Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
File: f76388e2-5824-485d-aa99-c7ea5a481aa2.roa (raw, json)
Hash identifier: lBDMYgMkOytId1NwzLmBk6BXc1kzEAX0SrUNUevcZ04=
Subject key identifier: AB:BF:5A:3A:30:40:B0:EC:19:1D:72:C2:C4:F0:5A:1F:9E:05:A9:04
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1C4DF58623B8AF945A0881511663370458204827
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
Signing time: Mon 31 Mar 2025 20:00:14 +0000
ROA not before: Mon 31 Mar 2025 20:00:14 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4d:f5:86:23:b8:af:94:5a:08:81:51:16:63:37:04:58:20:48:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 20:00:14 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:40:c7:84:77:34:db:fc:5d:e0:d4:8d:c9:
d6:0d:94:9f:64:51:6f:f0:ca:70:63:2a:6d:4f:b0:
0d:ca:c5:2a:e5:5a:eb:96:f3:ee:1a:e0:ce:f8:17:
d0:34:f5:c3:23:f8:61:ce:6e:55:7f:c0:f2:eb:fa:
9f:7c:0a:14:fd:bc:83:51:fb:76:2a:43:8c:fe:39:
97:9b:42:f8:7d:6b:dc:4c:b8:25:3f:29:4a:87:bc:
e6:17:c0:77:cb:cb:9b:17:dc:a2:62:b6:97:ea:49:
a0:6d:22:95:00:e1:84:8f:bc:30:33:e2:d4:61:0f:
eb:cd:78:43:19:06:13:81:c6:e4:09:99:3d:cf:3b:
66:d8:3d:e4:cc:b7:79:0d:20:37:57:7c:07:05:79:
3a:e7:8a:40:3c:42:de:ed:83:39:6c:18:9c:49:1f:
28:3c:d7:81:1a:8a:ea:ec:5d:5f:93:41:3f:fe:96:
06:7e:e8:ed:7c:a1:bf:ca:d5:78:c7:85:dd:31:dc:
38:d8:c2:e4:24:a6:27:d5:85:39:32:6c:30:54:b8:
2c:41:8b:d8:d9:b8:9f:d7:c5:b8:4d:a8:8b:22:4c:
46:bb:3e:3c:1f:d6:02:71:0c:80:2a:c7:75:0d:fb:
19:ba:dc:1c:3d:10:8a:5a:ad:16:9d:83:3c:71:38:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:5A:3A:30:40:B0:EC:19:1D:72:C2:C4:F0:5A:1F:9E:05:A9:04
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f76388e2-5824-485d-aa99-c7ea5a481aa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
99:cf:1c:5a:16:31:23:64:06:7a:1e:b7:ae:2f:a1:d7:e7:c8:
0a:3f:45:0b:b4:59:db:2e:79:91:9e:87:ae:d3:18:70:69:5a:
92:3f:fe:ef:d0:5a:2d:32:19:92:14:e3:0f:52:93:82:6a:7f:
34:91:ed:bd:8a:1a:b9:c0:74:d9:91:84:df:d0:2c:f8:39:b0:
c1:28:3a:d1:1a:11:57:68:f2:71:4a:15:b5:01:74:4e:0e:c2:
4c:94:0d:5b:09:a7:62:3f:48:75:b7:09:1f:e1:a0:ac:60:69:
a9:80:db:97:b2:8a:0a:2c:45:23:9d:0e:b2:1c:1c:69:ff:25:
0e:3d:9f:98:11:c5:e0:41:e2:14:8a:d0:8d:45:8f:12:9f:3d:
bd:3e:6e:e6:98:48:90:9d:b3:13:0e:71:e8:67:70:44:52:1c:
6c:88:f7:ea:0a:e9:37:6c:4a:7d:cc:dc:69:96:51:d8:22:eb:
f6:4d:ca:cc:51:9d:f0:e1:13:7b:84:7b:10:a1:1e:64:99:a5:
5f:9b:e4:75:31:7c:43:e6:45:a0:54:5a:c4:58:75:9d:be:8a:
92:6d:a6:93:cb:20:61:cd:d3:93:cb:d7:be:dc:3c:96:61:1e:
4a:04:d7:49:9d:f9:1a:26:c3:b4:0b:44:69:8a:55:98:9a:79:
31:fd:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:25 2025 by rpki-client