:fe:c4:5e:2c:ea:24:97:
fb:a0:00:3f:b0:1e:38:37:b6:54:8a:99:b8:76:e7:
da:42:e5:47:6f:57:57:be:e9:20:2d:37:17:7c:10:
06:c6:aa:45:c6:ca:26:3f:3f:b0:2d:65:18:d9:b7:
70:3a:47:c4:0f:51:01:bc:55:db:e2:67:b4:dc:78:
32:20:82:f7:50:ff:49:d5:ac:65:c6:9b:65:11:e5:
9d:40:74:17:cd:07:d0:78:0b:6d:27:01:16:88:c9:
2f:82:b9:be:16:bf:a1:d5:5d:00:44:e5:ba:e2:a3:
38:3d:57:6d:2e:41:90:1e:63:5a:f6:2d:ad:5a:39:
8e:91:aa:62:23:01:9a:f4:bc:52:75:fa:45:f6:84:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:0C:87:E4:B9:79:37:7F:4C:45:BB:20:A4:46:87:E6:1C:F3:03
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/832b2b17-f295-40de-8d29-e7f4c683fe69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:8040::/48
Signature Algorithm: sha256WithRSAEncryption
23:b8:f3:e0:80:c0:6b:e6:6b:d4:b1:78:b8:ce:c4:36:e6:2d:
80:3e:c8:e2:35:c8:31:2b:c2:b3:e0:5b:d8:e9:d0:01:d0:93:
c8:0d:71:03:97:38:81:bb:07:74:36:e2:7b:7e:67:72:14:03:
3f:ec:bb:e5:ee:9c:63:cd:0d:c5:6b:63:fe:c1:d9:73:cb:3a:
fe:21:6f:94:1f:07:e4:98:f5:0a:c4:11:08:15:58:f0:71:e0:
43:ec:ce:4e:a8:4a:a7:42:d6:ad:27:1a:76:29:f3:ef:3f:45:
1a:e6:0a:d1:24:d8:b3:b8:d4:df:3d:d7:9a:31:90:8a:8a:89:
d3:6b:f8:83:19:03:ba:a4:60:1a:c2:ff:15:f0:17:64:1e:97:
8d:ec:ad:c2:b7:d9:35:f2:97:08:17:97:26:1b:c2:37:13:44:
46:08:8a:be:07:6e:c5:fb:85:6b:5c:ef:12:a9:be:ad:19:c3:
12:52:41:ac:a5:a2:00:e5:30:af:f8:ae:b7:10:4d:9c:b7:82:
c0:56:63:58:18:d7:cd:2e:df:92:42:2a:04:c1:fe:18:57:a7:
be:4d:52:b5:4c:0e:99:a4:94:b3:8f:17:8f:c8:1c:45:ca:46:
52:6f:06:0d:ed:c7:e4:ca:80:6f:57:5d:2e:90:20:bc:61:1f:
a6:10:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:08 2025 by rpki-client