Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d58ca6-603e-42bb-a0a9-7fb106bb4de2.roa
File: b8d58ca6-603e-42bb-a0a9-7fb106bb4de2.roa (raw, json)
Hash identifier: g7Wnk2RKFCni4dRLi4QJXNMAN561A1yOR+9MvQwQPdo=
Subject key identifier: 69:36:94:EB:41:78:51:71:8A:EC:FF:52:67:D3:78:74:12:6E:50:58
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BAD877FEFD67863EBD77BF548A684450D271355
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d58ca6-603e-42bb-a0a9-7fb106bb4de2.roa
Signing time: Mon 31 Mar 2025 19:50:06 +0000
ROA not before: Mon 31 Mar 2025 19:50:06 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ad:87:7f:ef:d6:78:63:eb:d7:7b:f5:48:a6:84:45:0d:27:13:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:50:06 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:45:5e:5e:df:5e:5c:f6:51:ef:7a:38:d7:
a6:78:d2:b2:8e:68:cf:98:85:af:69:c3:37:f0:17:
c3:40:07:ed:59:45:6d:6f:20:04:27:f7:66:85:21:
df:79:71:68:9f:25:7f:53:c2:31:48:1b:9b:7d:37:
44:11:5c:d1:67:23:8a:15:95:a5:29:2f:89:70:87:
14:c9:45:d0:4c:b8:f6:69:3f:88:8a:3b:f6:f6:ae:
a7:1a:62:ea:1a:29:1c:96:3d:30:d3:dd:b3:a7:e3:
34:a6:c3:e0:d6:a5:c2:f2:2e:f9:6a:42:ca:e6:5a:
09:2b:7e:3f:83:87:43:0a:cd:28:65:f7:c0:29:c3:
1e:8e:1b:06:97:19:c7:1d:2f:69:1e:55:34:04:8e:
0e:2f:b4:ce:82:68:49:62:72:13:86:ec:3a:19:a2:
d5:b4:59:b0:2c:dd:4d:66:ec:13:ac:bd:08:b7:6b:
b3:ca:af:39:b9:9f:a5:a8:86:c3:35:e5:bf:21:5b:
ae:43:1a:1c:f1:a8:15:a0:d6:c9:b5:42:b3:16:b0:
1b:e8:36:3e:f6:a6:93:46:56:db:43:51:29:92:d4:
ce:f1:3d:2b:b1:c8:56:6a:fd:f9:2a:e8:12:d7:08:
11:e9:0c:89:45:e1:5d:31:d2:19:7e:e1:b9:64:bf:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:94:EB:41:78:51:71:8A:EC:FF:52:67:D3:78:74:12:6E:50:58
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8d58ca6-603e-42bb-a0a9-7fb106bb4de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:1000::/40
Signature Algorithm: sha256WithRSAEncryption
07:9d:cd:56:b1:5d:16:66:1a:a6:c0:ea:dd:6d:71:5b:f0:05:
62:fd:ad:13:99:14:2b:41:33:84:fe:d5:31:bf:22:1b:3d:f4:
0f:d9:cd:dd:03:a7:d1:21:10:ba:b5:c5:26:2c:a3:1b:85:b0:
6c:60:68:98:11:b6:d8:9e:ba:7e:af:3b:6c:c9:a9:d4:17:63:
39:16:d2:52:93:5b:8e:3c:c9:ed:b8:f2:42:76:87:2b:58:30:
ce:0f:07:b0:cf:14:94:da:f5:3f:29:c0:92:72:57:22:68:5b:
a6:54:ab:08:b9:78:2e:67:7a:08:d2:d3:16:6e:b5:dd:9d:83:
ad:fa:f3:ed:29:54:4f:6f:93:52:26:b2:72:08:8c:6d:e5:89:
1f:55:c3:7e:69:30:4c:8b:15:48:dd:80:ec:38:ed:ed:d8:14:
75:a8:9a:83:08:de:b8:e6:72:c9:5c:e6:c4:a6:3e:08:e7:7a:
2a:81:bb:8c:ac:18:9f:55:2e:f5:51:4a:c5:0e:38:3b:79:8f:
13:6f:f7:69:79:c5:41:62:61:a5:78:e7:bf:0d:44:54:ad:99:
78:f7:4f:0c:f5:26:1e:7f:76:99:31:ad:89:a9:50:3d:09:ba:
14:64:1f:98:f2:7f:ef:54:d3:ae:03:00:91:d6:4b:3e:92:64:
6f:9b:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:19 2025 by rpki-client