Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9c63164-2ba3-455f-8374-63351079ed7c.roa
File: c9c63164-2ba3-455f-8374-63351079ed7c.roa (raw, json)
Hash identifier: 5F9NjjBhbKp7smjBRNEcLCfHtQA+jgk5HAxqFFJl0+o=
Subject key identifier: EA:F8:51:E5:55:C9:B1:56:73:56:2E:AF:1D:2D:BD:5B:64:D5:A1:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4D64209B6423573BF8B9F5422EF7AAEB9CB090C5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9c63164-2ba3-455f-8374-63351079ed7c.roa
Signing time: Mon 31 Mar 2025 21:00:11 +0000
ROA not before: Mon 31 Mar 2025 21:00:11 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:64:20:9b:64:23:57:3b:f8:b9:f5:42:2e:f7:aa:eb:9c:b0:90:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:00:11 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:fa:08:9d:8d:a7:ce:c6:a9:2d:35:96:b2:
42:9d:de:32:f4:66:12:2e:21:4b:d4:16:d4:3c:ac:
53:56:de:be:06:9d:4d:9f:72:dc:8a:7f:58:df:23:
8d:b9:a8:1e:bb:73:4b:c3:9c:ba:c0:ca:f0:8c:50:
d2:60:2a:d7:61:3a:ea:2b:3c:02:72:6e:eb:5d:89:
f3:1d:d6:18:1c:60:c0:2b:e0:de:fc:a6:78:43:20:
8a:89:d4:2b:c0:7a:cf:57:c5:e0:bb:37:97:ce:9d:
d5:70:ce:14:c2:2b:b1:2b:11:65:1b:3c:91:09:cc:
99:a7:d9:0a:a2:ab:8e:01:be:4f:b5:59:e6:72:0f:
a9:f4:b0:9a:39:cb:63:76:ae:8c:dc:ac:23:55:74:
93:59:38:f5:0a:e3:2d:3e:d3:48:78:d8:dd:84:55:
e7:c6:18:01:03:8b:17:55:7f:fc:2c:86:b3:e2:a8:
09:d5:97:5f:5d:88:81:70:e0:fb:b2:84:4c:61:2b:
36:6c:48:77:92:3a:f0:64:db:f0:83:e5:a4:31:73:
f0:9e:b9:9f:f6:ce:62:0e:b3:5f:43:1b:37:ec:9b:
94:4a:4a:8c:28:58:a5:dd:9f:2c:b9:3e:83:4d:d1:
ba:71:18:dc:85:04:6d:dd:94:18:09:6f:53:16:53:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:51:E5:55:C9:B1:56:73:56:2E:AF:1D:2D:BD:5B:64:D5:A1:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9c63164-2ba3-455f-8374-63351079ed7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:9000::/40
Signature Algorithm: sha256WithRSAEncryption
be:c3:e0:e2:76:a3:d5:e5:55:05:38:90:90:f8:f9:21:e9:9d:
bf:36:6d:30:08:d2:9c:f3:d0:cb:b5:4c:88:16:02:00:46:5e:
d7:fa:fb:16:03:9f:d4:2f:ec:51:a8:72:72:a3:1e:3e:c6:ff:
46:a6:dc:a1:16:82:d5:0d:d5:a7:3e:86:8f:ed:9c:7d:4c:1c:
50:04:f4:98:a7:87:41:ee:62:f3:48:f8:58:d7:1a:07:e2:bb:
4c:c7:ea:36:be:30:10:29:2c:30:cf:d4:47:73:f3:46:3a:ea:
66:ff:89:4e:bc:68:5f:02:11:91:8a:10:06:44:59:2c:f5:f0:
8b:80:3f:fa:f1:8b:31:2b:4a:57:70:88:1a:0b:39:47:a6:c4:
e9:b4:bf:42:a2:ac:63:37:30:bd:ef:9e:b7:62:6c:39:74:91:
92:ae:b4:36:ab:93:bb:7c:e9:59:19:c9:2d:9b:98:21:7c:67:
5c:ff:ca:32:11:9d:6f:98:a6:d8:cf:6b:d2:b2:41:07:d4:b4:
0b:37:32:41:cf:7a:ba:f7:79:f9:77:7e:ce:12:f2:20:16:8c:
1b:bf:39:cb:83:6e:ac:2d:83:21:c7:7e:0e:15:c7:47:e5:58:
a2:63:43:eb:a8:eb:73:b9:c6:b6:23:70:e4:80:f4:3d:77:74:
f1:ed:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:38 2025 by rpki-client