Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
File: cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa (raw, json)
Hash identifier: CbbktTv2AN5Y/hO40vA+U4UC9qCAaU0hUGYRoXV6cTw=
Subject key identifier: 49:E3:2D:23:54:C2:91:FC:B6:24:D5:A8:A2:61:F2:17:B7:17:04:C4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 083C95EB2FC9D13160B6A0D3B8F51EDBE3D0DA8C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
Signing time: Mon 31 Mar 2025 19:21:14 +0000
ROA not before: Mon 31 Mar 2025 19:21:14 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3c:95:eb:2f:c9:d1:31:60:b6:a0:d3:b8:f5:1e:db:e3:d0:da:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:21:14 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:74:44:a4:de:8a:6f:dc:75:bd:60:5a:6b:
f2:23:b0:c5:c4:83:d2:31:6c:e7:68:87:2c:d6:be:
46:f0:63:50:a5:50:15:0a:f0:f9:86:a1:74:7e:31:
d4:bb:ac:32:a4:5e:a4:43:6b:d0:e6:f7:75:75:be:
22:65:e5:3c:b7:12:fc:f4:c9:df:56:a0:b8:3b:14:
ed:09:df:0c:c5:79:78:58:b2:d7:95:f4:f1:8d:11:
fc:f5:ed:f5:3e:a4:a6:83:65:9f:59:6e:d7:8d:cd:
b6:f4:b8:5e:59:0f:1c:9c:b6:ab:3f:a8:ad:d4:5b:
62:bf:8e:79:1d:c8:89:e0:47:2d:d4:62:2c:19:59:
05:b5:53:3a:24:3f:9e:36:70:4a:e6:67:51:d1:66:
0e:73:b1:cb:4b:41:0d:91:d7:77:c2:96:57:c0:ce:
8c:38:6e:78:13:50:2d:08:d4:a7:3f:a2:b9:80:06:
bf:bc:0f:bf:d0:b8:1f:e5:42:60:21:25:eb:31:2e:
b5:32:cd:cc:ea:b2:75:57:07:4d:02:50:18:5c:5c:
93:1b:6b:28:96:f0:35:73:29:92:65:15:03:bd:8f:
55:eb:f7:7f:f9:ce:03:55:b7:f3:ad:e0:a0:5b:3f:
a2:5a:43:a6:f1:f1:23:0f:82:37:42:08:66:5f:1e:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:2D:23:54:C2:91:FC:B6:24:D5:A8:A2:61:F2:17:B7:17:04:C4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cf6ac3ef-82f5-4abc-a36e-405b863f884b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:28:22:4b:d6:b4:04:75:d9:01:a6:23:8c:7d:47:2b:97:b9:
15:22:eb:73:dd:33:9a:87:62:b3:8d:b3:3c:5e:b5:77:a5:b5:
39:6a:29:f2:51:19:fa:78:c4:62:0e:ee:ea:03:e9:6b:0e:ba:
0f:77:3d:15:70:a8:3d:25:fa:59:5a:65:3a:b9:49:20:79:55:
de:d4:c5:06:14:6c:4a:fe:e1:8d:af:92:e6:28:a6:39:ad:7c:
eb:e2:24:e2:94:00:25:fa:05:08:54:e5:e7:f3:59:77:3a:cc:
29:0b:cb:e0:85:32:d1:f6:f6:a1:38:75:1e:0c:b3:4c:68:43:
c4:54:37:5a:eb:39:da:6d:cb:95:ca:55:41:7c:69:4e:87:c7:
92:97:ed:2a:65:27:49:31:cf:19:c0:e7:be:90:d5:0d:2b:56:
36:71:e7:d0:3d:70:2e:b0:9d:a7:d9:58:d2:45:d4:18:de:e6:
ac:94:c7:d8:31:53:71:7c:98:ba:87:bf:d3:49:cc:27:70:cf:
3c:cf:63:ca:1e:d8:ca:e4:2c:72:d7:6a:97:0c:31:a4:22:fc:
c6:76:fd:7a:6e:d1:fb:26:e7:55:b9:e0:b0:27:84:04:97:8c:
c0:e0:3e:f7:40:86:40:91:55:91:2f:55:85:44:7b:39:7e:31:
c2:72:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:48 2025 by rpki-client