Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
File: b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa (raw, json)
Hash identifier: IoBwMOXcR5MLw9KFd6Skxty7+/kg75eplm2Ik8DK/zU=
Subject key identifier: AF:75:60:EE:05:75:61:26:AF:89:1B:30:A0:C0:38:F7:F3:9A:9D:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F31DA7C12B21BDAAAD38BE1BB6979B07F95A237
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
Signing time: Fri 11 Apr 2025 00:40:11 +0000
ROA not before: Fri 11 Apr 2025 00:40:11 +0000
ROA not after: Fri 16 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:31:da:7c:12:b2:1b:da:aa:d3:8b:e1:bb:69:79:b0:7f:95:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 11 00:40:11 2025 GMT
Not After : May 16 23:59:59 2025 GMT
Subject: serialNumber=aa6e2ac16d38aa015b46d276ccfa8cbe6e9cdf238f5aa8ead2754598b994c17f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:75:24:d7:ee:c3:88:95:b2:88:93:7a:65:
8a:56:d8:0d:68:27:9a:dd:fa:45:85:aa:9d:12:8e:
d1:02:b5:b7:87:44:40:f5:7e:67:f0:c8:60:e2:36:
23:b4:5b:98:8d:b1:8c:35:99:1d:01:82:5e:d2:06:
00:5f:1c:fe:44:e9:95:9c:42:3c:c5:6e:ef:d2:b6:
dd:ea:2f:e5:40:c1:5f:78:2b:0a:e1:d9:83:78:c3:
f5:f7:d1:40:18:3e:54:f3:d3:48:e6:4a:c2:dd:19:
50:61:af:1c:5b:a1:58:8b:90:35:be:a9:54:f7:8c:
91:6b:ae:f8:e1:a6:ae:4b:d6:bf:ae:e2:76:5d:03:
54:14:3a:43:0a:2e:9f:7b:5d:aa:56:ba:58:40:77:
eb:8b:0d:1e:8b:5d:c2:24:90:79:32:3e:c4:c8:b3:
27:8d:c3:03:97:3c:5d:b1:ab:eb:cf:c5:54:76:09:
1d:99:e0:08:44:cb:6e:23:30:f7:7b:d9:5f:20:17:
db:47:e9:c6:01:8a:25:50:6b:89:2e:19:49:a6:70:
5d:da:c6:12:9e:00:1a:ca:53:ba:4a:73:af:0b:8b:
b0:a8:aa:a6:1e:af:b4:ae:75:cc:23:0c:f0:4a:5b:
48:b2:f0:72:a6:a9:db:89:b8:29:c5:87:f0:87:1e:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:60:EE:05:75:61:26:AF:89:1B:30:A0:C0:38:F7:F3:9A:9D:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:8000::/40
Signature Algorithm: sha256WithRSAEncryption
6c:1a:b8:9b:ba:7f:8f:9a:0e:96:3c:65:ca:1c:0b:76:48:05:
cd:80:88:18:92:21:78:92:24:9f:b9:f2:13:0a:dc:7a:bd:50:
90:3f:49:8b:88:49:54:55:fd:6d:b7:54:4b:57:0f:c1:63:06:
6e:c1:09:fc:8d:75:e6:3b:6d:a9:e3:9e:65:f5:c7:0f:ee:d4:
af:5d:8f:7f:34:d2:35:de:f3:da:36:3e:66:d5:86:cf:1f:2b:
a0:29:e4:65:12:4d:00:5b:cc:4a:e6:75:0b:9f:48:d4:df:aa:
7e:10:bc:b2:f9:0a:b7:fb:ed:dd:37:8b:9e:e7:78:0a:30:b6:
10:02:f3:f1:c7:ba:28:f9:b2:a6:b1:0b:62:61:ef:69:a9:8c:
c2:31:e7:01:0f:7d:6c:ce:77:5b:9e:b8:68:6c:31:74:92:33:
5b:93:6a:41:74:50:06:d3:8d:bd:dc:55:f8:94:2f:a1:58:98:
ce:f1:41:e1:33:62:4d:8e:65:b4:97:d5:4a:96:52:8c:4b:bf:
52:ff:af:58:a4:34:38:54:a5:8b:4a:c0:32:04:c3:06:04:6a:
7d:15:a2:e4:29:e6:7a:fe:c9:ec:93:ba:ca:0b:cc:2a:34:83:
d9:02:04:43:bc:4c:92:71:93:1a:fd:80:7b:b3:71:08:36:4a:
69:79:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:01 2025 by rpki-client