Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa
File: 92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa (raw, json)
Hash identifier: 04fKkUO7pWEPoBpisDV1ir3laBnRfE+DQOvSroTBLZM=
Subject key identifier: 81:C5:91:D0:5A:C5:F3:C9:9E:B8:8C:E5:22:3C:64:E7:76:CB:2B:AB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 037023A82F82E7FE96A57EB99574140ECB5F1B2B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa
Signing time: Mon 31 Mar 2025 19:41:20 +0000
ROA not before: Mon 31 Mar 2025 19:41:20 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:70:23:a8:2f:82:e7:fe:96:a5:7e:b9:95:74:14:0e:cb:5f:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:41:20 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:0e:56:8a:da:93:0a:ee:52:3d:05:81:53:
06:17:c0:04:8f:a2:8f:bf:30:a5:28:bd:82:48:2c:
2d:cb:35:8a:f0:53:43:78:27:3e:4c:8f:0f:0b:04:
41:cd:53:92:0d:83:03:37:f8:85:36:d9:7f:02:28:
0d:d4:dc:d3:8f:c7:5b:9b:5e:d9:8a:53:7b:25:a2:
f4:97:bb:76:0c:4b:bb:5f:26:69:ad:7f:46:69:ee:
a7:d3:68:20:79:6f:c4:ac:86:9e:49:aa:e2:56:6e:
42:65:81:34:02:74:3e:18:71:09:e7:5a:e6:b4:48:
0a:f8:23:31:b9:19:96:76:47:47:2e:a4:18:4f:06:
16:37:47:09:62:cb:3d:69:11:da:0a:2f:02:d2:a8:
1d:57:65:3d:e5:30:f2:45:02:28:8b:31:4d:a7:ce:
a9:9e:d4:f6:ab:3d:52:42:64:fd:8f:fa:af:52:dd:
c7:4b:26:b2:e7:53:95:25:6f:f0:c4:53:1a:fc:40:
80:0b:ef:66:87:de:b3:16:b4:d5:2a:f0:d3:9a:15:
1c:b2:ed:86:1a:c9:99:41:d0:66:8f:59:32:10:79:
81:f4:b3:df:34:41:ca:e6:7b:da:07:51:2b:19:95:
b6:77:68:17:92:39:6d:54:62:be:e8:c2:5d:a4:38:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C5:91:D0:5A:C5:F3:C9:9E:B8:8C:E5:22:3C:64:E7:76:CB:2B:AB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92344a76-d582-4bc9-8fcb-d28a7cd833f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:2000::/40
Signature Algorithm: sha256WithRSAEncryption
94:65:a9:37:4b:e1:62:4c:5c:55:69:6f:dc:88:1f:da:61:6b:
ff:c5:78:95:ae:ea:55:ec:56:c6:2b:68:e5:e5:dd:99:31:c8:
97:98:73:1e:58:e2:fe:74:86:40:d2:22:2b:a3:51:71:33:fa:
6b:ed:0e:19:67:cf:6d:a6:d2:e1:05:31:fa:21:0c:08:8e:c6:
f0:a1:75:63:ee:57:89:bd:84:20:6a:b4:20:f5:5b:d3:5d:f8:
a8:55:6b:94:46:c8:54:e5:13:4b:d5:51:37:ce:b5:6b:95:00:
a3:ec:e6:d9:18:1d:ce:89:6a:61:43:46:d9:e2:8e:3c:84:8f:
c3:cf:83:d5:3d:4f:0f:e9:6b:49:e6:c5:18:ad:e5:30:b9:56:
03:a4:f9:a2:d8:07:e3:81:62:08:83:a6:f9:a0:66:d6:14:2f:
4d:d9:06:e6:41:01:f1:19:2a:06:5b:e8:ae:5e:2b:b6:17:db:
17:5b:0d:7d:c7:61:a7:4a:93:3a:fe:f1:72:77:bf:8f:e1:0e:
a1:e5:d1:0d:c2:65:e5:98:93:69:3a:4b:76:8c:9d:d1:36:83:
80:f6:cb:e8:e0:83:8e:5f:15:90:93:94:e0:ce:42:57:cb:10:
81:cb:41:6c:15:73:ca:bd:24:28:3c:bd:cf:bb:34:bb:4f:52:
de:20:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:13 2025 by rpki-client