Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
File: c2fae133-061b-4a28-9d2b-b752d98ef502.roa (raw, json)
Hash identifier: OQEYgyIAhOqb6t8/iAvRyzcvijxQ6ipf9aOkAJswKLY=
Subject key identifier: F7:5F:2D:BD:1A:09:F8:6C:7C:0E:40:F2:05:FF:1F:BB:69:9F:D9:62
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5796236A81346CB5074E0DF6FD419F1F56E2B6EF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
Signing time: Mon 31 Mar 2025 20:31:37 +0000
ROA not before: Mon 31 Mar 2025 20:31:37 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:96:23:6a:81:34:6c:b5:07:4e:0d:f6:fd:41:9f:1f:56:e2:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:31:37 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:93:f9:c8:b3:aa:4f:fa:e7:68:83:d6:0a:
74:d8:26:14:be:4b:ab:52:d8:d8:d7:2e:32:fb:e3:
81:1f:da:56:e7:19:e8:70:cd:71:b5:b2:52:f3:35:
61:32:e6:cf:eb:7f:09:65:ab:b6:61:ef:cd:0f:10:
7a:78:4e:b2:43:36:00:03:c9:4a:64:ea:41:71:96:
f7:48:af:49:25:43:d9:43:94:c0:30:7b:a5:11:42:
f3:0b:77:dc:ca:1c:a1:10:e8:83:a9:fe:09:7e:10:
20:a3:1e:7d:e2:80:00:a0:05:9a:ac:91:fa:67:33:
30:95:8b:3b:81:9e:1a:c7:1e:9a:90:ff:0a:2e:1a:
27:11:ae:56:65:c4:c0:b1:b4:86:da:6b:21:64:2f:
16:1f:44:1a:18:03:df:fd:6e:32:04:0a:2b:17:15:
4b:04:fd:07:2e:ad:26:89:90:bf:1e:70:e9:66:9a:
8d:00:7b:c8:63:cf:54:12:e9:2c:dd:a3:c0:c9:1a:
99:ed:90:b4:23:31:00:35:f5:bf:28:1a:e9:3f:df:
05:1c:ab:74:7d:c3:41:4f:b7:0e:ea:e1:08:b4:94:
36:c4:5e:a4:4b:2c:b9:34:4f:1b:c8:ae:88:d9:6f:
3a:b4:46:b0:6e:c2:e2:ab:9b:c1:8d:3d:bf:7e:6e:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5F:2D:BD:1A:09:F8:6C:7C:0E:40:F2:05:FF:1F:BB:69:9F:D9:62
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c2fae133-061b-4a28-9d2b-b752d98ef502.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:5000::/40
Signature Algorithm: sha256WithRSAEncryption
08:d6:06:ba:db:40:8e:44:28:10:3c:04:f1:1e:07:42:b5:18:
d3:8a:b8:cb:98:ee:3d:b1:00:4a:98:1d:15:30:64:21:04:70:
8e:13:a0:a9:b3:81:c1:31:4b:48:b1:ba:df:53:ae:bb:97:7e:
e6:71:15:e9:ad:95:57:fe:a5:12:d9:51:f0:e6:79:ae:ce:6a:
e4:ba:1d:22:9e:8f:8a:38:0c:57:eb:0f:93:e5:36:4a:f5:82:
2d:c5:23:49:04:fe:cf:90:fb:3c:83:4e:4e:4a:f9:d9:fb:f0:
f4:cf:0d:28:2d:ee:96:b3:26:3b:da:ce:41:b5:5b:3a:85:ca:
ae:5a:4d:d3:c0:1d:1b:f6:39:4e:7b:07:5f:64:db:ee:53:40:
36:ce:5b:8a:61:13:a8:8b:d1:59:3a:21:59:98:a3:16:6d:5f:
01:2a:76:18:27:86:56:34:a1:84:a6:2d:d3:fc:62:9d:8b:8e:
e0:1b:08:a2:9a:d5:09:4d:23:1b:0d:a3:1b:0e:6f:0a:24:e5:
8f:1c:0e:6a:91:f3:3d:0e:01:72:82:b3:b2:6f:06:b1:4b:0b:
04:b8:c0:42:28:ab:d4:83:c2:b5:5d:14:a0:63:31:4f:7c:76:
f2:72:34:18:0e:be:8f:f1:b0:e5:38:b8:02:46:d8:ae:9a:55:
c2:46:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:27 2025 by rpki-client