Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
File: a7031a07-12ba-45f8-a53b-6bd5b713c999.roa (raw, json)
Hash identifier: b5Ie/sNm79Qoa5IoUr6F61wYK4Scl3cJnZ7KbYFi4NM=
Subject key identifier: 96:2D:4E:1B:67:D4:8C:05:B5:8E:54:EC:9A:70:A7:F6:B1:51:45:E1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 044DD9D26B6EED2523F5F7BB942BE6F7F6297A47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
Signing time: Mon 31 Mar 2025 21:01:34 +0000
ROA not before: Mon 31 Mar 2025 21:01:34 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01a:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4d:d9:d2:6b:6e:ed:25:23:f5:f7:bb:94:2b:e6:f7:f6:29:7a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:01:34 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:44:fb:96:a5:4a:97:e6:65:f8:db:96:9c:
28:d6:1b:63:10:75:f8:6b:e2:91:09:a2:f3:88:ac:
5f:1c:46:cf:94:1a:df:cb:58:6c:03:db:cf:80:7f:
5c:c4:75:0f:f7:2c:74:b1:e8:31:38:30:88:ea:2e:
e7:80:f8:e0:1c:7e:15:57:b4:7d:95:07:4e:4b:62:
db:52:c8:8f:3c:3d:28:7f:12:4c:a7:46:9d:97:30:
dd:2f:a1:d5:b7:41:d4:3d:53:a3:8d:79:fe:e7:05:
87:69:d9:80:25:93:70:44:93:aa:8f:35:7a:ec:45:
e0:58:60:64:1e:6c:89:32:15:12:37:37:03:5b:16:
a8:f0:1b:39:03:7d:aa:e2:5a:12:40:5d:19:86:14:
b0:57:94:96:66:e5:f8:eb:23:c1:b4:22:86:62:71:
ab:6c:38:eb:d1:10:74:57:d0:d4:6d:be:bf:53:da:
82:62:c8:e1:fb:8f:4c:27:f6:d2:bd:bf:c7:83:33:
60:0b:bb:ce:79:ad:ee:76:71:3f:f7:f0:67:5d:68:
8b:ae:36:c5:ec:9d:3e:48:a0:04:c3:c1:86:8b:b9:
07:87:61:ef:05:a2:c2:86:33:a1:c5:df:da:fe:2e:
a1:03:6d:d3:30:03:97:1b:d3:c0:3a:63:f2:ec:9b:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:4E:1B:67:D4:8C:05:B5:8E:54:EC:9A:70:A7:F6:B1:51:45:E1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a7031a07-12ba-45f8-a53b-6bd5b713c999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01a:400::/38
Signature Algorithm: sha256WithRSAEncryption
6a:0e:9b:78:42:19:54:9c:4d:66:84:d4:37:3b:a1:13:76:f3:
97:b9:77:13:25:8e:91:37:a0:fe:db:67:71:86:7e:0c:ca:20:
73:fd:79:e5:fe:4e:38:80:96:af:ae:97:d2:23:6d:2c:35:bb:
bf:01:5b:2f:bf:c1:3b:76:fc:6a:96:54:09:d8:f2:15:86:f2:
05:8d:6a:e1:2a:9e:1a:1d:2e:54:b8:08:33:90:98:50:85:f9:
27:28:62:a6:1e:c3:66:65:bd:69:fb:d0:7a:0e:0f:01:1f:99:
0c:bf:4e:2f:dd:b5:19:0c:15:9a:87:e6:7c:4e:3f:de:71:1e:
2b:cd:93:b5:10:39:62:db:cd:33:cd:04:d1:ff:d0:59:1a:82:
5f:82:0d:af:6d:e5:2b:18:3c:5c:a1:56:20:d0:03:f2:6e:8b:
26:8c:48:75:94:84:88:02:64:d7:c3:65:36:bc:ae:75:31:81:
11:bc:76:34:c3:9c:48:b1:63:a8:0f:a9:e1:ca:65:4b:15:c3:
0c:e2:32:1d:bc:d2:44:61:c9:fd:6d:6d:c3:5c:24:30:9b:bb:
16:c5:da:9b:cb:67:2d:50:e1:cf:32:fe:5f:b7:9a:ee:3f:0d:
55:2f:be:63:6b:a5:c8:ca:1c:c7:29:24:17:b9:a4:5c:72:08:
d3:cf:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:48 2025 by rpki-client