Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd294e80-dbb7-45f1-a3fd-9866794b3ce0.roa
File: dd294e80-dbb7-45f1-a3fd-9866794b3ce0.roa (raw, json)
Hash identifier: LOBNiARC8mRws6Hum8eNkNSVOnkwQupmslunbkoKBMM=
Subject key identifier: 25:8D:5C:99:79:50:8B:F2:0B:F4:68:70:78:A4:FC:B6:51:99:84:45
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3892DA87F6919DF7040E0159783409CB30780E6F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd294e80-dbb7-45f1-a3fd-9866794b3ce0.roa
Signing time: Mon 31 Mar 2025 20:30:29 +0000
ROA not before: Mon 31 Mar 2025 20:30:29 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:92:da:87:f6:91:9d:f7:04:0e:01:59:78:34:09:cb:30:78:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:30:29 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:ad:82:3b:ea:8c:32:a9:d9:71:54:ed:07:
39:89:e5:48:94:92:36:73:19:5b:35:3a:5a:80:30:
45:8e:87:65:d3:3c:fa:45:42:e9:9f:af:43:40:b3:
6a:4c:15:99:2f:48:11:db:a8:56:ab:38:af:7a:b8:
e4:6d:48:97:bf:fb:8e:e0:a7:44:1c:50:22:93:87:
ac:24:10:13:fe:78:7b:6c:98:57:9b:91:47:cb:46:
e6:ec:2d:48:20:4d:0e:24:f5:d3:17:74:d8:d8:ec:
c6:97:c9:89:65:fb:ed:e8:46:36:86:46:5f:e5:19:
34:b4:1c:70:5f:c9:d8:62:c3:a9:fa:4d:4a:73:87:
ae:6a:eb:db:fc:c2:af:44:c6:e1:81:48:88:81:77:
df:b6:bb:f5:d0:00:94:aa:4d:f4:8f:ce:ba:85:cf:
df:2f:4c:ac:50:ba:f5:a1:b6:73:8e:e0:fc:db:9b:
11:46:94:38:2f:80:a0:17:02:23:8f:b6:61:19:2d:
d4:7d:74:6a:19:b7:27:3e:2d:5a:17:d3:46:47:92:
a5:68:0c:67:ff:c1:c2:4b:c8:af:2c:c1:e6:23:6b:
90:ac:7e:22:58:b7:fb:d1:2c:60:a8:af:01:a2:44:
20:1a:e7:ab:e9:47:22:93:3f:9b:9d:63:a3:f9:9f:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:5C:99:79:50:8B:F2:0B:F4:68:70:78:A4:FC:B6:51:99:84:45
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dd294e80-dbb7-45f1-a3fd-9866794b3ce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:1000::/40
Signature Algorithm: sha256WithRSAEncryption
39:3e:56:11:72:c7:f5:23:4b:9f:21:31:02:09:80:ba:15:2a:
12:a8:d3:53:77:c3:dc:1f:8f:97:7f:98:33:ff:1a:d9:27:fc:
19:77:6c:8c:33:5b:95:fd:ae:c8:fa:f3:90:77:45:fd:12:63:
68:58:13:d5:67:6e:4d:95:dc:e6:b5:8d:9b:68:61:07:30:49:
39:f5:73:1b:07:0c:39:f9:64:1d:66:e1:50:9d:fb:b4:16:51:
41:ff:48:e0:67:87:8f:f1:e2:7a:02:18:84:43:61:d5:0e:a8:
78:ff:fd:d3:7c:6a:41:b7:11:db:5f:d6:87:db:9d:5b:d1:3c:
45:b5:13:63:c0:e6:78:26:80:eb:25:c6:5b:67:02:e2:ca:aa:
c9:bc:a9:8d:c8:fb:3f:0c:ea:22:41:2a:c9:b7:fc:1b:26:11:
eb:ab:29:d5:31:2f:4a:ad:b5:a9:77:95:10:75:56:40:99:b6:
3c:5a:50:bc:c3:33:83:19:b6:c5:4b:34:70:15:93:6c:e3:f0:
b4:87:93:8a:aa:fa:82:44:1b:95:ef:33:db:46:8b:40:d6:1e:
8e:25:cb:af:25:c5:b5:19:45:78:6d:da:7f:38:90:75:05:e5:
52:c8:a8:70:f4:83:e0:77:5a:c6:c3:39:07:7e:48:c7:13:e9:
87:e9:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:59 2025 by rpki-client