Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
File: 904a13d7-baa1-4bc7-b805-601d0b998680.roa (raw, json)
Hash identifier: JGv1E9qC1bopHNIPDfrKvczSh5yZ6TnfKgZ4n5pEbm4=
Subject key identifier: 4C:21:44:92:1C:6E:67:12:7E:D3:85:FB:3A:81:60:6F:C0:71:18:EA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 399E68EBEAD4DC8C1B583FDD39D57BF9E4307104
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
Signing time: Mon 31 Mar 2025 20:51:34 +0000
ROA not before: Mon 31 Mar 2025 20:51:34 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9e:68:eb:ea:d4:dc:8c:1b:58:3f:dd:39:d5:7b:f9:e4:30:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:51:34 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:4a:5d:46:1d:81:c2:65:ae:ea:e6:45:e8:
ed:10:58:2a:78:ad:65:db:3d:27:c6:10:9f:0d:da:
61:74:e6:a1:cd:be:66:cc:ac:8c:27:6e:51:0f:3b:
16:50:8a:57:47:8e:00:8c:4b:26:75:33:34:1e:9b:
fa:c1:81:69:eb:64:fb:02:84:c3:d5:2c:4f:63:1a:
54:ff:d5:10:2f:0b:90:9b:f3:2b:24:97:5f:e4:20:
e7:d2:e5:e0:f1:78:f7:ea:3c:4c:dc:ae:08:fa:ea:
b8:79:68:aa:78:b8:c4:db:18:82:b4:cd:86:97:d3:
4b:ef:af:77:1c:06:05:6b:a7:ba:a5:6b:a7:10:1b:
39:35:84:4f:0a:cb:b8:34:55:ab:91:10:ed:e9:59:
a5:6a:50:6c:21:18:60:7f:13:7f:ff:d5:75:df:08:
a9:86:f9:bc:d4:15:79:b0:36:9e:c7:af:0e:ea:e3:
66:62:4e:69:e9:8d:ca:30:a9:5a:56:ff:1c:ed:0f:
82:4a:fc:00:12:ae:a3:c0:20:bb:10:3b:df:7d:ed:
b4:3f:00:c4:9e:53:61:80:2b:4f:48:c5:18:cf:53:
42:d8:9d:63:de:b7:17:26:2f:21:0c:21:31:a5:d4:
9c:f1:71:7b:91:17:f7:78:71:aa:70:26:ec:09:8d:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:21:44:92:1C:6E:67:12:7E:D3:85:FB:3A:81:60:6F:C0:71:18:EA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/904a13d7-baa1-4bc7-b805-601d0b998680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:8000::/40
Signature Algorithm: sha256WithRSAEncryption
be:b2:a2:44:35:46:2d:67:08:0e:97:c2:84:0c:f9:59:58:65:
fb:a4:a6:ab:5b:fb:33:c6:f9:7c:86:64:a5:b3:55:31:2e:cb:
7f:01:a9:b6:20:ea:5d:96:49:70:33:a4:82:fb:3e:af:0b:30:
14:3c:94:bf:d8:c3:74:f0:fc:44:ff:96:02:b0:f8:e9:ca:77:
c6:b2:10:83:c5:07:1b:88:0d:fb:93:72:2d:1c:2a:d0:9d:23:
f8:f5:7c:4d:e1:eb:a6:86:bf:fd:a8:7d:c4:f2:f7:14:4e:52:
96:f8:65:9f:0a:94:ab:89:30:6a:66:07:06:62:70:61:21:f5:
a5:83:93:11:1f:f3:9e:55:94:53:5f:85:5d:c7:e0:a1:76:c3:
87:cc:48:0c:85:c4:64:d3:ed:1e:c3:96:3b:f8:55:6a:e5:45:
04:61:63:bd:e5:95:43:f9:a3:c4:47:65:24:b6:e0:a1:00:8b:
6c:67:25:65:6d:e1:c0:21:fd:b3:73:ce:6a:dd:5b:fe:60:cb:
73:78:11:57:4b:0a:93:1c:df:b8:a9:5c:4f:c3:b1:f2:4b:0b:
25:66:80:88:12:ec:1a:45:43:1c:6f:f2:17:a9:fe:90:af:9c:
11:b2:d0:f5:51:4c:ae:b3:a1:75:ff:a3:45:6a:99:22:76:57:
63:62:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:22 2025 by rpki-client