Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
File: 99404275-57dd-4a36-8c29-529ab06d1d00.roa (raw, json)
Hash identifier: MyU8z/rGrC7aUYpjgCzGzadagK9aOUFzOVi2Lq8kqjU=
Subject key identifier: D5:E5:2A:22:D1:71:64:33:93:3C:9D:D9:B3:F0:56:0F:46:0A:69:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6278D45FCFA80A257D9E9C5A03F5EBD398C35D76
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
Signing time: Mon 31 Mar 2025 20:50:20 +0000
ROA not before: Mon 31 Mar 2025 20:50:20 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:78:d4:5f:cf:a8:0a:25:7d:9e:9c:5a:03:f5:eb:d3:98:c3:5d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:50:20 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:5c:c1:9f:5f:8a:85:e5:6d:7e:5f:ea:13:
61:d7:c9:7a:a2:69:73:1f:c2:ee:7a:f1:82:22:aa:
76:65:ad:a9:1f:6a:7c:41:21:93:53:3e:f5:ea:93:
85:1c:51:d3:43:94:39:f9:21:ee:03:8e:11:fd:5e:
da:fd:43:22:6a:97:1b:fd:9f:41:36:89:30:e7:aa:
34:2f:cd:7c:0f:10:bb:76:9b:41:93:f2:12:c2:c5:
6f:8e:a8:c0:ee:93:5c:83:c5:ec:05:02:0e:0e:20:
13:fc:e1:a3:5c:55:e0:7c:e1:8f:61:6b:2e:ed:83:
0e:e9:a9:4c:8e:d7:1a:2e:2c:e6:eb:b8:a6:c4:ca:
40:2b:08:fe:04:26:92:4f:21:06:80:4e:46:ed:21:
c3:77:a4:0c:f3:df:70:22:dc:f7:3c:00:8e:aa:d0:
c2:f4:54:c0:16:fd:27:7c:21:a8:f6:cb:fe:2f:78:
9b:00:7e:2b:8a:e4:e3:26:a8:94:1f:a9:f1:bc:c6:
9c:aa:60:47:53:43:66:27:17:82:b7:1f:b4:51:cd:
1e:46:4c:75:91:97:cc:88:37:6f:b1:9c:73:ae:8e:
d2:ce:c3:8f:7f:59:c6:b3:7a:bd:95:40:c1:1d:6f:
51:e5:ce:e0:21:0c:a5:08:b1:62:56:25:8e:9e:b0:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:2A:22:D1:71:64:33:93:3C:9D:D9:B3:F0:56:0F:46:0A:69:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/99404275-57dd-4a36-8c29-529ab06d1d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:b000::/40
Signature Algorithm: sha256WithRSAEncryption
21:9f:8c:44:d5:f3:10:e1:54:53:f1:2c:99:e4:e6:7f:05:b6:
5e:ef:3c:8d:4c:49:8b:19:fa:43:0d:b8:c4:cf:d9:99:33:0b:
a5:0d:c3:cc:87:8e:51:1a:55:09:79:11:be:ae:da:7d:05:2c:
5a:99:af:3a:52:cb:eb:ff:ad:eb:65:33:ea:d8:61:4a:48:22:
a9:30:b9:25:0c:bf:b8:7c:8e:ef:44:e2:fa:7b:92:f7:a5:b6:
f2:22:59:31:90:96:01:51:83:32:cb:fa:f7:c6:b0:c2:38:05:
df:8f:11:e5:ae:02:5b:2e:d6:37:12:b8:d5:21:94:e1:58:27:
76:fa:eb:bb:a5:02:d5:51:94:c3:e3:c8:43:5c:b4:40:23:db:
cf:46:8b:28:2b:73:35:86:94:8c:de:40:f1:d8:24:a2:d7:26:
00:70:0b:c5:84:1e:e8:20:ff:cb:98:08:c2:b5:6e:ce:7d:0f:
0a:72:7b:73:59:3a:3d:63:86:41:22:1f:3c:31:63:cf:5f:c7:
7d:49:63:e0:50:bb:75:4f:9f:68:09:62:71:5a:be:ce:af:8f:
f7:34:af:2c:a3:39:79:b9:74:59:0d:69:02:03:b3:7d:c3:6d:
92:1c:a1:c5:9c:9e:e9:f7:39:c0:d1:bb:2c:da:5b:b8:da:98:
5c:41:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:10 2025 by rpki-client