Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
File: 83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa (raw, json)
Hash identifier: pmTO6Wp4mn05p1AQfSMdssgv0xrbhB1DcX4FokAm5+k=
Subject key identifier: AC:11:5C:1D:0B:D5:1E:AD:B2:08:FB:2B:81:C7:D6:08:83:72:96:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 119E3CE8DBA366E96A976FD13298FF2A559FF55F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
Signing time: Tue 01 Apr 2025 15:00:22 +0000
ROA not before: Tue 01 Apr 2025 15:00:22 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9e:3c:e8:db:a3:66:e9:6a:97:6f:d1:32:98:ff:2a:55:9f:f5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:00:22 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:78:4a:ac:75:41:30:52:86:09:35:cd:8f:
e8:d4:e0:16:57:7a:35:e3:2a:c2:11:28:af:70:1b:
38:9f:e6:99:96:4e:21:16:a1:6f:ea:a0:44:0f:20:
06:d1:e8:3b:a6:e6:ff:05:d3:56:cf:6c:29:4d:1c:
08:19:fd:5b:aa:50:21:42:b4:a0:33:81:ba:b5:e9:
ae:09:1f:cd:e0:52:d9:46:ed:6a:48:c5:16:4c:94:
83:12:0b:11:6e:e3:4f:62:64:0b:05:9f:9a:29:95:
69:90:8c:bc:2a:fe:de:84:17:96:ab:7f:20:e2:22:
64:e9:50:ab:be:0e:f3:bb:0d:7c:73:da:b5:85:6d:
a2:8e:87:0a:a4:23:aa:67:a9:18:07:2a:2a:11:20:
bf:e4:21:42:42:0b:47:23:0e:ba:33:16:2e:bf:6b:
62:6b:00:37:71:6b:a0:9b:f8:9c:a9:f7:04:5c:8c:
0e:ca:ab:5f:5d:c8:35:b0:50:4b:4d:c0:37:b7:ca:
82:03:99:3d:09:09:a8:51:60:76:8b:3b:3e:7c:28:
c6:a2:9a:7a:6b:02:5d:4a:9d:a6:51:9b:8d:fb:b7:
b5:61:f6:65:01:b1:c4:04:8f:0c:d5:50:5f:ad:34:
97:f0:a2:b8:1b:58:8c:ce:ac:21:7c:ec:c1:e6:1b:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:11:5C:1D:0B:D5:1E:AD:B2:08:FB:2B:81:C7:D6:08:83:72:96:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/18
Signature Algorithm: sha256WithRSAEncryption
06:f7:e7:a4:d6:59:02:d8:37:30:81:3b:a2:f3:9f:2e:47:a0:
0a:7a:3c:fb:61:8c:5a:b7:07:0c:bd:81:bf:08:4b:2c:73:2a:
79:21:6c:b3:ed:b7:d8:54:9d:2c:38:b6:b7:87:1c:7d:b5:f0:
51:b5:96:88:1d:e2:17:14:4d:01:32:c8:48:16:4c:5b:22:06:
52:43:d3:de:2d:9d:f0:ae:a6:da:9f:8e:ad:21:17:0d:cf:01:
fa:66:74:d2:6c:b7:f0:93:1c:76:26:7e:0e:ad:d5:3c:94:fe:
ef:70:c9:25:ad:e6:19:fd:b8:a6:8f:0e:16:72:d7:ca:16:c4:
82:76:02:46:94:be:d2:c4:32:63:d7:31:c8:66:12:27:a0:e2:
dd:d2:80:1e:94:fd:c5:ab:88:1e:73:6c:8c:79:f8:82:0e:78:
66:47:d6:94:3b:de:46:ca:19:0b:d0:f9:7e:89:20:23:69:76:
86:f5:85:72:83:e9:f9:6f:71:e5:f3:f2:a8:10:f9:2b:e9:29:
5d:5c:57:1c:23:41:75:0a:31:e9:20:b0:22:f7:8b:cc:ac:09:
c5:a9:08:fc:03:50:00:f5:a0:cf:29:88:51:83:2e:c4:a5:a3:
23:39:ca:e9:bf:b8:1b:db:16:7d:ed:21:9c:bc:7c:2a:11:df:
94:12:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:27 2025 by rpki-client