Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
File: a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa (raw, json)
Hash identifier: 5ZJQdCH6/iCSGo+MFnjTZUabegi/zYeu1b97EE9BbyY=
Subject key identifier: C3:CD:01:60:5E:DA:DE:7F:2D:AF:DD:B3:F7:3A:BF:9E:DE:E1:93:F6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3BEBE8B4DB5E281A1D7DA518A235B6F2FA9A4300
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
Signing time: Wed 02 Apr 2025 18:52:12 +0000
ROA not before: Wed 02 Apr 2025 18:52:12 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d010:8c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:eb:e8:b4:db:5e:28:1a:1d:7d:a5:18:a2:35:b6:f2:fa:9a:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 18:52:12 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:3a:a6:40:53:84:81:cf:98:0b:6d:06:a6:
f6:3b:d2:90:2e:56:0b:ab:df:83:cc:32:91:81:47:
9c:4d:10:a8:ad:41:ea:cb:9a:76:46:60:ec:ce:83:
08:fd:4b:03:12:2c:5f:da:62:0d:4b:5f:78:b4:39:
59:54:5e:8d:35:7a:08:1e:c6:87:dc:c1:7a:8e:03:
fe:a6:1c:ab:69:65:6c:77:d6:05:39:b2:38:71:77:
76:d3:31:fa:3c:be:41:b8:14:db:f4:46:ea:8c:c3:
e6:03:9c:77:2b:60:73:74:d2:ee:9f:46:b8:8a:80:
a3:06:eb:f0:59:5d:4e:95:53:2f:4b:90:58:aa:dc:
f3:fa:b5:1b:8a:4c:b7:85:ef:8c:5b:6d:5c:6f:6b:
3d:ba:14:89:b7:48:a4:5e:47:bf:15:8f:ab:2c:83:
8f:60:70:be:ad:91:62:bf:8b:a2:2e:55:14:61:57:
27:9c:f5:88:e5:ad:93:a7:16:20:7b:a6:46:b5:6f:
b7:50:8e:63:eb:9f:07:1a:97:fd:86:e4:fb:4e:30:
a1:60:0e:b8:b3:17:f2:86:15:38:f8:bf:ba:6c:7e:
98:b1:b3:59:20:b9:4e:77:b5:ee:91:0b:f9:50:ae:
08:04:58:37:f0:e0:46:6d:3a:cc:a5:6a:dc:65:2d:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:01:60:5E:DA:DE:7F:2D:AF:DD:B3:F7:3A:BF:9E:DE:E1:93:F6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a9a4f3cd-603a-4fdc-bd65-8d9488d4fd09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d010:8c00::/38
Signature Algorithm: sha256WithRSAEncryption
55:b4:35:bc:49:c2:2e:af:64:48:2a:68:53:f4:3a:4a:f5:30:
43:43:34:14:b8:68:9f:2c:ab:1c:0e:86:be:7f:8d:62:c9:58:
00:26:2a:c6:af:f7:0b:5a:5a:8c:93:6b:7a:86:f8:4f:8a:1c:
e5:11:70:9a:f9:98:59:82:fe:04:e4:fc:e3:80:7e:fa:6d:55:
5f:37:0f:08:67:ab:28:ca:d8:2d:8f:5f:0e:1c:c4:cc:6d:55:
c8:ca:4e:b0:fb:cf:55:96:ac:d3:a0:70:53:c9:be:75:97:49:
a1:70:78:c0:af:7d:99:69:02:d4:a1:76:db:df:42:2d:db:bb:
51:29:af:f7:90:9c:9e:c8:d4:4d:ac:0d:fb:a7:57:47:47:e1:
89:7c:cd:49:19:c1:27:32:a7:1c:c4:94:d7:71:29:63:29:3b:
a5:1d:1c:04:f9:a3:37:a7:42:92:a9:01:57:8d:91:12:31:fa:
a8:ae:c4:0c:ac:11:ed:70:d6:93:a3:29:74:e0:94:19:19:63:
64:59:4a:c6:73:ff:37:6c:38:be:dd:cc:55:bd:f9:9d:eb:26:
94:94:07:c1:39:fa:43:56:d7:6a:88:c6:47:38:ec:d6:b6:29:
51:f5:b9:67:4a:c2:b9:3f:9b:9e:34:65:b6:28:ba:a3:39:21:
1e:56:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:33 2025 by rpki-client