Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9177cdc-4634-4d34-9814-46c0484fcddb.roa
File: c9177cdc-4634-4d34-9814-46c0484fcddb.roa (raw, json)
Hash identifier: ERCupJz12/bthTKktq7NYgMGtQq8Gnaom5sPlcwQm0Q=
Subject key identifier: 03:5C:75:70:35:CA:FB:49:F0:FF:C6:3B:06:80:19:D8:90:C5:36:F4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 550431DC50BD8E15AD29DAF095BECC77C388D596
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9177cdc-4634-4d34-9814-46c0484fcddb.roa
Signing time: Wed 26 Mar 2025 19:22:03 +0000
ROA not before: Wed 26 Mar 2025 19:22:03 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:04:31:dc:50:bd:8e:15:ad:29:da:f0:95:be:cc:77:c3:88:d5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:22:03 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:93:b6:95:58:b4:03:94:07:15:e1:6a:0f:
70:3e:75:64:cb:8d:4b:1a:07:b0:cf:79:d6:37:fc:
0b:89:ea:db:55:be:98:54:fc:f9:4e:2f:3c:d4:41:
ba:83:2d:b7:0f:c9:45:b1:c3:99:48:8f:40:fe:61:
34:b1:68:11:66:28:30:cf:44:13:96:ea:9b:54:9b:
f8:9f:7e:4b:52:8f:5c:f9:37:c5:28:01:77:ab:03:
70:a7:0f:de:fc:bd:ff:85:d1:83:57:3c:8e:bb:28:
6c:66:b9:26:f1:ca:3b:87:bf:59:8e:81:ca:f4:74:
91:0f:f4:17:16:5c:c7:67:d1:a6:4c:69:f8:a7:fd:
a7:b4:02:53:1d:dc:11:c2:78:5e:69:ae:be:34:ae:
cd:89:83:d0:f1:12:dd:f4:38:ee:c5:5b:b3:0a:1b:
32:3c:ed:49:65:3e:41:ae:c4:1f:02:7a:7b:02:a7:
72:04:f0:c4:37:68:50:a4:e7:63:1a:92:9a:75:b7:
a2:6c:fd:92:93:a0:8e:34:3c:b3:93:12:11:62:cf:
82:da:4b:ef:55:c0:87:42:3f:1e:83:c7:b3:1a:77:
62:aa:c2:4b:bb:b0:e2:32:d3:4f:2f:56:a4:b0:df:
57:52:ae:13:1a:cc:b9:71:09:85:e5:b9:75:0b:be:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:75:70:35:CA:FB:49:F0:FF:C6:3B:06:80:19:D8:90:C5:36:F4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9177cdc-4634-4d34-9814-46c0484fcddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8c0::/46
Signature Algorithm: sha256WithRSAEncryption
69:5b:bb:5d:1f:95:66:43:e3:9c:94:15:7c:d0:9d:aa:e0:48:
59:8c:8a:b9:3d:5f:55:6f:73:ff:a8:8f:c4:40:de:3f:80:ef:
29:f9:42:d6:bf:78:12:d6:b7:07:6c:bd:f5:84:42:34:bc:3b:
3e:f2:18:93:de:a2:ce:5e:42:2c:8d:2b:b9:ff:a4:1f:b9:c5:
1e:97:9e:9a:c4:19:37:ea:12:0c:36:e3:f7:0a:62:69:51:66:
21:f9:97:6e:9b:a6:c2:fe:d3:93:40:ef:92:1a:f8:2d:52:8d:
3f:c4:7c:1d:e1:57:42:3d:41:81:f9:2e:87:80:f6:11:59:14:
6a:e1:9a:a9:f4:0a:80:e7:45:fe:a5:03:60:57:6c:e1:be:f0:
31:33:c0:49:33:ad:47:09:b0:6a:e5:93:a7:54:18:a0:25:25:
bf:0c:91:31:57:b9:d1:da:88:68:79:17:f1:0c:68:5a:04:ef:
59:44:b7:06:44:47:16:58:76:df:a8:d5:55:ab:af:05:4c:62:
05:01:58:3a:7d:6b:4f:d5:2e:45:47:8b:d3:0c:cf:57:f6:e8:
2b:02:8c:48:5b:05:a2:b7:e4:a1:3e:00:da:db:7f:56:7c:56:
69:02:c2:fe:87:8d:30:f0:e6:57:68:89:84:1f:98:9f:43:34:
9c:be:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:07 2025 by rpki-client