Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3d50aa3-801c-41c7-b501-d491c4534515.roa
File: d3d50aa3-801c-41c7-b501-d491c4534515.roa (raw, json)
Hash identifier: ELoEdg1jSUo36UaDPIRDwq/olJMgve5XXRpBBuDtnew=
Subject key identifier: 20:D1:47:FC:7B:80:A7:53:D7:5A:5A:84:9A:0B:D3:F6:64:4F:00:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 18E3BB144B3D817781126D609E8D4867E4F826D5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3d50aa3-801c-41c7-b501-d491c4534515.roa
Signing time: Wed 26 Mar 2025 19:22:00 +0000
ROA not before: Wed 26 Mar 2025 19:22:00 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:8c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e3:bb:14:4b:3d:81:77:81:12:6d:60:9e:8d:48:67:e4:f8:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 26 19:22:00 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:49:c6:3d:66:02:1e:4f:0d:3b:5e:0e:c2:
24:b6:61:4b:dd:83:d1:5d:db:ce:46:ee:c7:17:76:
13:e5:d2:d3:d3:2b:d6:ea:30:88:44:ac:fb:58:1e:
ec:d9:da:64:8a:7f:c4:2b:9f:c4:21:c6:74:01:4d:
06:78:3a:4e:81:e3:b3:cc:49:58:d3:ef:15:78:ee:
d6:77:75:5c:c5:21:69:fb:8c:5e:59:93:ba:13:8e:
ca:eb:67:9f:5a:ce:a2:f3:fe:97:62:41:3a:ed:8f:
4e:08:26:0c:40:20:b6:ec:c6:55:ec:7b:65:17:06:
b3:06:ea:0e:4a:e0:61:de:f2:a9:af:c4:31:78:f0:
e6:30:36:a3:e1:6f:95:17:b2:e3:5f:78:02:e8:5a:
e1:9d:e8:be:20:79:bc:86:90:70:93:b6:4e:43:9e:
93:29:30:8b:84:c7:1d:d0:50:bb:a3:ba:35:19:89:
2e:39:3f:83:da:c7:7e:42:d3:40:7a:47:b8:c6:88:
74:d9:71:d0:4b:28:35:26:94:a3:16:82:d6:e1:a3:
13:a3:35:26:bf:9e:30:b1:6b:1e:00:90:2e:eb:5c:
80:2c:91:cd:a4:e9:99:fc:0e:c3:b8:32:de:54:fc:
1a:d9:37:a2:e5:c0:ce:c9:7c:a9:33:1e:ef:97:62:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D1:47:FC:7B:80:A7:53:D7:5A:5A:84:9A:0B:D3:F6:64:4F:00:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d3d50aa3-801c-41c7-b501-d491c4534515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:8c0::/46
Signature Algorithm: sha256WithRSAEncryption
02:14:ca:4c:50:ca:d0:91:9b:c4:f6:af:f7:6f:b5:4c:92:6e:
e0:e5:29:11:ce:ef:73:fa:c4:ad:b0:b5:dd:4d:81:b2:e6:17:
6c:38:9a:0c:87:de:7b:ac:57:06:c8:0a:2a:50:56:e3:e3:56:
f1:cb:a1:27:e2:bb:a5:39:b9:d2:45:28:00:7a:4c:d2:c7:92:
10:14:ad:9a:b8:cb:78:a2:37:09:b2:f6:07:a1:b6:6d:52:16:
97:b1:c4:dd:bd:99:2f:1f:83:f3:39:1f:4f:6e:18:f7:e9:a6:
01:1f:4b:51:cc:66:df:1b:50:c8:16:e2:47:8c:a4:d0:a5:38:
80:c0:da:08:99:b6:b1:07:08:ec:d9:0d:f3:bf:08:81:6e:f2:
0f:11:01:aa:fc:4a:b9:24:64:d5:78:a0:a4:92:6d:d1:21:ec:
e2:15:4b:70:14:48:e6:8e:83:01:f4:77:fe:ad:a4:ae:d1:bc:
da:59:1a:a6:7b:a4:e2:15:11:42:c0:b6:1a:2e:b9:cf:6f:a8:
7f:22:2c:4a:66:f5:d3:a3:35:a0:62:af:8f:8c:04:48:6d:da:
40:eb:fe:14:16:d0:1c:35:58:0c:79:8b:23:e7:42:8c:e4:09:
03:86:e8:85:de:c4:7b:31:6f:93:27:f5:5f:66:b8:a2:c3:35:
a1:9b:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:35 2025 by rpki-client