Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9753974-947c-42c4-885b-aa94c43c56a0.roa
File: f9753974-947c-42c4-885b-aa94c43c56a0.roa (raw, json)
Hash identifier: wohycZoTFASLUiFaXUwKc4E927DeE9zeuBTWBrW1n5Y=
Subject key identifier: A2:A9:E8:23:A7:29:12:AD:73:34:B1:AE:F0:F6:47:BF:87:40:9C:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 71433919540F20E3272BFE22B08BA84ED189D885
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9753974-947c-42c4-885b-aa94c43c56a0.roa
Signing time: Mon 31 Mar 2025 19:00:09 +0000
ROA not before: Mon 31 Mar 2025 19:00:09 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:a0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:43:39:19:54:0f:20:e3:27:2b:fe:22:b0:8b:a8:4e:d1:89:d8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 31 19:00:09 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:f7:38:78:85:3c:ac:70:de:a7:99:13:83:
84:bf:a6:07:2f:52:26:0d:fa:20:ba:e7:68:0f:e9:
bd:de:bd:16:89:79:98:81:c4:0f:e7:4c:62:e4:ae:
0a:fd:39:1e:18:9d:14:66:18:d6:eb:c0:05:5b:99:
22:ed:ee:8c:3d:06:21:e5:fe:b0:c6:1f:c8:09:5b:
57:24:48:19:ff:aa:67:dd:83:08:c3:22:a6:2c:fd:
35:d1:8d:7c:8c:41:72:76:92:e5:0e:61:11:48:d3:
49:6f:ed:3d:ce:30:22:32:c0:a7:5f:ba:19:91:60:
30:4e:e2:0a:b9:a5:ab:39:7a:08:5d:36:d1:21:09:
fc:39:9a:a3:17:32:02:83:e9:1c:7b:9d:d4:4a:7f:
99:b8:5a:9d:bf:01:78:37:05:8d:9b:cb:1d:61:5b:
d1:5d:67:82:ba:9d:98:04:72:0e:c7:dc:ef:39:c9:
27:c9:25:5b:e8:b6:63:38:db:66:93:d0:cc:47:f9:
13:4f:e3:bc:ac:d2:52:75:14:5f:0d:07:e5:1e:62:
26:84:1a:47:51:1d:d3:58:c4:fd:6a:fc:08:19:a7:
f5:0f:07:e2:90:65:76:e9:c5:fa:13:d0:a4:ad:4a:
9c:18:c5:52:78:df:d4:25:f1:b3:f3:c9:99:ca:97:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A9:E8:23:A7:29:12:AD:73:34:B1:AE:F0:F6:47:BF:87:40:9C:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9753974-947c-42c4-885b-aa94c43c56a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:53:e8:79:87:ff:ff:8e:2c:4e:18:46:03:45:3d:e0:57:18:
e3:06:7d:81:53:79:a0:72:6c:45:21:91:d9:77:8d:8d:09:18:
78:02:07:eb:d8:ef:72:a5:ea:63:67:f4:85:15:f8:53:6c:47:
20:e0:ca:0c:55:6a:3e:a5:9c:b8:d7:6e:85:14:b4:05:80:a0:
bb:ba:f0:eb:7c:72:ec:80:dc:66:10:99:49:25:50:db:99:ea:
bf:59:1c:13:24:a9:45:49:42:b3:a4:d6:13:11:27:f7:63:15:
42:98:7c:d9:eb:dc:c0:d9:70:8a:a7:48:38:e1:e0:d2:b4:c3:
1e:91:2a:93:91:5d:bb:e7:bc:31:31:8e:c9:50:9f:6b:64:c3:
c8:79:7c:2c:4c:5c:ae:19:2c:25:53:03:21:99:9a:86:8d:bc:
0b:b3:7a:c7:6a:f4:f9:26:c6:43:98:d3:d1:f9:cf:f2:bd:83:
ce:17:06:20:85:00:45:a2:26:b7:df:9d:f9:13:f5:1f:31:15:
98:d4:63:64:86:f6:ce:c7:df:c4:89:33:01:a9:93:7c:e5:42:
0a:87:ba:b5:54:70:4b:b9:7d:0c:a5:1a:9a:ef:ab:18:32:b7:
d4:57:51:10:3c:cd:ed:cb:87:7b:ee:f6:4e:dc:ea:68:ba:93:
61:94:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:52 2025 by rpki-client