Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42fc7c20-224c-4e3b-8c6c-851926d0e396.roa
File: 42fc7c20-224c-4e3b-8c6c-851926d0e396.roa (raw, json)
Hash identifier: My3bL2e66LBe+Q4yw4CN3fRkXcIBp+uUvZYb+dapc8s=
Subject key identifier: 18:9E:C0:60:E7:E8:9B:1D:E6:C1:F0:6A:F3:5C:90:E7:9E:DA:1A:FE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 373862BC97A5978B60D2D278069761AD25BD6A91
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42fc7c20-224c-4e3b-8c6c-851926d0e396.roa
Signing time: Sat 25 Jan 2025 00:00:00 +0000
ROA not before: Sat 25 Jan 2025 00:00:00 +0000
ROA not after: Sat 01 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:38:62:bc:97:a5:97:8b:60:d2:d2:78:06:97:61:ad:25:bd:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 25 00:00:00 2025 GMT
Not After : Mar 1 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:2d:7c:57:fd:30:69:50:d4:ba:39:6e:33:
bb:f2:0f:97:6d:64:5d:47:d4:26:4d:69:4f:5b:05:
1a:32:fe:0d:50:36:0a:87:ea:70:8b:1b:1c:b4:75:
7f:72:d3:cf:04:93:e6:09:63:28:dc:ed:eb:7a:f8:
8b:5d:98:dc:e5:6c:5a:7f:19:84:ac:e4:ce:78:cf:
73:2a:4e:4f:20:12:0e:61:6e:52:18:f6:25:6e:2a:
5c:35:83:d2:50:c7:04:89:1f:91:17:b2:55:52:8c:
4d:09:31:ae:b1:dd:55:72:1b:5a:9d:80:92:a9:3e:
f2:71:61:fc:a5:32:79:f8:49:c9:f4:84:6e:ec:2e:
32:a1:1a:3b:f2:72:f1:f3:bf:01:ca:3d:9a:38:00:
49:26:12:98:07:3b:7f:ce:ed:98:03:ed:a8:ab:7f:
d6:f2:3b:8a:e3:8c:fb:2e:70:d2:90:1b:b2:46:b7:
31:1d:b6:b8:5f:77:61:fe:43:7e:e8:1d:96:92:c3:
ed:6f:3a:66:43:4e:93:90:fe:73:65:00:f8:c3:49:
9a:d4:4a:73:1a:b9:c3:8b:7f:ff:24:2c:da:47:78:
91:54:d3:b7:76:0b:0d:18:23:e6:67:0c:82:00:07:
53:ca:b4:2e:b7:af:6d:59:ad:70:92:37:81:3f:c2:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:C0:60:E7:E8:9B:1D:E6:C1:F0:6A:F3:5C:90:E7:9E:DA:1A:FE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42fc7c20-224c-4e3b-8c6c-851926d0e396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:c000::/40
Signature Algorithm: sha256WithRSAEncryption
a4:1c:8d:eb:db:5f:f3:33:a2:52:bc:77:42:44:f6:eb:de:c7:
51:fd:ce:d7:3c:c4:f9:c9:80:13:4a:94:56:9a:53:3d:4b:1b:
a9:64:f2:0c:88:f6:c0:0d:58:af:37:47:35:5b:fc:b8:a2:03:
ed:47:4c:0e:9c:70:36:25:cb:4f:15:dd:fb:30:85:aa:b0:ae:
c5:44:ad:a5:65:10:c5:5c:d0:e6:4b:b2:ea:ab:23:96:fd:2a:
bd:94:0a:d0:e9:b5:2a:c5:48:ed:6f:75:ca:4f:ce:87:f8:65:
ba:30:03:c3:b1:cd:65:3e:64:fc:a3:41:59:e7:2e:62:29:5c:
9d:b8:dc:5e:22:05:0b:c7:20:c7:d2:ce:ff:07:b2:e3:eb:b6:
10:90:84:5f:c7:55:ee:eb:80:84:ab:17:dd:bd:ad:68:28:d4:
12:81:d1:b9:5a:a0:64:d9:90:44:7c:3a:bd:a6:56:c1:44:59:
28:5d:f1:93:f3:92:d0:9b:d3:9f:97:8a:22:89:b7:0f:45:d6:
01:a7:63:35:d3:97:e7:b9:56:63:a1:a9:40:5d:a5:4e:ba:91:
bb:76:d7:27:0c:54:92:41:c8:0c:8f:22:f3:95:f6:12:8d:7b:
58:2b:bc:26:47:ed:6b:e4:58:6a:84:a1:9e:6b:4a:c3:00:d8:
1b:a7:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:27 2025 by rpki-client