Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddf3d6f-37b0-4b6c-93fa-2753d8700b96.roa
File: bddf3d6f-37b0-4b6c-93fa-2753d8700b96.roa (raw, json)
Hash identifier: 7qOPBAw9vTbUYCWrkR6esmOhYh5K3HDzaf89K5e9OFI=
Subject key identifier: E3:28:AA:DF:F2:B4:1A:2F:C4:D7:30:82:0C:D9:AB:5B:C2:A8:99:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5769AB35C35C3DD15B8D8764D1E9115B4ECD4247
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddf3d6f-37b0-4b6c-93fa-2753d8700b96.roa
Signing time: Mon 31 Mar 2025 20:31:13 +0000
ROA not before: Mon 31 Mar 2025 20:31:13 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:8000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:69:ab:35:c3:5c:3d:d1:5b:8d:87:64:d1:e9:11:5b:4e:cd:42:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:31:13 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:63:73:06:90:08:2a:77:d3:9a:7f:4c:2c:
61:e9:52:d8:53:5e:1d:86:07:ec:fe:8b:46:db:1c:
65:d5:34:60:7e:ba:73:77:f9:5d:23:04:a6:60:a0:
87:1b:c5:63:cd:4e:13:dd:89:70:7a:6d:10:dd:9b:
1f:67:62:8d:9a:25:8e:e3:dc:ed:02:90:0c:00:a3:
4f:f0:1f:6a:f7:4c:70:54:b8:a2:b0:60:a1:04:9d:
d0:43:df:94:1f:cc:8b:db:15:ee:58:c6:3c:6e:07:
b6:02:3a:c1:78:0f:f3:fe:5b:8d:c4:8d:82:42:5b:
a5:c1:1f:e0:63:ab:92:09:3d:b3:68:10:4b:3a:ee:
d7:c3:e9:b8:dc:17:68:08:c8:50:06:e9:1b:39:4e:
6f:1a:45:40:e9:64:b1:f3:bc:14:06:17:6e:fd:69:
2a:d5:fd:45:c0:d3:84:82:de:16:38:b6:eb:55:ab:
91:1d:1d:06:cf:d0:a7:40:cb:01:06:b9:59:5d:b0:
a6:e9:91:b5:e1:63:51:d6:00:b6:18:5a:f1:44:db:
dd:89:e4:da:ee:fd:49:2b:40:a0:71:9e:1e:32:43:
2b:ed:0e:7d:09:91:7c:a4:6f:05:28:52:61:51:41:
04:3e:17:f0:d7:58:04:99:0a:c2:d9:7c:8e:53:13:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:AA:DF:F2:B4:1A:2F:C4:D7:30:82:0C:D9:AB:5B:C2:A8:99:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bddf3d6f-37b0-4b6c-93fa-2753d8700b96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:8000::/40
Signature Algorithm: sha256WithRSAEncryption
ab:5d:61:1d:4f:70:0f:43:34:1c:40:a0:2c:e6:f2:4e:2e:9f:
e0:82:eb:99:eb:22:74:6e:86:1d:12:21:e5:4f:8b:99:1a:34:
19:e7:63:5b:95:cc:78:fb:78:da:1b:51:71:1c:ee:78:4c:f9:
8e:9d:d1:81:be:7b:b3:9d:9e:d8:48:8c:d3:21:76:98:b3:b3:
13:cd:98:f7:d2:40:8a:77:58:a6:3a:e9:17:cd:1b:46:e9:a0:
eb:77:94:85:64:bf:74:2b:15:8d:56:e0:93:9e:1e:81:41:04:
11:d6:e4:a4:bb:08:b0:6c:08:a4:31:43:4d:22:e1:fa:81:77:
49:cf:50:48:0e:f3:31:aa:82:3c:b9:9c:f5:89:5c:76:e7:a3:
f6:cf:58:96:2a:80:13:00:53:09:10:f7:d6:ce:15:fe:a7:d0:
73:82:82:c9:ac:04:ff:01:10:ba:1b:95:ce:d4:57:3f:9e:66:
22:10:e7:8b:df:a8:07:30:9a:79:b7:86:75:89:54:5f:2b:cf:
8d:b4:5d:58:17:7d:d9:61:44:8b:6e:25:1b:da:7b:49:fb:25:
2a:e9:a0:ac:e3:bd:9b:0b:90:38:f4:90:1b:72:b3:1f:18:f1:
cc:04:56:b2:cb:e2:8e:04:b7:01:1c:65:bb:68:f4:f7:d2:7e:
1b:6f:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:49 2025 by rpki-client