Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
File: c5796c8a-c7f2-4888-9a17-c80093c07957.roa (raw, json)
Hash identifier: i9YinCJDMho3Ei3kYldqftjRrGXyrfq6orXgTw/ADt0=
Subject key identifier: 22:0D:20:11:E2:EC:F0:A7:30:0D:41:91:FD:0F:C6:40:6C:86:F7:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 187E55C1B4A9E672DE298A0A294DFD74F7DCA91E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
Signing time: Mon 31 Mar 2025 20:20:22 +0000
ROA not before: Mon 31 Mar 2025 20:20:22 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:80c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7e:55:c1:b4:a9:e6:72:de:29:8a:0a:29:4d:fd:74:f7:dc:a9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:20:22 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:0d:f9:51:ca:0e:d8:3d:50:5e:46:56:fe:
f9:17:c3:24:c6:21:76:81:a6:c4:d8:44:cf:1b:8c:
9a:67:77:21:75:5f:ab:3e:09:a5:4c:f6:b2:49:33:
bb:f4:74:4b:23:50:fc:a6:e4:07:03:d6:5c:c8:99:
2b:5a:e9:66:02:73:dc:d1:83:64:53:a8:cd:7c:99:
62:84:31:f2:39:0b:cb:a1:ef:ee:ae:94:b2:c0:d7:
0a:eb:5a:26:93:dc:ad:da:f7:73:24:43:4d:2e:c1:
76:99:21:08:39:bf:df:48:4f:8f:49:94:6c:8a:2a:
64:3f:eb:25:ed:9d:e0:04:51:8f:60:2e:1d:d2:01:
66:ba:7d:b8:4e:9c:4a:28:e7:b4:84:9f:14:b5:16:
02:10:38:3b:5a:a1:41:ea:c7:12:b5:29:27:2f:6e:
ef:e7:7b:cf:0e:9c:f7:07:ef:9a:4e:88:5c:a7:e1:
47:c7:a5:f4:51:70:a9:c1:a6:c8:8a:fb:a8:17:ae:
f3:d1:32:36:28:c8:24:e5:7b:35:d5:5e:0c:61:a2:
81:db:4a:29:b3:c4:05:1a:7f:7f:ff:df:6a:13:59:
8d:1c:f4:01:00:b1:35:0a:04:d8:d3:c0:a7:9c:c2:
94:49:4d:67:8f:cb:d6:c4:67:ff:de:5b:fb:b4:2f:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:20:11:E2:EC:F0:A7:30:0D:41:91:FD:0F:C6:40:6C:86:F7:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
41:b3:ed:06:39:b0:81:4f:57:c7:13:e6:23:0e:bc:14:4d:e2:
71:d5:11:3c:5d:6a:7f:12:95:c8:cf:18:42:8f:46:77:ad:2a:
01:67:cd:34:8a:72:9c:de:8d:c6:17:fa:e0:2e:e4:cc:47:21:
39:26:7c:46:b6:3d:0e:96:9c:35:d7:c0:f8:44:86:2f:d9:c8:
36:12:36:71:ec:5c:12:ed:55:8c:c3:88:b5:0b:d3:36:be:06:
f8:cc:4f:92:64:f1:85:ef:ee:d6:ec:ff:4d:bf:a5:e5:db:d8:
7b:71:83:ca:3e:9f:47:86:c2:23:d6:ce:a0:c1:bd:56:17:51:
dd:26:36:e1:c4:75:12:5f:d2:6c:0e:9d:dd:aa:b9:f6:7c:df:
fd:9b:bc:10:5d:a2:4c:76:9c:29:9f:3f:5f:01:76:68:f4:b7:
00:03:86:dc:5f:75:ac:7f:67:19:ad:68:11:7f:06:1c:69:c6:
7d:9e:0a:fb:c8:c6:6f:af:6d:51:6b:fa:71:73:c8:86:59:0b:
9c:44:df:ee:0f:69:b1:4e:d7:9f:f3:68:ff:30:ec:31:cb:ce:
0d:ab:03:ec:39:07:2e:4e:45:10:be:92:53:3c:ee:ba:61:6c:
2f:ac:1c:bd:b4:ed:35:e3:85:76:5e:b3:48:fe:d8:a9:d4:ff:
4e:ef:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:16 2025 by rpki-client