Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
File: ad017d4e-10ed-4706-a728-1b3d3feae80f.roa (raw, json)
Hash identifier: Ywarwmp5uph/QS5Pw4IeKyDXuGYft+8/AW1UDw6rAt8=
Subject key identifier: 29:AF:CC:39:EF:67:38:4C:EA:3A:0B:08:37:FE:74:D9:A1:E8:23:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 33D8F8968B48F9F2430971B81B2C58A02C3F4B7F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
Signing time: Wed 02 Apr 2025 00:30:38 +0000
ROA not before: Wed 02 Apr 2025 00:30:38 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d8:f8:96:8b:48:f9:f2:43:09:71:b8:1b:2c:58:a0:2c:3f:4b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:30:38 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:66:4e:c0:66:f3:51:19:ee:2a:f3:db:45:
85:3b:b2:7a:e4:42:3f:02:d9:62:32:15:27:ab:f5:
44:51:0a:50:29:09:fc:ab:de:2c:f8:d0:c9:91:ad:
29:e4:08:2d:0a:0d:3b:11:67:46:b7:53:fc:6d:c7:
7a:c1:d8:16:a4:9b:f1:18:e1:50:2e:34:e6:f7:ef:
01:6e:83:b5:68:65:ef:32:37:24:d1:14:65:7f:24:
61:7d:31:1b:3b:61:ed:1b:10:fe:fa:f5:ba:30:d3:
aa:a4:e3:25:de:4b:29:2f:82:dd:5c:53:8e:8f:50:
8b:50:3f:15:66:6d:7b:0a:3c:40:02:4b:1d:27:28:
0d:a6:4c:2c:87:23:e4:6a:d0:61:41:45:db:f2:9a:
bd:bd:e4:30:4c:97:a5:11:1e:c3:c8:75:e5:f3:c3:
f5:bf:1f:89:92:89:d0:94:7f:7a:d5:69:1b:72:9f:
3e:b0:d2:9f:8f:9e:2e:6b:78:9c:b1:53:21:79:6d:
85:92:39:38:9e:35:c1:be:d6:01:63:ef:b5:c9:85:
6a:82:3f:ca:04:c5:51:e0:cb:6c:4a:86:8c:f4:cb:
44:6d:bc:11:2f:79:7f:1d:f9:63:3d:10:8f:28:ee:
03:f0:2f:79:e4:c1:e8:1b:90:11:b5:08:b7:f4:e4:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:CC:39:EF:67:38:4C:EA:3A:0B:08:37:FE:74:D9:A1:E8:23:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad017d4e-10ed-4706-a728-1b3d3feae80f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
20:9a:4c:35:3c:96:bc:61:93:e9:ee:3f:8e:d8:79:67:97:06:
f0:72:bf:a0:70:7d:08:93:30:40:21:f8:99:ff:1d:3a:8e:64:
50:5f:ab:9f:1e:ba:47:cf:9a:2f:fd:90:73:4b:75:df:47:8d:
96:34:59:3e:36:86:2a:4b:2a:78:84:53:79:16:f6:d0:40:6c:
b2:ee:aa:df:bd:17:44:56:e4:ea:b1:da:a9:bd:31:27:8c:85:
9b:dc:37:89:af:64:36:03:76:91:12:a2:ee:4f:8f:bc:ee:e4:
c8:b6:e0:7c:08:15:54:9b:ae:cd:0d:8d:2f:19:47:33:de:a0:
4e:fd:5c:4f:49:f0:ea:5e:2e:6f:e1:94:c8:9a:fd:bc:4c:7c:
25:47:f6:10:c0:f2:78:a5:25:c2:36:89:3a:f8:db:80:f6:93:
09:b2:88:23:33:a7:06:17:e3:a6:6d:a7:cf:d1:68:9c:41:40:
df:83:4a:f8:ff:a9:25:b6:03:f6:08:3c:9e:90:5e:f9:d9:ee:
12:50:51:87:0c:da:77:a7:f5:94:69:a1:37:d4:d4:bb:4c:99:
44:9a:23:ef:a6:ac:7d:2e:b0:dd:41:7c:03:16:ad:2f:f5:a1:
09:b3:2c:46:73:e1:63:35:b7:4b:80:3e:0c:fe:35:c0:aa:00:
23:b6:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:48 2025 by rpki-client