Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
File: a96d9971-6d4e-47a3-9408-d633699b643b.roa (raw, json)
Hash identifier: QMwHNVkApwTXTWvLstODHXyB9nakUQ9Ktp14XRGjxv0=
Subject key identifier: 8E:5C:37:F1:E8:D0:EC:CA:85:80:6C:CD:4E:E3:B9:65:A2:14:AF:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 392F01F28C71D4A818309E720870D2DDAB3823FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
Signing time: Mon 31 Mar 2025 20:40:19 +0000
ROA not before: Mon 31 Mar 2025 20:40:19 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2f:01:f2:8c:71:d4:a8:18:30:9e:72:08:70:d2:dd:ab:38:23:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:40:19 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:fc:bd:f0:9a:dd:b2:bd:1f:5e:cb:28:78:
e6:42:3c:04:a3:da:24:b2:04:50:ec:d2:84:cf:20:
4d:8f:fb:32:e6:7d:ff:df:32:22:e9:49:a3:a1:6e:
5e:9e:62:a7:11:23:01:a1:f9:1c:8f:64:fb:4f:9e:
c7:c0:35:5a:47:68:21:ff:cf:e2:fc:49:14:fd:0f:
03:b1:e9:22:0f:f4:82:f6:2d:5c:94:e6:55:30:e2:
e2:80:b0:b9:82:82:de:59:48:26:db:b1:47:c0:6b:
ae:06:ea:07:d1:32:70:df:4b:d5:b0:c5:38:c7:ca:
33:77:72:d6:4d:7e:8b:2e:11:db:21:21:e1:4f:ca:
72:eb:77:aa:85:8a:75:3f:d1:f5:aa:18:c6:58:c0:
00:89:4c:76:cb:00:ef:00:8b:42:2c:d0:9c:6a:68:
34:b1:24:e6:77:b3:a8:0b:5b:c3:c5:24:dd:48:67:
9e:f9:bc:f6:97:b4:70:c9:49:28:3c:bb:32:ac:9f:
55:aa:03:fb:34:84:68:75:e8:37:57:2d:ac:de:de:
9a:1b:91:e6:1e:ff:28:d2:dd:85:07:c4:db:db:73:
98:48:02:29:98:03:d7:3d:c1:1d:10:47:9e:28:9c:
b0:29:b3:28:81:de:0c:a5:54:3b:3d:a4:86:a0:6f:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:37:F1:E8:D0:EC:CA:85:80:6C:CD:4E:E3:B9:65:A2:14:AF:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a96d9971-6d4e-47a3-9408-d633699b643b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b0:c1:cb:eb:36:ba:d8:0f:17:5b:6d:6b:9b:4b:24:63:b9:73:
2b:80:31:5d:7b:6d:c9:11:ff:ab:55:01:e1:47:e4:e0:3f:0c:
84:cb:9c:79:64:6b:a1:c4:11:86:22:1c:dd:cc:54:22:b0:40:
7b:7f:ec:a0:46:40:b8:23:08:93:ab:60:c2:92:9b:66:48:2b:
53:d4:c1:95:73:4c:e1:ed:ef:33:da:e7:69:a5:3d:73:d7:f7:
e5:6c:e8:4b:2f:c9:4a:99:95:96:59:98:bc:7a:e9:10:83:32:
16:5c:bf:76:d4:92:5f:d6:2d:a7:7b:7b:25:0a:7a:ba:1c:0e:
6a:71:0e:14:aa:03:dd:50:95:72:34:c5:57:bf:9b:23:b2:a4:
31:45:bc:16:35:f3:a0:c2:64:8a:47:84:6e:48:25:44:a3:19:
76:7c:f6:89:60:52:08:8b:cb:47:73:55:a6:c2:a4:b1:e0:9b:
6b:50:5e:06:00:70:bb:67:fe:00:41:98:7d:2f:f7:5a:3b:28:
eb:d0:5e:a3:35:c3:a1:dc:e5:77:89:fc:ec:a4:9d:ae:41:2b:
8d:ad:87:3d:40:b1:54:c2:2f:a4:23:08:f3:93:c2:99:59:13:
e2:4a:d6:fd:f2:d1:f5:5e:91:bf:50:2e:3c:8d:9c:17:0f:39:
55:f1:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:49:01 2025 by rpki-client