Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
File: d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa (raw, json)
Hash identifier: NbncrBeaAABPAb5/BvJMutSZJrWmDAXFSUVn9meyHP0=
Subject key identifier: 92:27:EF:37:A0:97:B5:1A:9A:07:BC:BD:48:4C:90:1A:11:BA:DF:A2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1AD5DD0A2FF7884680A8E0F1595B2FB9031ECE0B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
Signing time: Sat 05 Apr 2025 00:10:18 +0000
ROA not before: Sat 05 Apr 2025 00:10:18 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02f::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d5:dd:0a:2f:f7:88:46:80:a8:e0:f1:59:5b:2f:b9:03:1e:ce:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 5 00:10:18 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:04:7e:01:b0:3c:6f:da:ec:ce:d7:6d:eb:bd:
52:8f:83:ae:19:dc:7f:f5:cd:74:29:6c:8e:ba:48:
8d:15:9b:0c:68:ed:01:b0:c4:9c:ef:b8:ec:3d:89:
2b:d8:f2:04:f7:e7:f7:e1:2a:8f:6a:f9:db:3e:e0:
13:62:7c:a6:64:a6:41:e3:ac:19:39:62:29:3c:43:
19:de:9e:7b:a3:1a:e1:9c:34:e1:71:0b:47:eb:b9:
a4:df:e8:70:98:55:61:55:98:5c:b6:05:4a:ab:13:
71:55:78:14:5f:e5:f0:83:98:7d:96:ef:46:b0:d0:
c0:2e:cb:d5:d5:6a:9e:b5:e1:cf:49:24:90:ca:81:
04:cf:03:76:d9:4b:6e:86:bd:8e:2b:32:54:72:b4:
4e:c2:87:f5:a5:6c:88:4d:ae:02:f3:6a:5d:18:cf:
89:2e:62:d8:f3:e0:7e:17:c3:a3:f9:b3:fc:be:6f:
b9:6f:33:0a:7a:89:a1:36:2b:11:fb:b9:e3:41:7b:
51:55:fa:65:cf:4d:9b:fe:4b:3a:bf:81:00:e5:a3:
e4:da:72:4e:63:13:67:8e:ab:f5:95:6b:cd:a9:4b:
93:09:20:19:05:b2:93:46:c6:0f:32:29:ca:d1:eb:
5b:e6:bf:44:29:e8:6e:7f:e1:3b:e1:2d:1e:e9:d8:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:EF:37:A0:97:B5:1A:9A:07:BC:BD:48:4C:90:1A:11:BA:DF:A2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d2cf476c-9f39-4ea8-a6d5-79a82c4a4dfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02f::/37
Signature Algorithm: sha256WithRSAEncryption
85:73:d3:71:fa:42:1f:d5:09:26:c8:80:6a:0c:a8:a3:85:55:
31:5e:d3:6a:d2:a5:3b:eb:e1:7e:98:fb:f7:dc:82:6b:cb:34:
85:a7:b5:01:88:1f:38:3a:81:f8:f3:60:2a:5d:82:63:51:a3:
9d:3a:a3:d3:2a:d8:c3:9d:b7:72:b3:4c:b8:bf:e1:14:ee:77:
41:a3:f2:5f:82:06:0d:49:dd:df:27:d3:3c:d5:df:a5:10:f3:
8a:7c:b3:22:c3:a5:44:f3:93:f3:ab:4e:67:15:84:ef:70:ba:
d0:ec:69:9c:0a:72:95:09:16:b8:b8:2a:ff:a8:07:4d:a5:bd:
ec:97:0e:97:c6:cc:c2:8b:e0:3d:39:2d:70:15:98:75:d3:31:
00:59:7a:61:f5:10:bc:85:59:a0:e1:6c:dd:d7:7d:bf:9a:82:
7f:0c:ed:fb:d0:42:45:03:8d:b8:99:ad:2c:44:e1:0e:de:44:
80:03:69:2a:32:ac:c9:8c:90:b2:2a:7d:84:47:99:e2:15:ab:
ee:e1:61:f8:a2:db:12:58:ae:30:7e:98:6a:79:42:34:12:d7:
be:24:3c:14:e5:e2:3d:82:6d:10:90:f6:ef:83:95:ce:5a:0e:
49:7d:47:c4:1c:e0:da:04:32:1e:a5:6b:a4:27:43:b5:83:36:
fb:d6:fe:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:58 2025 by rpki-client