Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96632b04-b91d-4e29-8e82-14fddf17bed9.roa
File: 96632b04-b91d-4e29-8e82-14fddf17bed9.roa (raw, json)
Hash identifier: 0Ww7vKYd9x9dDpu2G7SA84OxRlf8IIEt4khyv/yjkkc=
Subject key identifier: 8F:20:97:43:91:8E:66:3B:13:1A:08:59:A2:9C:D2:32:05:AB:65:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 312D0413882EB0CBBA0069FB989109E6C8619295
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96632b04-b91d-4e29-8e82-14fddf17bed9.roa
Signing time: Mon 31 Mar 2025 19:50:55 +0000
ROA not before: Mon 31 Mar 2025 19:50:55 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:2d:04:13:88:2e:b0:cb:ba:00:69:fb:98:91:09:e6:c8:61:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:50:55 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:d4:ea:75:f1:ee:7c:4e:65:47:57:c9:d4:
6a:e8:cc:02:96:ad:8d:2f:2c:cb:a5:58:57:39:ba:
42:9d:f9:57:bc:bc:ee:35:26:3f:d9:3e:08:1a:9a:
f2:85:6a:0c:30:fe:41:4a:40:3a:70:91:f1:ba:f5:
86:45:d5:dd:61:c1:31:63:37:ff:12:78:14:fb:31:
e7:59:60:7e:b6:be:74:7a:34:2f:2a:e1:ca:c9:47:
71:7b:99:d7:53:3b:f3:db:12:39:9b:74:86:51:b8:
70:8a:3b:1e:86:7c:f9:c2:d2:f9:a9:a0:c5:21:4c:
ad:fb:f1:44:78:57:21:ae:85:52:57:8a:db:b0:5e:
fd:36:8b:97:19:6e:c6:0a:11:fc:ca:3c:55:e4:40:
4d:9e:d2:32:25:b7:7a:1b:c2:33:1e:04:69:d5:cf:
ab:99:c5:f1:ac:5d:78:6a:a1:94:74:0c:25:5d:b9:
77:72:4c:5d:10:c0:15:fe:cc:80:15:f4:a0:19:52:
04:cf:ed:61:08:f8:ea:28:71:f2:05:3d:95:e4:bb:
de:45:04:bb:e7:47:cc:82:e3:3c:1d:99:0b:50:a3:
6d:45:3e:2f:44:64:d7:4b:d0:d7:28:46:5c:79:65:
81:be:40:2e:2a:5c:03:98:16:6c:55:1e:cb:6b:33:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:97:43:91:8E:66:3B:13:1A:08:59:A2:9C:D2:32:05:AB:65:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/96632b04-b91d-4e29-8e82-14fddf17bed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:8060::/48
Signature Algorithm: sha256WithRSAEncryption
3f:c1:7e:f0:0e:b0:19:d7:1a:c4:20:bc:e2:3a:76:8b:98:50:
60:f1:92:5d:08:40:e7:8a:30:55:7c:a3:fa:d2:5c:6a:15:a0:
ae:ac:81:b3:4e:49:9b:9a:15:d0:ba:e5:66:3f:49:ec:a3:7b:
73:0a:a7:78:88:7b:80:7e:3d:0e:5e:e5:b5:37:dd:0a:8f:e9:
5e:46:43:e8:e4:1a:ba:9b:92:4f:08:f1:8e:20:8c:17:84:25:
81:67:ba:8c:a0:6c:23:a1:19:65:e4:3c:0c:6b:e0:da:55:22:
17:e3:1d:b8:67:20:6b:a8:9e:13:2f:cf:d2:d4:53:ea:2c:aa:
47:ab:2e:79:56:5a:78:06:37:73:4d:a0:53:24:ba:ce:74:89:
29:05:0a:33:21:fe:9c:fd:c9:82:87:94:2d:7a:32:70:87:47:
0c:a1:75:ab:69:46:2b:11:36:be:0d:56:59:62:15:0b:a2:ea:
ee:16:29:cb:d0:21:db:74:f0:cb:99:64:3b:22:69:cf:88:70:
10:0a:f4:d2:7a:6d:7a:9e:80:ab:5a:1b:c9:e1:44:ef:ec:c2:
ef:3b:5c:e5:b3:20:d5:89:6f:cb:bd:01:37:7b:a3:5b:ad:29:
ed:3d:e8:79:ae:cb:45:1d:7d:28:49:c0:02:30:71:f4:1a:e7:
b0:b4:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:36 2025 by rpki-client