Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
File: 9ee0a48b-ba88-465e-9e42-d0732351f46e.roa (raw, json)
Hash identifier: mSThSzBsPjYDXmpFwpbQ2x6RNOLPT5Fvx2IUr0ZdQkE=
Subject key identifier: 3B:03:16:08:35:C7:26:5C:B1:F9:55:96:0A:09:D7:90:4A:24:C8:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71D75D9EBDB4E3C1C9A840C58F2D9DEAC620F195
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
Signing time: Tue 01 Apr 2025 15:00:35 +0000
ROA not before: Tue 01 Apr 2025 15:00:35 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d7:5d:9e:bd:b4:e3:c1:c9:a8:40:c5:8f:2d:9d:ea:c6:20:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:00:35 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:57:fb:81:1b:5d:ff:fb:fe:a8:2c:93:59:
03:a1:26:31:1b:48:73:f4:e3:1c:3c:6e:ba:44:b4:
32:5b:ec:5c:e4:9a:00:c8:21:41:eb:97:5a:08:f8:
8c:6d:59:18:76:80:97:4d:e9:74:83:b1:bf:89:1a:
da:42:f7:1c:44:6e:d5:a7:69:b8:03:22:66:7e:42:
f7:22:d5:9d:d4:52:be:56:e5:de:3d:d7:a9:55:d4:
0b:30:38:ad:1a:70:d9:8b:22:98:ed:b6:4a:76:63:
25:5a:1b:4c:46:5c:8b:97:63:1c:f1:e8:6b:0d:94:
7f:f6:31:99:85:71:ce:61:0f:79:00:c1:5d:7e:c3:
84:4e:72:76:20:d4:f2:2c:3a:7a:59:f6:98:35:0d:
13:0b:39:c0:53:4b:9f:04:f4:37:a4:d6:80:f7:34:
79:75:cd:d4:be:ac:fd:c2:b2:33:09:8e:42:55:be:
32:1a:f1:0a:e0:f0:c3:ed:5b:7d:07:6e:f3:87:17:
48:a9:3c:a4:b3:90:2a:67:7f:31:bc:f6:f2:27:fd:
58:41:dd:2e:93:9f:5f:34:c4:34:1d:a0:b5:c7:8e:
a5:d8:40:08:05:89:12:47:c8:db:f8:d1:a8:4b:e2:
2e:d4:3f:99:e9:67:36:57:fb:58:f9:cb:18:c6:45:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:16:08:35:C7:26:5C:B1:F9:55:96:0A:09:D7:90:4A:24:C8:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:ef:c6:db:70:0e:6a:7a:b1:c8:ed:5d:16:b0:cf:03:f9:d6:
01:16:3a:96:2a:ed:19:42:db:6d:8e:e3:6a:ac:ac:ab:71:4c:
57:46:e1:00:f4:17:02:41:c1:bd:98:1d:ef:c0:83:fa:f0:a1:
ea:97:40:c2:98:da:bc:cc:c7:21:a8:23:75:97:2b:96:f9:08:
9b:6b:29:64:fd:d9:59:0a:92:56:55:a6:19:0d:e7:32:92:17:
a4:1d:00:cb:d9:2c:91:f4:56:ab:ad:9d:93:e5:dc:9f:44:23:
24:95:06:fd:49:a9:8a:a8:43:60:95:b0:63:68:ec:e1:d9:36:
f1:95:98:ef:31:cb:c4:43:44:76:20:a1:fc:53:92:a4:82:cd:
7e:50:02:f3:9c:ee:f3:74:ac:5d:46:50:e6:c0:a2:8f:fd:55:
9a:91:b1:36:b7:2f:fd:9a:93:cf:59:4f:18:19:9b:99:dd:ce:
4e:5f:76:e8:37:77:c1:1b:c9:5c:b7:dc:b8:69:15:4f:bd:71:
b2:92:9f:b1:7b:e9:16:85:72:f2:ed:a5:58:63:f3:eb:f4:c5:
b1:9f:bc:d9:1e:55:cc:de:68:41:cb:b2:1f:47:5e:0b:39:37:
83:5b:83:af:13:0c:cc:ba:dd:a1:69:4c:ad:71:b4:5b:d0:4d:
f2:02:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:26 2025 by rpki-client