Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
File: bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa (raw, json)
Hash identifier: h4i4s0ig+RFngIKJTucC7o0kLukt6XK/JLI6iJtb7ZQ=
Subject key identifier: 48:77:AE:18:2C:BF:79:14:16:0D:CD:FC:CD:05:08:E0:BF:7F:49:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0B4BDAB05231ADA11C704B4DE886141CC87223CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
Signing time: Mon 31 Mar 2025 21:00:05 +0000
ROA not before: Mon 31 Mar 2025 21:00:05 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4b:da:b0:52:31:ad:a1:1c:70:4b:4d:e8:86:14:1c:c8:72:23:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:00:05 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:65:87:d4:dc:61:e1:05:f5:cc:26:da:9f:
a3:d1:b3:59:a9:af:09:8e:05:df:b7:de:b1:a6:07:
11:69:28:9a:7c:c1:7b:ea:70:07:11:79:ad:ae:11:
fd:e2:d6:4b:e3:62:3d:23:50:1f:40:10:10:09:4a:
af:d2:f6:a9:cf:e2:a2:47:8d:71:ac:8c:5f:ab:5a:
b1:ff:8e:fc:41:3c:df:49:c6:81:3d:f7:1c:5c:09:
70:d1:91:60:0e:e3:cc:7b:8b:ca:b8:d2:25:85:4c:
5d:db:83:d1:c0:2f:09:b8:e6:47:75:e0:b4:d6:ce:
e2:2d:64:5b:6a:35:e3:d6:e3:30:c7:09:10:e9:20:
91:ff:46:88:b7:20:58:fa:0c:18:b8:56:d9:40:17:
1c:b2:0c:49:da:ee:82:1e:ca:2e:04:86:c9:14:b8:
da:d6:f8:23:47:c7:80:74:4b:15:7e:c9:64:98:dc:
fd:d7:16:94:5e:14:52:d9:df:9e:cd:62:22:89:bd:
2c:ee:5d:4a:02:0e:25:45:fb:15:50:6f:23:6b:ce:
7e:13:1a:34:2b:8d:95:bd:ab:32:2e:1a:2d:36:ff:
29:f6:2d:54:83:06:0e:a2:54:b7:38:18:c1:72:6c:
f4:21:10:c9:c3:30:c5:b0:c4:c8:10:e6:7a:5c:9e:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:AE:18:2C:BF:79:14:16:0D:CD:FC:CD:05:08:E0:BF:7F:49:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bb21710a-a37a-4476-ab6b-3d079e9d1cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:4000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:48:27:e4:0a:5e:b1:cc:70:6b:67:4a:88:78:aa:a1:84:bb:
f9:96:57:7d:dd:4d:83:c6:a0:7d:2d:16:6a:e7:64:1a:47:ab:
c0:d2:f3:ac:b7:4b:b1:93:2d:19:1c:e3:72:ee:d5:79:3d:6e:
56:e2:e6:1e:75:36:2d:fa:c7:96:b1:a6:fe:f3:c0:6a:4c:4c:
b3:53:32:f9:70:6b:83:fd:d7:78:54:65:fe:b2:77:1f:b3:2c:
40:ae:fa:0b:b3:78:9f:8a:e6:22:58:e8:73:dd:59:53:e4:15:
9a:81:b7:c1:ad:5f:46:d7:2f:76:02:c0:68:fb:b4:34:d0:fc:
53:8b:db:f5:bd:d2:69:77:f5:02:f2:d8:fd:dd:27:09:71:35:
2b:ff:49:0d:1c:0a:3c:f5:f6:1a:fe:83:b0:b5:0a:76:5b:22:
4f:d7:e7:62:05:b4:9f:a8:39:f9:05:1b:7a:fe:8b:a3:f0:d0:
1d:fc:93:80:6f:24:16:54:80:3c:0d:cc:a7:78:03:89:ab:75:
f5:08:ea:c2:7f:66:63:1e:16:c2:fe:5e:65:74:f8:3c:98:1a:
4d:b1:41:b8:3e:47:6e:3a:78:22:10:62:cb:1a:94:30:56:51:
67:07:79:00:32:5e:33:c2:37:82:aa:61:8d:5b:9c:e0:b5:b0:
f9:20:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:49 2025 by rpki-client