Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdad1cc-641a-4187-9b79-fc696cb535f5.roa
File: 9cdad1cc-641a-4187-9b79-fc696cb535f5.roa (raw, json)
Hash identifier: rmIGlYLtWrNh2oQRXA2t8K98G84oqXaPPkwnhlOHfss=
Subject key identifier: 42:5D:0E:27:43:E2:7D:60:7A:C5:5E:4A:2C:07:F8:A0:36:74:16:5C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 24BB6083554503FE8B8FE72C714D9943019EBF1B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdad1cc-641a-4187-9b79-fc696cb535f5.roa
Signing time: Wed 26 Mar 2025 19:37:15 +0000
ROA not before: Wed 26 Mar 2025 19:37:15 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bb:60:83:55:45:03:fe:8b:8f:e7:2c:71:4d:99:43:01:9e:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:37:15 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:ae:f4:e1:f1:27:7b:f6:d9:08:f5:a9:8a:
15:81:37:aa:02:4d:b5:7e:ec:2d:d5:6d:45:4e:f2:
d3:59:11:4e:f7:41:4d:9e:f6:a2:18:84:1b:ed:7b:
32:e8:a2:47:2f:0a:b4:e1:6d:f9:e1:7c:3b:84:c4:
43:c8:d6:b6:4f:f6:92:7b:92:d1:81:85:17:65:a2:
db:3a:d2:92:25:5c:3f:e1:2a:fe:84:96:01:74:4e:
49:e8:46:a9:2b:51:cc:99:10:41:b3:5a:bf:9b:db:
95:cf:5b:7f:77:a3:5c:cd:0a:29:a3:98:b2:dc:a4:
31:5d:35:66:a9:c8:04:17:6f:25:af:38:3a:70:26:
7f:af:ab:db:e9:85:70:0c:03:f1:0a:c5:62:3e:fa:
27:a8:68:72:1a:54:da:63:fa:6d:5d:3a:4c:24:b2:
39:ee:17:a0:e8:c5:fa:30:0e:f1:83:dc:66:d2:2c:
b2:c1:ad:b4:0a:d3:dc:ab:ea:7f:16:6f:d2:f6:ff:
f9:71:71:62:d0:5f:e0:b6:2b:a0:1b:69:70:a2:4a:
c1:d2:c6:fc:3f:7d:41:2e:37:fe:61:a9:97:fc:8d:
0f:d8:bf:e7:5d:3f:24:d2:07:d3:d6:57:7a:37:b0:
a9:e8:b4:14:ee:4e:9f:71:b4:d0:a6:87:4e:63:a1:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5D:0E:27:43:E2:7D:60:7A:C5:5E:4A:2C:07:F8:A0:36:74:16:5C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdad1cc-641a-4187-9b79-fc696cb535f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:800::/40
Signature Algorithm: sha256WithRSAEncryption
39:62:84:ad:28:85:62:ac:3c:93:9e:da:ba:6c:20:71:f8:89:
ef:82:b6:1d:e6:be:33:be:c7:e8:8f:c6:fd:c6:e2:5d:92:dc:
3c:3b:97:58:77:77:1b:f7:ab:1e:d3:19:ad:fd:44:a9:3a:ec:
aa:b2:c9:ee:10:b3:8f:75:43:eb:1d:f4:85:51:10:6e:10:52:
b5:59:47:61:e8:68:03:2f:c0:80:f9:0f:99:9c:fe:dd:24:8a:
4d:e6:e5:d6:c9:51:ad:17:f6:08:88:96:34:bb:76:a8:0b:01:
e4:bc:c6:56:28:5c:b1:03:36:f6:22:09:88:53:51:18:98:22:
ca:03:73:af:e5:fa:59:c5:ad:95:1f:0a:d2:f8:04:67:5b:64:
82:9c:fb:be:ef:d4:e1:12:28:b0:f9:1d:40:7a:a3:30:eb:bb:
2f:6d:d1:1d:8a:77:0c:05:4a:e8:b7:a9:04:f4:ac:de:48:7e:
0e:7f:a0:f3:fb:7b:43:79:81:59:d7:7d:7a:31:a8:83:dc:1e:
65:db:d8:ff:ed:ae:46:5e:e7:bd:c5:01:e4:c0:d9:ed:75:4e:
0a:85:99:7c:30:8f:d8:63:04:13:ce:76:f7:e2:93:72:e5:b4:
cb:ba:63:ab:2f:d8:38:07:d9:28:6f:9e:f7:e0:b5:19:86:4f:
43:0c:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:14 2025 by rpki-client