Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
File: 944adc0b-c1b8-474a-8753-f9751b6122ff.roa (raw, json)
Hash identifier: 0lMkz/VVX4TQvGRGPWEPJzv4owyV0Ar/ErFpnMn/HOI=
Subject key identifier: E5:99:9F:31:2C:A2:6F:DC:B3:74:73:CE:EA:66:60:BF:FA:E5:C7:6C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3FD79E1223DB41C0421ADD398DE2EBCB46F10331
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
Signing time: Mon 31 Mar 2025 20:21:26 +0000
ROA not before: Mon 31 Mar 2025 20:21:26 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d7:9e:12:23:db:41:c0:42:1a:dd:39:8d:e2:eb:cb:46:f1:03:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:21:26 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:25:63:30:4f:8e:02:26:9d:78:55:fa:ed:
92:10:bb:68:72:fb:15:1e:57:00:8c:f1:dd:03:50:
68:94:2a:3d:e3:4d:25:5d:ab:64:d1:7c:69:6d:b5:
17:c1:a2:32:28:57:8b:af:1e:47:b0:2d:03:6c:33:
24:df:53:3f:de:f0:e2:64:21:f9:e3:c8:74:48:e8:
1b:f9:f8:a9:00:a3:2c:8d:61:33:0f:96:6d:07:c5:
39:56:37:ad:1a:7e:61:29:ce:83:77:58:a4:3b:c9:
51:03:0a:4c:62:4e:77:c7:39:a9:7c:86:f6:c8:1d:
55:c0:51:e1:8b:a7:af:79:75:5e:dd:b2:ce:ce:0a:
54:39:b0:e8:d2:56:6b:05:96:e0:c1:89:e3:4b:59:
53:f9:3c:e3:3b:17:17:8e:1d:41:77:70:29:67:77:
87:a1:fc:15:93:aa:f1:97:62:92:d2:ea:f9:6e:f8:
d0:2f:c2:1f:34:f1:d2:6c:6b:6a:33:dd:42:66:da:
a7:2c:15:0f:7b:33:24:98:48:f8:cc:4e:cd:f6:31:
75:51:65:e6:d0:14:7f:19:e6:7c:e3:26:e7:06:48:
aa:b5:b6:62:d4:56:cd:9f:23:c4:e6:ec:45:8f:18:
12:74:73:ca:a0:cd:ba:06:a1:25:35:3e:72:77:b4:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:9F:31:2C:A2:6F:DC:B3:74:73:CE:EA:66:60:BF:FA:E5:C7:6C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8020::/46
Signature Algorithm: sha256WithRSAEncryption
86:81:66:46:7c:f0:23:4d:6c:93:2d:18:92:82:c5:97:9e:66:
88:a7:49:41:74:8c:8f:ab:ba:c5:f4:11:d1:9d:c7:fa:6d:b3:
6a:a2:c5:05:a3:2e:99:b2:1c:52:97:da:25:1f:55:ae:93:36:
9e:1b:9e:8c:17:d0:e7:10:88:41:41:b5:07:91:bd:45:16:6e:
35:7d:82:82:23:eb:c8:9d:3c:a0:b1:f2:49:9b:78:e1:87:4c:
01:f1:20:99:3a:09:a9:92:cf:30:47:ed:88:39:bf:66:92:ba:
b2:82:a9:18:51:8e:ef:2a:66:5d:9a:7f:14:ef:73:d8:cd:79:
06:b4:58:bf:0d:b3:6b:86:89:f5:58:1a:7d:39:78:c6:31:d6:
f8:06:d2:14:88:51:4d:21:73:93:35:2f:bd:c5:74:cb:f0:ec:
ad:1a:6a:d7:f3:9c:12:81:89:53:92:98:7b:12:22:5a:ac:9d:
39:da:97:63:fd:5c:9d:14:1f:3b:f3:11:0f:13:76:5f:93:72:
b0:18:1e:4f:13:a6:41:31:1a:59:2c:b0:5d:ff:79:68:0f:a3:
31:0d:1a:a4:95:73:63:41:19:24:2a:88:30:b7:46:5c:7b:ce:
77:3c:da:ff:9d:1a:02:e0:36:6b:c6:60:6d:34:4c:1c:ba:2d:
09:c7:05:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:13 2025 by rpki-client