Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
File: c46a0827-1052-46e2-ad52-4a27d9a65f24.roa (raw, json)
Hash identifier: QG/+vC+ZWtFs4fb/tNV44xLrTIr7Cg41LBnjs/XnAPU=
Subject key identifier: 94:88:3F:D5:60:49:76:37:83:43:09:3D:44:E0:55:6A:AD:85:79:83
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3F868A58D41A51940E6A7A4411B100823C957ACF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
Signing time: Mon 31 Mar 2025 21:21:22 +0000
ROA not before: Mon 31 Mar 2025 21:21:22 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:86:8a:58:d4:1a:51:94:0e:6a:7a:44:11:b1:00:82:3c:95:7a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:21:22 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:6f:6b:25:43:67:c7:1e:71:8e:96:b4:a6:
43:8d:c1:dc:0b:c7:bf:c2:a0:7a:c8:81:56:83:be:
56:52:58:51:27:46:81:14:f5:fd:a6:d5:18:b3:b6:
11:8d:3f:32:4f:e9:46:9d:08:9e:42:d2:18:d1:74:
c5:3e:f8:10:2d:9b:4d:5c:42:d2:12:5d:ce:d2:04:
0d:bb:c0:d3:53:b7:62:59:36:e7:2b:b9:c0:88:3b:
f4:ea:eb:28:30:ee:46:d3:79:e2:b9:cc:48:51:5f:
3d:26:ac:b4:86:35:4b:2c:2a:02:b9:6c:63:da:3d:
37:9a:df:aa:85:f2:c8:58:fb:3c:b6:e2:72:d9:39:
d0:ba:ea:fa:97:41:ef:d1:0d:05:e9:71:8e:7f:af:
fd:06:5b:b6:87:b6:4d:e4:c6:b0:d9:8c:68:e1:42:
e0:7f:f3:80:24:3d:0d:d5:1c:ae:6c:52:63:dc:e7:
12:3d:62:d2:d2:51:89:80:85:b3:cc:b8:a5:1f:dd:
24:b5:0e:21:e7:14:9c:e4:bf:4c:cc:22:01:58:c1:
f9:2b:7a:58:eb:a0:95:f1:ff:9a:be:47:0b:96:78:
8b:8f:cd:11:0a:40:4e:d3:e8:d0:4d:6f:31:e3:75:
f5:3b:16:de:a7:48:5c:22:1d:a7:98:91:7d:a8:cb:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:88:3F:D5:60:49:76:37:83:43:09:3D:44:E0:55:6A:AD:85:79:83
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c46a0827-1052-46e2-ad52-4a27d9a65f24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014::/36
Signature Algorithm: sha256WithRSAEncryption
21:66:b6:f5:80:57:e9:a9:b9:dc:db:e1:cb:b1:c9:f1:bf:8e:
da:de:2d:6c:10:b2:3e:58:0b:71:2b:5c:d4:32:49:d5:da:03:
d3:ba:d8:27:d9:1b:09:06:1e:63:29:6e:2d:8c:10:de:7c:08:
3c:22:ac:95:f4:03:7a:c1:49:44:61:27:fa:ad:dd:5c:e9:f0:
55:f0:97:e4:cd:e1:60:af:b7:c6:39:79:26:ca:ba:91:29:7c:
a5:74:73:44:be:c9:c3:6c:0e:72:86:51:dc:2b:33:7d:a7:8e:
62:e9:83:b8:3c:de:b3:f4:dd:18:ea:ee:d4:23:e4:0d:7d:ac:
0b:6a:06:65:6e:73:1d:a5:e2:25:a9:8a:82:6c:03:9b:5a:75:
64:94:5b:92:f3:c8:7b:93:eb:7b:f0:32:43:56:a7:fd:a3:61:
2f:59:21:30:f7:fe:ac:c2:67:a5:5f:00:25:ab:ac:14:fa:6f:
d7:61:67:ad:dd:05:e2:56:86:9a:d0:5a:20:cc:75:49:41:32:
f1:cb:ac:86:a2:b7:ab:55:ca:e8:55:fe:21:6c:d8:15:86:a9:
f1:d5:ad:6b:26:6d:85:10:38:1a:fe:84:59:32:58:65:73:45:
aa:b6:1a:a5:dd:65:d8:c4:97:0d:3b:55:cc:a3:e9:bb:f2:a7:
e3:9f:4e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:06 2025 by rpki-client