Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
File: 8cdaa55d-528e-4856-8132-c186e079b4cb.roa (raw, json)
Hash identifier: 3z9fBd00MgcIR+Stk6rmEUBWDk2djJ90sSMvNvPsxoY=
Subject key identifier: 66:7D:E8:94:FA:7B:A7:0E:D4:4B:82:06:0F:6B:85:8A:A5:32:1D:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0A9530BF3478EE06894EF5E2B52CDFDDABAB24DE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
Signing time: Mon 24 Mar 2025 19:30:24 +0000
ROA not before: Mon 24 Mar 2025 19:30:24 +0000
ROA not after: Mon 28 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:95:30:bf:34:78:ee:06:89:4e:f5:e2:b5:2c:df:dd:ab:ab:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 24 19:30:24 2025 GMT
Not After : Apr 28 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:f1:92:83:8a:da:dd:4f:1d:3a:90:e2:af:
60:c5:b9:ff:7a:ef:d9:00:2d:7f:b0:c3:6f:ed:07:
6e:e7:a7:c9:8d:08:c7:6f:62:f3:da:93:5a:12:db:
21:02:cf:72:78:e9:58:88:6a:d5:d1:28:80:d8:dc:
9a:e6:3b:38:f5:77:d8:ac:15:49:a1:9f:64:af:cd:
ca:55:47:d2:b9:b9:02:2a:bd:1e:61:86:90:99:f5:
62:bb:9a:3f:87:d5:41:9c:ef:05:ab:c2:82:21:b9:
d5:fc:20:ba:aa:da:a5:2e:a7:8e:a1:ab:24:17:8f:
67:56:4a:1c:4b:3d:c3:06:31:b2:6d:48:51:4c:2b:
f2:a1:ca:79:b0:a9:70:a1:f0:4a:df:ac:29:0a:50:
1a:c4:ef:46:e7:89:13:85:14:9e:7f:67:cb:d9:e0:
d7:dd:b5:59:89:34:68:a8:8e:bc:c7:81:4a:be:11:
c6:3f:4c:ea:a2:0d:01:45:33:42:7a:3f:d8:53:1c:
07:90:a9:fa:31:3c:5c:03:28:a0:1c:e7:45:b2:40:
02:e2:41:9b:63:ff:5d:05:53:23:4f:17:78:cd:f0:
28:cf:95:ea:7f:40:40:1d:ad:90:03:71:3f:05:35:
c8:df:ff:6f:48:53:09:1b:df:07:c7:80:5a:d7:e5:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:E8:94:FA:7B:A7:0E:D4:4B:82:06:0F:6B:85:8A:A5:32:1D:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/40
Signature Algorithm: sha256WithRSAEncryption
09:eb:e8:c3:29:f4:da:c2:b2:f2:fc:28:aa:76:d0:11:1e:18:
eb:f3:87:8f:d9:6f:ba:56:c8:5f:f1:30:cd:62:d9:4c:f0:6e:
ff:6d:1a:57:79:70:26:39:2b:fa:67:c2:e4:ea:ff:12:20:7a:
90:40:35:66:37:93:1c:42:02:a1:a6:2b:c1:04:3f:7b:64:d2:
bb:02:6f:65:7f:ab:c0:ed:54:a7:d2:c7:5c:f9:ac:3c:c4:ef:
6d:b0:8a:0a:60:ce:22:11:88:8d:75:94:82:9c:35:2f:3b:0c:
53:6f:5f:59:fe:36:3c:19:69:7a:8e:58:91:ab:e3:ba:d9:57:
17:7f:31:8a:70:ee:6a:6d:ef:cf:7a:40:ca:2a:97:0b:e8:c1:
23:84:df:26:52:ac:cd:83:85:8b:8f:f8:05:df:c6:61:bb:f6:
58:83:5a:b1:de:b4:15:0a:d7:59:ba:5b:02:57:50:6a:57:23:
f3:17:39:3e:35:c6:b0:b1:b7:9e:6b:8b:88:38:a3:19:e6:37:
a3:aa:31:23:29:e3:b2:3a:4d:65:29:87:3a:62:97:e7:f1:93:
d4:38:28:96:c7:5a:34:16:13:cb:05:47:9a:82:44:b1:7c:20:
50:61:da:b4:92:f3:90:23:12:9b:f6:27:11:ac:ba:0f:72:b0:
5e:7a:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:10 2025 by rpki-client