Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa
File: ce994b51-2051-4114-a1f2-9e4d82f52f31.roa (raw, json)
Hash identifier: u85AIbMeGPswK7xISNDcOkexGdsilM7woAK13/P7S00=
Subject key identifier: 11:4A:6D:BE:89:A2:3F:47:1A:C4:A4:FC:45:C8:45:CB:4C:72:FA:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39FB6833CF9743C91538E848ED6D60AE400B1DA4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa
Signing time: Mon 31 Mar 2025 20:30:28 +0000
ROA not before: Mon 31 Mar 2025 20:30:28 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:fb:68:33:cf:97:43:c9:15:38:e8:48:ed:6d:60:ae:40:0b:1d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:30:28 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:ad:06:f7:74:4b:68:8f:41:81:43:36:d2:
39:2e:5d:2e:57:dd:dd:7d:4f:7e:2b:4d:8d:df:fd:
13:e6:11:ca:7d:c5:c3:69:c2:0e:5f:01:75:cf:04:
86:6d:36:e1:d0:67:86:2f:34:5b:6b:6e:9e:3a:b5:
42:aa:03:ce:de:64:0c:2c:7b:c1:98:db:10:8b:d0:
07:a0:46:91:60:c8:69:ef:1c:dd:b1:1a:76:35:61:
7a:5e:e0:f3:20:70:72:b3:ea:02:06:4c:c4:f6:29:
c6:13:bc:2c:e0:42:17:fb:2c:1f:07:ee:90:e2:ed:
40:84:72:a6:9f:76:22:10:d3:15:5a:69:48:66:07:
96:3b:ef:f8:42:5f:66:40:46:b8:2e:6a:77:8c:95:
1f:19:a4:94:4d:44:5d:51:79:3e:53:aa:94:69:e8:
13:4b:6a:34:f1:10:82:b8:f9:6a:6f:a4:c2:9b:42:
ea:0e:8e:ca:90:0c:5a:a6:aa:1c:ec:ff:06:2a:4f:
ac:86:a4:a9:88:fb:20:05:a3:77:5f:7a:8e:25:08:
99:ec:07:bd:c9:40:b7:40:1c:b0:b6:35:f1:d5:f5:
34:c3:74:42:85:24:96:98:80:88:c8:3a:b6:1e:d0:
0a:a0:84:37:e1:a5:91:d8:9f:98:29:1e:38:99:92:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:6D:BE:89:A2:3F:47:1A:C4:A4:FC:45:C8:45:CB:4C:72:FA:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce994b51-2051-4114-a1f2-9e4d82f52f31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:c000::/40
Signature Algorithm: sha256WithRSAEncryption
1c:22:47:19:40:97:eb:5f:e1:52:31:26:47:3a:b5:24:f2:04:
73:01:e5:66:f4:23:e8:30:59:39:e8:18:bc:27:c8:b1:c0:51:
1c:ca:76:6f:f5:b9:25:21:a4:d6:41:56:bf:5b:3c:c8:6f:bf:
db:46:38:50:e5:9c:e3:2c:45:76:44:2c:c3:d3:76:84:ea:8c:
09:fd:4b:af:bb:d7:66:2e:e5:8c:0c:e0:6c:3b:3f:77:0b:2a:
96:14:53:50:32:a4:b5:8b:da:6c:c5:b3:dd:02:85:57:b7:1c:
ba:5f:f0:3c:7c:52:56:6b:1c:3a:1b:82:29:d0:39:53:81:55:
30:e3:25:39:bc:a6:98:00:d6:7e:4c:cc:f8:39:5c:f9:fa:59:
ee:1d:77:0a:b1:01:b3:94:7b:85:e4:46:c5:cc:4b:fc:2b:3b:
be:80:87:eb:d8:2a:30:d2:9f:e3:21:97:10:44:ff:4e:12:77:
19:53:21:64:78:92:4e:fc:36:92:b4:1f:5e:f9:28:3a:78:25:
76:3d:59:95:ee:50:e4:18:61:aa:c1:4b:c0:88:2d:36:97:9e:
73:80:f4:95:d1:8b:22:75:b8:75:14:e0:c5:f6:44:99:b4:9d:
a0:2b:fe:45:eb:99:52:17:68:87:36:eb:42:6e:88:5d:c0:b3:
44:31:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:59 2025 by rpki-client