Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa
File: 889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa (raw, json)
Hash identifier: Ga8O+ZVB+QsNgYl4SxS6gG2cFBM4UAM1yDqxgbeSjgM=
Subject key identifier: 5B:E6:55:EE:14:2D:F1:44:6A:29:78:61:4E:2A:A0:B7:1C:69:A3:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 287BE8D4F4B0C860035592C8788D6F6E269E220B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa
Signing time: Mon 31 Mar 2025 21:10:19 +0000
ROA not before: Mon 31 Mar 2025 21:10:19 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7b:e8:d4:f4:b0:c8:60:03:55:92:c8:78:8d:6f:6e:26:9e:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:10:19 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:ae:12:02:93:23:83:e8:a2:9d:f4:69:f9:
e6:b6:e8:7d:d4:74:84:a3:c9:1e:a3:88:aa:9c:2e:
05:60:bf:a7:3b:7a:f8:d9:47:de:c0:84:e4:f3:35:
07:6f:3b:dc:46:12:43:8e:05:e2:8a:81:a9:f0:5f:
09:c8:07:28:af:62:52:c9:2b:8f:11:e8:c9:bc:7d:
ae:5e:9e:2f:4d:92:c2:31:56:99:bd:1f:18:45:a5:
24:d7:3d:53:3e:36:7c:42:70:40:36:11:31:25:f7:
8a:0e:4b:e3:48:55:c1:13:a4:cb:20:7b:a3:ff:b2:
e0:6d:ad:b5:24:ce:50:39:0e:20:10:cc:e1:1c:d9:
40:0a:2a:c8:80:8b:48:a7:a6:81:68:77:6e:e8:0d:
cc:df:6e:73:67:e6:75:78:62:8a:f0:67:33:e4:53:
c0:ee:c5:dd:98:df:3f:b3:cc:a6:d7:a1:cc:53:b3:
5f:cb:a4:c9:2a:3e:aa:de:42:12:70:e2:4a:84:7d:
21:7a:27:5f:c8:62:f1:4d:3f:b5:16:79:50:ec:11:
2e:e1:49:87:1d:e1:7c:1c:87:60:8e:01:b1:b1:03:
f8:e2:e3:11:82:eb:ba:38:8c:cc:a0:e8:07:1c:3b:
fe:4b:f1:69:81:9d:34:72:a8:0b:fa:6d:df:79:9b:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E6:55:EE:14:2D:F1:44:6A:29:78:61:4E:2A:A0:B7:1C:69:A3:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/889a19c7-ad97-43ad-8e1e-dd9d5cccd696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c:800::/38
Signature Algorithm: sha256WithRSAEncryption
24:90:cf:74:c4:8a:f7:43:70:5d:2e:f4:bd:1f:8f:5e:4d:38:
76:2b:ae:7e:44:fd:29:57:cc:2e:95:c0:b9:a3:81:89:19:33:
ee:46:71:76:c6:76:72:5a:dd:40:23:45:66:71:2b:e8:89:7a:
6e:5d:29:51:ee:b2:23:58:c9:21:e8:72:0a:57:df:4f:bc:7d:
e8:fd:10:b0:6f:43:40:01:4a:d1:4f:52:78:75:c5:d6:23:32:
33:e3:8b:e3:43:e0:c2:06:81:1c:3e:ad:68:73:63:4b:2a:70:
0b:0c:58:70:43:dc:60:22:23:4e:91:00:65:67:03:a7:59:18:
9c:a5:24:52:77:00:89:09:8f:24:08:09:ca:ce:14:b0:24:ca:
6b:4b:f4:d3:fe:74:ac:a4:ae:cd:7b:51:84:f4:4f:ff:0d:f0:
7e:a1:9a:e4:46:28:ec:66:47:8c:9c:9e:e8:e1:c9:2f:46:16:
6d:4c:42:81:94:1e:59:ee:df:1b:cf:28:6b:5f:04:5a:55:9c:
7f:6c:fa:67:87:8a:bc:8a:ad:31:a4:ac:12:b0:9d:c8:77:49:
03:6a:7c:c5:0d:24:e9:6d:ee:5f:49:1f:88:07:d2:90:6d:21:
bf:7a:08:61:3f:9a:8b:dc:d6:5a:ba:57:f4:d8:c1:b3:01:02:
44:e1:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:44 2025 by rpki-client