Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfbb372d-4f26-4572-90ed-472d3dd32d5c.roa
File: cfbb372d-4f26-4572-90ed-472d3dd32d5c.roa (raw, json)
Hash identifier: g5NjyVTbbw+iml1g+voHw80xyAEyokSfOX5mIax78TA=
Subject key identifier: C5:AA:13:4E:D7:10:52:55:40:8F:9C:A9:5D:22:21:1D:39:45:D8:2C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 521BA2D1418AEB6A54D9BE5C6414105B31DCB05B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfbb372d-4f26-4572-90ed-472d3dd32d5c.roa
Signing time: Mon 31 Mar 2025 20:00:22 +0000
ROA not before: Mon 31 Mar 2025 20:00:22 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1b:a2:d1:41:8a:eb:6a:54:d9:be:5c:64:14:10:5b:31:dc:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:00:22 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:37:26:fb:ca:3f:6a:76:54:78:f6:9b:fb:
e4:17:8c:e8:f0:06:75:71:f4:76:6d:d5:0e:87:0e:
52:0a:18:cb:d8:f6:bb:be:9e:72:8d:50:a5:32:8c:
b7:d6:05:fa:7d:8c:66:aa:2e:d7:50:74:0c:63:9c:
28:83:75:dc:8a:71:9a:91:df:e1:af:d2:89:24:10:
bf:f3:d6:ea:c9:da:3d:04:0b:79:e8:42:26:01:89:
50:7b:7a:11:72:58:25:e4:ae:61:06:17:85:99:b6:
ad:02:45:bb:15:81:41:6d:0f:60:c7:b5:86:10:f1:
99:0a:6f:07:e4:22:c5:53:f0:dd:cb:56:3c:ef:ae:
da:62:64:5f:fd:4a:b2:ae:b5:a2:a3:b5:f2:b7:9a:
d2:e7:32:8d:45:d2:b0:6a:00:5d:b2:e6:70:ac:64:
5f:4e:73:df:83:08:83:bb:b3:d1:88:db:70:a9:d5:
fd:45:51:2f:fe:3a:d5:87:d6:cd:90:56:21:64:3b:
0c:f5:fa:d4:64:72:c8:e6:db:c7:10:e9:b7:4c:3d:
7d:72:b5:f0:c5:b2:83:b8:07:d3:df:cd:13:32:99:
26:c9:19:a4:c3:dd:f7:cf:b6:89:fb:16:0f:be:7e:
67:d8:d8:94:a8:53:8b:3b:ee:91:e4:92:92:08:93:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:13:4E:D7:10:52:55:40:8F:9C:A9:5D:22:21:1D:39:45:D8:2C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfbb372d-4f26-4572-90ed-472d3dd32d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
06:fa:ef:5e:ad:b2:9f:48:0d:7c:e0:9a:68:3a:55:6e:23:88:
0e:59:9d:ea:a4:4f:d7:35:ea:b9:fc:4f:a7:16:56:76:5c:9c:
66:bb:a3:f7:0e:71:92:88:c6:f6:6c:25:13:c0:bf:50:14:4d:
48:9c:4f:54:84:7b:9c:3a:c1:f2:c3:d9:ed:9b:09:6b:a9:1d:
c9:f0:9f:82:6e:75:2a:77:9e:bf:2b:e6:9c:b1:16:23:80:15:
9f:32:b2:b9:81:f2:a1:c5:f6:91:47:3b:ba:ad:32:2c:70:43:
ba:b6:c8:c8:47:31:b6:6a:5a:37:9f:25:2f:35:78:b0:35:4d:
80:66:43:17:b9:0d:1d:37:4c:b6:53:e7:81:52:45:96:b8:47:
36:1f:4e:d7:cf:f9:c0:c7:94:31:1c:84:60:e0:7b:ab:85:46:
0f:5b:20:f8:20:a2:5c:05:66:df:9c:ca:f2:c3:eb:97:b7:39:
1d:80:71:a1:b8:de:ea:f4:23:f3:c8:63:85:0e:be:54:0c:63:
0a:bf:48:fa:5f:63:26:32:8a:b2:85:15:35:bf:6d:8d:1e:db:
05:62:7b:09:0f:c8:85:13:12:f7:c0:34:ea:78:e7:1c:cd:d4:
d3:90:3c:44:6c:d9:87:03:da:a3:c6:5f:e3:87:f1:c1:a5:6e:
67:27:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:08 2025 by rpki-client