Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa
File: d62aaac2-f54a-4bc2-8155-22367e855165.roa (raw, json)
Hash identifier: noipw46azxLBIOZDn0+GnjvatuwS9NigQnM3RjEGkFM=
Subject key identifier: 2C:1F:93:B6:CF:91:49:85:3A:23:AC:EF:61:C3:38:35:9D:34:D5:F9
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 241D4E8C05AEA7FE2E5E6B181013C1B007A88B80
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa
Signing time: Mon 31 Mar 2025 21:00:09 +0000
ROA not before: Mon 31 Mar 2025 21:00:09 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1d:4e:8c:05:ae:a7:fe:2e:5e:6b:18:10:13:c1:b0:07:a8:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 21:00:09 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:b2:c7:5d:ac:d8:6c:df:cc:90:6f:87:98:
b1:c4:49:5c:15:4f:aa:6a:6c:c9:f3:d1:85:f1:a8:
8f:b5:ba:f5:fb:91:09:ef:1a:7c:77:c1:c6:22:e8:
75:70:01:91:7e:5d:77:9d:46:1d:c4:e9:4d:47:84:
ae:44:32:dd:b8:14:46:1f:7d:d6:11:82:48:87:81:
f9:02:05:bd:47:77:bc:01:2c:fb:f2:63:ce:3b:81:
24:18:23:ba:6c:4d:d0:85:47:f4:21:c1:d3:a4:84:
4d:79:54:53:81:f1:8e:a6:32:a9:18:bd:d6:df:0d:
ea:1a:7e:61:8b:fc:cc:26:8b:2e:d4:9f:25:81:86:
52:f0:e3:e0:fb:3f:44:30:a5:d6:0a:35:45:e2:21:
99:7f:da:8d:32:d0:5b:5a:5a:57:e9:c3:6c:ad:3f:
23:64:ff:d0:ed:d1:47:1f:7d:50:00:1e:a0:cf:44:
ea:f2:39:f6:81:ab:8c:3a:ed:78:1a:34:cb:dd:fc:
d3:59:68:2a:d8:7a:77:91:1f:6c:1e:b7:1c:d5:f5:
81:04:00:fb:27:45:db:79:b5:fe:a2:5e:aa:53:66:
b6:1b:24:ff:71:6e:f2:31:24:c3:0f:3d:b1:5d:e3:
cf:41:0c:e0:56:6f:4f:d1:98:db:f7:ec:60:39:bf:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1F:93:B6:CF:91:49:85:3A:23:AC:EF:61:C3:38:35:9D:34:D5:F9
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d62aaac2-f54a-4bc2-8155-22367e855165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:b000::/40
Signature Algorithm: sha256WithRSAEncryption
33:0c:fb:b6:39:4a:db:2f:79:2d:3b:07:1d:e7:ac:c9:f9:f3:
68:96:a9:dc:ef:74:26:52:39:12:9d:a1:5a:72:d5:57:c9:13:
9d:25:95:57:8d:a9:c2:30:79:57:a9:f7:17:66:f5:41:dd:2a:
77:54:b6:f2:a3:a7:15:3e:6b:6d:60:bb:f6:98:45:bc:09:8f:
a3:fa:34:bb:0c:f2:f8:30:50:8a:bf:be:df:cf:6d:88:49:1d:
98:15:c3:d9:cc:38:9a:51:a0:0c:24:94:e4:f8:12:c5:c1:e2:
75:02:4e:71:79:11:c1:6f:30:ed:5f:ac:e0:fa:6d:0d:05:6e:
ff:4c:22:a4:2f:ec:4a:87:d9:ae:70:61:4a:ab:ed:c0:70:f7:
c8:0c:ff:9e:90:96:13:4c:6d:6b:40:20:95:7a:38:b1:e3:32:
ac:8f:4b:9b:93:3e:97:43:1e:47:23:57:67:66:6f:69:f5:a2:
8f:32:0f:3c:ce:5a:51:68:33:77:31:89:fe:f3:82:a1:78:7c:
f2:10:c3:62:32:23:5b:7d:89:4d:8e:4e:88:a0:d1:36:e8:48:
84:6b:58:a1:42:be:1a:df:b3:74:d0:0e:bb:d6:59:30:3a:71:
dc:8e:39:5c:8d:05:04:ab:10:5a:92:70:a7:37:39:2c:ca:4b:
81:97:ac:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:10 2025 by rpki-client