Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f72f8fe2-ef1f-4297-9d10-01e7c6506312.roa
File: f72f8fe2-ef1f-4297-9d10-01e7c6506312.roa (raw, json)
Hash identifier: MAvWsDZxyXYBE6++d84GbYd5TufVl19hta6PnlxBhao=
Subject key identifier: 83:05:40:94:A3:62:5D:CE:2D:3C:E7:7B:D7:CB:68:92:D7:D2:16:76
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5CB7B4C6769740F78E11D2D4CDE6A367CACA466D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f72f8fe2-ef1f-4297-9d10-01e7c6506312.roa
Signing time: Mon 31 Mar 2025 20:11:13 +0000
ROA not before: Mon 31 Mar 2025 20:11:13 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b7:b4:c6:76:97:40:f7:8e:11:d2:d4:cd:e6:a3:67:ca:ca:46:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:11:13 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:b3:28:01:d4:ae:13:0e:47:32:e8:33:24:
10:c9:6d:3d:29:a8:64:ff:fa:22:6e:c8:17:63:86:
07:1a:11:b7:df:a7:94:1f:e3:9a:6e:3f:e6:89:9b:
fa:84:2f:8b:20:3d:7c:13:86:b7:39:d6:6c:3d:3c:
0e:fa:00:f6:ec:32:7c:35:08:ac:11:51:2b:de:9a:
99:44:76:09:bf:36:54:a6:a1:53:6c:61:89:3a:e6:
8f:bc:27:ff:33:57:0e:40:ae:08:d4:f2:fe:9d:89:
5b:66:dc:2a:4d:5d:19:62:28:35:5f:97:f8:95:2e:
48:95:92:07:42:f2:58:63:5a:3f:42:02:61:06:4d:
be:4a:8d:74:42:4b:26:7c:1e:74:72:4d:4a:8d:7e:
ed:73:9b:46:97:24:37:4a:67:d2:4f:ae:2f:7f:6a:
84:75:e2:ae:3d:af:8c:07:db:ca:a5:b0:28:37:77:
68:0f:da:ac:5c:8a:43:9c:46:d8:39:55:f9:fa:6c:
fc:20:70:ec:f2:99:66:0d:85:6c:a6:8e:93:62:31:
09:88:7b:a9:ed:c8:9c:e1:33:48:2c:76:4f:1d:92:
34:ce:0c:02:1c:89:25:4b:f7:5d:32:24:2a:a3:70:
33:3c:a8:06:13:50:b4:2f:09:a6:a4:7f:5f:10:52:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:05:40:94:A3:62:5D:CE:2D:3C:E7:7B:D7:CB:68:92:D7:D2:16:76
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f72f8fe2-ef1f-4297-9d10-01e7c6506312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8080::/46
Signature Algorithm: sha256WithRSAEncryption
6e:be:ab:0b:e0:e5:4e:7f:db:7e:8f:51:da:91:e3:50:5d:d4:
37:4d:a0:f0:55:2a:cb:c9:b4:56:8b:f4:df:bc:1a:65:0c:b1:
bd:d9:88:0f:9e:92:3e:79:b4:6c:6c:37:60:8e:9c:10:a5:5e:
28:3f:31:de:57:44:2d:4e:8d:ed:e6:e5:60:04:84:29:33:10:
d3:3c:f6:5c:e6:6c:6f:96:e0:fb:e1:3d:87:c1:20:41:58:22:
0f:22:98:ff:2b:ad:de:5d:b9:64:da:ad:5c:9c:c6:af:b2:54:
da:c1:bc:97:ab:f0:ae:c1:f1:5e:7b:2a:7d:06:9e:97:3a:cc:
3f:9d:ee:3f:d1:74:61:2c:06:48:94:bf:90:a8:c7:44:fb:e8:
70:3e:e7:e2:ba:dd:e7:2d:b9:fa:56:d6:78:2b:0e:ae:99:a8:
30:be:3f:79:64:34:5b:6f:31:cb:1b:33:06:f4:2c:39:5d:47:
f0:8e:fb:fa:8e:78:05:26:eb:64:50:a5:ce:1c:da:7f:87:0c:
72:6f:57:c3:c5:af:b6:83:e1:53:d1:05:fa:f3:c0:e5:7b:74:
79:92:70:ce:33:f7:ac:06:85:80:d1:66:38:29:ba:d6:5c:18:
ef:6e:f4:43:0f:bb:e8:f3:93:e1:0d:88:43:13:c8:13:19:be:
3c:09:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:40 2025 by rpki-client