Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/925d550e-ff86-4691-95fd-99c84ee0d297.roa
File: 925d550e-ff86-4691-95fd-99c84ee0d297.roa (raw, json)
Hash identifier: +5Z6KfezBERmilDorvJzXOkan/+8tLF09ry8MUgMf0g=
Subject key identifier: 43:1D:53:82:C1:01:B5:77:C0:4B:A4:EB:A3:D7:D6:27:3D:77:05:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 546B3393CD700A007C8D42C2CA0C426806869C8F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/925d550e-ff86-4691-95fd-99c84ee0d297.roa
Signing time: Mon 31 Mar 2025 20:21:40 +0000
ROA not before: Mon 31 Mar 2025 20:21:40 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:6b:33:93:cd:70:0a:00:7c:8d:42:c2:ca:0c:42:68:06:86:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:21:40 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:47:b0:f3:29:dc:50:68:61:a5:25:aa:6c:
05:ef:d5:8f:4a:b3:66:de:63:00:b7:68:77:2b:8f:
5e:5c:35:30:ad:12:42:85:f3:d3:a8:52:3c:47:9b:
7b:0c:a9:73:7c:93:99:1f:6d:7d:f4:62:03:7d:5a:
c4:dc:5d:fb:58:ad:53:41:d3:9f:f2:a5:93:03:31:
a7:42:d4:24:b9:a6:40:60:99:de:40:06:cc:be:3d:
0d:26:a9:56:7b:93:88:1e:6a:29:a5:2e:ed:6e:3d:
4c:d2:02:d9:12:38:2a:31:14:ea:3c:f2:0b:e6:a2:
55:8a:38:b9:6a:34:c0:28:19:ce:fb:be:47:50:be:
16:21:e3:c9:28:d2:fc:e7:b1:20:85:69:07:25:2d:
10:1a:ee:c7:44:91:b1:cb:bd:e7:47:36:7f:dd:57:
91:f2:04:f1:72:54:a0:29:51:98:54:2d:7d:62:0b:
32:4d:c9:89:3f:d1:f2:e8:58:54:cf:f4:92:a5:a2:
12:df:1b:a9:6d:72:0a:f5:e5:36:4d:6e:54:f8:c7:
70:65:70:58:cd:3a:40:fb:1b:20:6c:e8:15:46:9c:
51:e6:e1:32:9f:bf:44:b0:d1:df:d3:41:fd:17:02:
44:3c:57:f3:8b:3b:5f:1f:3b:2d:40:20:8e:84:06:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:53:82:C1:01:B5:77:C0:4B:A4:EB:A3:D7:D6:27:3D:77:05:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/925d550e-ff86-4691-95fd-99c84ee0d297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:6000::/40
Signature Algorithm: sha256WithRSAEncryption
a7:1a:37:ad:58:f7:55:0f:aa:3a:c6:3c:d7:5a:d2:e0:51:c3:
3f:f7:1e:b2:83:59:2e:cb:66:9a:81:a9:7f:e7:3e:d9:8e:d3:
84:38:f5:d7:d3:7e:6e:09:6e:44:30:63:b1:df:0d:36:e1:ec:
39:3f:b1:3c:88:56:84:6e:57:15:b8:9f:2b:69:1c:8b:e7:53:
ae:78:29:e4:4e:0f:c2:71:2d:a6:f4:64:be:bd:70:a6:62:b2:
84:f0:05:36:7b:75:22:f5:0c:c9:19:9f:1e:2b:bd:a8:8b:7a:
5e:ee:37:8a:60:9d:ff:ae:09:1d:c7:29:c9:36:5e:f8:01:7a:
58:16:d6:76:6a:cc:f8:25:66:76:95:37:14:48:c2:e7:e7:ac:
ed:59:1b:cd:0f:d1:91:db:a6:ca:f7:0f:10:ea:22:46:c7:4c:
06:de:f7:af:d5:1a:fc:fc:5d:4e:25:9f:cf:66:ce:6f:f0:3a:
4d:38:9a:1e:a8:e8:c6:a6:0b:02:52:50:98:dd:02:e9:59:d9:
af:fd:6a:d1:67:df:1f:04:8d:91:bd:8f:df:09:d0:6e:7a:56:
1f:8d:ae:5e:80:59:63:26:c5:9a:15:a1:42:65:cd:55:36:91:
82:4d:10:74:31:3a:c9:42:b1:a8:eb:58:34:9d:36:c6:a1:11:
8f:75:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:58 2025 by rpki-client