Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
File: a5076366-3004-428c-8b4e-9132d17cf171.roa (raw, json)
Hash identifier: CJ59AWwRXqPVLkSr1cDYY6mGR7kwmrOpyO4SRp+vi9U=
Subject key identifier: FA:8A:55:9E:1D:2F:ED:DA:90:CA:DB:ED:26:EF:4D:5C:17:88:D3:12
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51B26B21C2120EFC54344F0025EAADEEDEA52224
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
Signing time: Mon 31 Mar 2025 20:10:50 +0000
ROA not before: Mon 31 Mar 2025 20:10:50 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:1080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b2:6b:21:c2:12:0e:fc:54:34:4f:00:25:ea:ad:ee:de:a5:22:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:10:50 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:9b:86:0b:d4:c9:67:19:29:91:eb:cb:16:
aa:48:e3:88:6b:eb:a5:7d:e0:be:80:05:be:65:c5:
e1:fd:77:e1:14:d1:69:3a:fe:33:23:30:d2:b8:30:
2d:78:b7:2f:96:f2:84:ac:ed:18:1b:5b:b8:e1:d8:
7c:92:71:af:03:5e:f2:ce:5a:5a:b6:c6:8e:3c:e5:
0c:cc:4b:58:4a:75:55:7e:19:30:ca:41:92:a2:c2:
8d:50:de:ef:54:e2:9e:1a:24:1f:2a:97:11:32:16:
ae:f1:05:6e:c9:c5:37:bf:7c:22:83:54:d9:5b:2f:
bc:5a:55:41:90:c7:b4:fb:d8:17:c5:30:be:c7:1f:
e8:d0:b9:04:a8:bf:8c:6a:e7:f7:1b:9f:17:93:de:
2c:25:4b:de:d6:4f:87:7d:9a:ff:27:d6:8c:67:dc:
7f:fc:9c:3b:41:a3:bd:27:63:58:ed:e0:28:e7:e0:
14:97:2e:1e:52:10:00:81:27:16:3e:aa:9d:51:50:
6f:b1:37:9a:f7:87:60:e7:70:4c:2c:94:9f:24:67:
bc:3a:f9:db:56:8f:82:7b:11:ec:e3:4e:fe:bb:59:
a8:33:8f:4f:00:de:0f:f9:15:13:ec:15:ac:c5:e8:
e7:1e:ae:9f:cf:4e:d9:9c:d1:4d:20:d1:31:06:11:
ed:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:55:9E:1D:2F:ED:DA:90:CA:DB:ED:26:EF:4D:5C:17:88:D3:12
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a5076366-3004-428c-8b4e-9132d17cf171.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:1080::/46
Signature Algorithm: sha256WithRSAEncryption
38:f0:0b:7f:11:69:86:c9:79:01:7b:ce:04:be:51:de:bc:f2:
15:b5:49:f9:bf:a3:b3:0c:27:a9:76:92:e5:7a:02:f3:1f:7e:
5c:83:24:25:eb:81:5e:28:fa:b4:72:26:bc:fc:6f:ea:4f:86:
94:fe:e0:95:41:98:bc:15:8e:b5:87:ba:43:cd:34:31:34:08:
db:a5:a9:67:45:84:68:a5:8f:49:96:74:33:5d:ab:0f:c4:0c:
88:7d:d7:dd:70:1e:42:40:c8:0e:f1:68:e6:41:0a:53:f6:18:
45:ee:40:5d:0a:47:eb:b7:19:ba:86:71:37:be:39:b4:24:16:
c4:8c:e4:d1:fb:02:22:58:e3:cf:98:66:b7:a6:07:da:fb:16:
3f:b8:80:0b:a4:b9:41:83:c1:2f:f0:13:13:d4:32:d0:1d:50:
9d:f1:42:75:b4:1f:3f:28:79:0f:1f:22:d6:17:bd:f0:5a:c2:
12:34:e0:39:68:bb:70:ae:5a:e5:72:5a:0b:7b:d1:ee:3e:51:
8d:86:8e:31:54:00:e5:7d:22:11:78:e0:df:95:ee:5c:94:50:
8e:3e:58:e4:11:bd:1d:41:3e:a1:bc:36:06:a4:84:fb:58:fa:
e3:96:5b:fe:f1:f7:20:2f:00:64:f4:50:99:b6:ce:f7:8f:2c:
9f:fa:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:05 2025 by rpki-client