Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a72cbea9-100c-4974-8211-87debb0f6fbd.roa
File: a72cbea9-100c-4974-8211-87debb0f6fbd.roa (raw, json)
Hash identifier: qOaTAQWS6JdXEbdDy0W8e1ZgULUeRjvxGT++N0GPZjw=
Subject key identifier: 81:AD:70:80:10:AF:A0:18:D1:59:EB:12:07:82:6E:24:94:4B:2E:EC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C468E424F320E9C8DD4C8D77251E340094D4DC5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a72cbea9-100c-4974-8211-87debb0f6fbd.roa
Signing time: Tue 01 Apr 2025 15:01:10 +0000
ROA not before: Tue 01 Apr 2025 15:01:10 +0000
ROA not after: Tue 06 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:46:8e:42:4f:32:0e:9c:8d:d4:c8:d7:72:51:e3:40:09:4d:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 15:01:10 2025 GMT
Not After : May 6 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:d0:1c:43:50:e8:6d:f1:e7:3b:8d:01:a8:
ca:cc:e4:34:e8:f8:c7:b6:88:19:15:15:c5:ac:bc:
ac:c4:cf:ef:83:2d:3e:40:95:0b:ef:09:da:a8:b2:
a8:26:d3:f8:b3:f1:14:ec:a7:df:a8:b3:1e:2c:c1:
2a:fb:ac:2a:3e:c3:a7:4d:c2:19:c8:20:49:58:14:
7a:a1:4d:d0:8e:21:35:da:5d:da:42:b3:1e:05:bd:
ae:51:36:4e:5f:cb:1c:2b:f5:9f:65:47:af:6d:1b:
83:a2:89:6a:1b:77:f7:50:a4:11:32:d4:90:2a:c3:
a8:ec:7b:7a:14:8a:dd:fa:e3:8e:95:25:f9:c2:a7:
de:d5:fe:2c:7c:df:ae:54:71:8a:ef:30:91:9a:1f:
1e:d9:d8:1e:fc:9a:9a:38:39:6e:25:06:f4:6c:51:
7c:eb:99:24:3e:8c:33:e5:38:d1:f8:a5:09:9a:cf:
06:94:84:f2:55:c9:a0:38:37:59:35:5a:31:c9:49:
2e:44:a7:a8:81:7f:f5:8d:6d:86:7e:65:b7:fe:51:
e1:a1:15:34:1a:db:71:6d:85:38:65:2b:d3:6d:85:
07:f8:ab:d6:84:d8:72:ce:f6:11:52:c2:09:da:6c:
72:e9:b8:85:c9:f4:98:ba:f2:46:0f:b9:da:dd:2e:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:70:80:10:AF:A0:18:D1:59:EB:12:07:82:6E:24:94:4B:2E:EC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a72cbea9-100c-4974-8211-87debb0f6fbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:8000::/40
Signature Algorithm: sha256WithRSAEncryption
5d:fd:38:31:e3:35:0b:c3:70:8f:08:06:21:ec:57:f1:74:e6:
e9:b2:0e:71:45:93:35:3e:80:c2:f4:94:bd:bf:60:e4:66:fc:
af:63:c6:14:43:be:0f:f9:6f:e3:d5:4c:79:8b:0d:2a:99:85:
0e:ef:2e:f9:fb:29:8c:9f:1b:74:67:13:13:b8:d0:22:e1:d3:
1c:6a:c0:e2:67:41:d6:69:80:f9:a2:46:e8:b8:6c:5c:56:34:
be:2b:d7:76:ed:b5:ad:bc:49:42:12:51:51:eb:2a:b9:e5:7c:
b3:ba:38:00:c0:2d:bc:47:df:37:3a:db:74:de:8a:f0:6c:7c:
e7:35:92:94:d8:79:34:a7:c9:c1:67:e8:65:e7:ba:c4:20:0c:
52:83:d5:cb:90:86:46:b9:99:9f:24:9b:d4:38:d0:b7:41:7b:
75:41:34:48:86:4e:02:e4:b4:bd:3c:81:55:09:6d:f6:fc:07:
e4:de:44:d3:7d:77:b7:e1:a7:17:f5:4b:f6:6b:61:1a:2e:9a:
e9:ef:85:ab:9c:f7:f7:b2:37:ec:5c:bc:d1:1a:4c:a5:e3:76:
3c:c0:da:ae:b1:d6:c7:06:f8:07:6b:d1:b6:df:07:6c:83:cb:
97:d4:5d:ff:85:f6:3d:f8:9a:d9:fd:a8:34:46:dc:dd:2a:1e:
e8:da:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:38 2025 by rpki-client