Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
File: bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa (raw, json)
Hash identifier: +pfnscA1tCBhP7AEs5m72nxTUh82Rq5hHHFda9trx04=
Subject key identifier: 38:DD:F9:36:B7:F5:46:24:5D:9F:20:13:EA:65:80:CB:93:93:06:D6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41669381C2ADA8337AB56DE1792B27F1F60C79FD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
Signing time: Mon 31 Mar 2025 21:00:18 +0000
ROA not before: Mon 31 Mar 2025 21:00:18 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:66:93:81:c2:ad:a8:33:7a:b5:6d:e1:79:2b:27:f1:f6:0c:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:00:18 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:ad:a8:22:77:9d:04:f1:55:47:fd:50:90:
ef:a7:35:99:87:01:f7:1a:9e:de:bd:f4:69:b8:6c:
33:a9:29:88:c1:63:d6:64:ab:33:20:e0:c2:f8:b9:
48:aa:18:f1:dd:b3:ba:a8:66:b3:11:a5:a0:35:3c:
fc:67:52:ba:b1:93:6a:13:1a:f2:85:f0:37:79:c4:
49:26:21:ef:44:3d:71:a7:c2:1f:e4:3f:87:2a:02:
8e:26:b1:81:08:fe:2a:6f:9a:f0:2c:da:13:a1:eb:
db:04:9f:80:82:ea:72:63:f2:16:89:b5:54:26:3a:
ff:ab:ea:b8:c9:4c:90:08:a8:4e:08:4d:4e:41:80:
ed:73:94:c2:cc:25:50:25:1d:e8:ce:6a:8e:0b:d6:
03:ea:fb:79:61:08:99:81:46:15:39:a4:82:0e:6c:
23:e7:32:f1:8f:84:74:cd:fe:e8:d6:70:2a:57:e3:
50:ba:2f:5a:53:e2:b3:f9:bb:61:84:a7:66:94:73:
83:96:a9:73:c3:22:41:fe:9d:7f:ef:b7:6a:5f:dc:
9b:18:ac:84:74:06:b6:5a:c0:52:67:b1:74:b9:0d:
7a:ad:b6:87:d6:c7:ed:23:8f:68:b0:c6:48:8b:6d:
5a:a9:a3:12:ca:8a:9e:85:36:28:3e:9c:b2:ba:9b:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:F9:36:B7:F5:46:24:5D:9F:20:13:EA:65:80:CB:93:93:06:D6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bc69f8f6-03c8-4468-a98a-f23fe40eeaef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:5000::/40
Signature Algorithm: sha256WithRSAEncryption
3a:fb:b6:a2:7c:9f:aa:38:96:fd:3d:40:16:c4:98:02:42:f0:
1b:18:1d:8e:9b:4e:03:72:01:0e:50:b4:da:c6:8f:b5:0e:ce:
3a:fa:07:86:c0:3a:1b:3d:0e:5c:9c:1d:f0:d9:f8:d1:89:15:
85:01:7b:96:bb:a2:d0:16:f7:85:ee:84:a4:3c:c4:36:45:25:
15:cc:69:14:36:cd:4c:6d:44:fe:a9:b3:77:dc:a7:95:2b:84:
52:af:21:34:9a:d7:ec:23:50:8f:cf:5d:4f:53:66:6b:b5:77:
99:4b:dd:5e:70:35:e2:d6:04:c8:4c:92:f0:a9:cc:37:35:db:
68:df:fc:48:35:5f:dd:98:ac:3e:bd:bb:9f:45:28:dd:51:1b:
3c:41:5e:50:58:34:a1:8e:61:2b:cf:4b:46:62:51:81:18:1f:
d3:e4:80:c4:b5:03:69:30:4b:7f:86:a2:6e:6e:63:11:79:03:
e7:4e:29:4e:5d:ef:2f:ee:2e:93:7b:cf:c1:97:9c:4e:50:16:
dc:4e:00:71:05:8e:df:43:b1:6a:19:7a:23:5b:34:a5:97:fe:
a8:15:c7:ee:42:16:42:5d:c3:a8:96:7e:ca:36:a2:f5:cc:41:
97:84:6d:9a:3c:6a:a5:ce:67:1d:b1:d6:c7:01:7a:18:72:14:
7d:49:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:34 2025 by rpki-client