Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
File: 8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa (raw, json)
Hash identifier: vdHTcyBK3isubvMZtS50ZCKproYvSKfE0mUn6mqUsNA=
Subject key identifier: 58:2C:98:93:86:04:07:12:29:A9:46:E5:D5:75:D7:23:D5:D5:69:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D0CBCD5AF71B788D47A5966FE0103D33A92EBC3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
Signing time: Mon 31 Mar 2025 20:51:05 +0000
ROA not before: Mon 31 Mar 2025 20:51:05 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0c:bc:d5:af:71:b7:88:d4:7a:59:66:fe:01:03:d3:3a:92:eb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:51:05 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:e7:2a:ac:6f:6c:d7:39:3c:db:85:20:1b:
f1:e8:22:b2:2f:32:0a:4c:ca:03:ff:80:b7:95:0e:
b1:62:d7:00:c3:1b:e9:f7:b6:db:c3:94:55:9a:60:
dd:c7:2a:0a:b8:e1:eb:d1:20:0d:a8:72:7a:f1:ea:
4a:cd:eb:a2:90:95:6c:f5:b1:8e:56:95:bc:d0:83:
63:f5:a3:d1:7b:52:b9:a7:50:d0:33:b2:c4:5c:2e:
21:5a:89:ac:93:40:58:99:7b:82:60:24:e0:08:a8:
5c:b2:ef:50:82:f0:0d:60:f3:6a:28:d2:bc:76:58:
17:cd:b8:61:e2:68:78:c5:29:e8:65:f0:09:1e:b5:
18:2e:e5:2e:02:00:37:d2:5b:e2:af:4d:f1:2e:71:
09:00:66:67:91:7c:64:8c:c8:a5:18:16:ed:f2:e1:
6a:9e:0b:82:a4:c3:35:f1:7c:b1:83:b9:63:07:1e:
f4:7b:9e:5a:d6:c6:ac:a5:07:c1:a5:8a:f7:e5:9f:
ab:27:c2:45:24:b4:d8:6f:bd:e6:d2:81:ab:eb:53:
1e:d1:42:70:f5:33:70:33:88:83:98:46:28:98:39:
58:9e:a2:f3:7f:6a:94:37:2d:4a:21:f2:67:00:db:
cd:bf:ff:97:de:90:b8:f0:80:af:ac:04:fa:f8:76:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:98:93:86:04:07:12:29:A9:46:E5:D5:75:D7:23:D5:D5:69:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8dc7d5ba-b1e9-4c1c-a190-214731b71b49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:e000::/40
Signature Algorithm: sha256WithRSAEncryption
8c:c5:a1:b8:c8:73:5c:09:8e:d7:2c:6e:49:bf:cd:84:49:75:
d8:56:38:a3:86:66:f5:00:1c:9f:83:93:d5:55:f6:ca:b5:65:
2d:b7:72:cf:a0:2f:f2:80:b3:b1:e1:82:c3:66:ae:c7:4a:73:
5f:cc:28:25:ad:b5:e0:1c:05:c5:07:42:4b:bf:a8:46:63:b2:
cd:6c:87:b5:be:a4:ef:21:99:62:54:c4:91:80:28:1c:f8:50:
76:ac:6e:de:de:77:49:f1:d5:11:42:8d:16:bc:12:14:92:9d:
af:69:53:58:74:5b:bf:87:7e:53:aa:57:72:13:e6:15:bb:ad:
fa:d7:c2:52:c0:69:52:23:41:97:39:3a:8d:83:3b:c3:44:38:
d1:b3:0f:98:2a:5b:74:00:68:4c:8d:be:33:1d:b5:19:5b:d8:
63:b0:e3:eb:c5:eb:d7:75:d4:9e:56:7a:92:0c:17:84:38:5a:
de:4e:09:93:b9:ef:4a:d8:a9:af:de:78:ab:41:70:4a:c0:15:
f6:df:39:03:17:e7:ac:1a:5c:11:03:46:82:98:4b:46:1e:be:
b3:75:7a:fc:13:61:08:d7:43:99:44:64:d4:ef:10:cd:4b:01:
0b:11:dc:4b:da:67:0e:4e:9c:a9:db:93:e2:c1:29:4d:a2:0a:
4c:c8:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:42 2025 by rpki-client