Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
File: 533769c8-002c-491c-9b99-324fe9f5743c.roa (raw, json)
Hash identifier: CRaCJf1CNeTMaoNmtzmjuINXenrb28x3aypPP6nFxjs=
Subject key identifier: D7:98:CF:E8:64:BC:3F:B5:B7:B8:9A:EB:CB:D7:40:53:03:15:71:E5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 61D1737CC3C151D332F1F1F6D0D5A007A2805592
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d022::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d1:73:7c:c3:c1:51:d3:32:f1:f1:f6:d0:d5:a0:07:a2:80:55:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:0e:e8:bc:53:c7:6a:94:4a:b6:1b:64:14:
7e:2a:2f:a4:bd:03:c6:bd:20:f2:34:f1:14:fd:d0:
c6:ad:8a:76:3c:ce:f2:3d:17:9c:06:c4:45:0d:93:
5c:88:4f:ea:84:5e:c4:01:6a:31:ca:ee:e0:b0:c3:
a8:c3:b2:3c:eb:e5:24:58:b9:b4:2b:ab:43:45:75:
d1:6a:f6:a8:a5:da:76:49:38:55:b1:5d:84:11:70:
68:f4:51:df:92:83:10:d5:94:2f:9f:73:23:9a:0e:
e5:bf:3e:93:3f:65:05:4f:f6:eb:19:ec:19:e3:b8:
48:ad:e7:8c:21:7a:2c:71:e3:f3:f6:90:35:a8:4e:
11:47:64:ec:f4:c9:75:3c:d8:e1:a7:15:81:cc:ef:
b2:aa:57:05:17:03:5f:8e:84:59:ad:cc:6c:8f:4f:
ff:75:df:a1:0e:75:a8:db:bf:f5:a9:5b:be:e9:36:
aa:d4:9a:ad:40:ce:0a:eb:d0:77:6e:b9:32:04:ae:
a0:d5:3c:89:7b:ed:58:a6:1f:34:ac:df:d0:39:6a:
e5:2e:d7:65:84:27:7b:44:ee:73:d1:af:2d:57:3d:
32:88:85:2e:73:cf:70:03:b7:98:0c:25:6c:17:6f:
21:2a:a7:02:e1:66:bd:ce:7b:8d:96:c6:6f:26:25:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:CF:E8:64:BC:3F:B5:B7:B8:9A:EB:CB:D7:40:53:03:15:71:E5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/533769c8-002c-491c-9b99-324fe9f5743c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d022::/36
Signature Algorithm: sha256WithRSAEncryption
65:2a:26:17:aa:5c:a3:26:44:ef:ac:75:45:13:d2:60:ca:bc:
0a:b8:97:f0:f8:f2:4e:d2:44:94:7b:4e:cb:1c:ae:ef:fb:40:
9b:fb:d9:16:0a:fb:f0:3a:60:3d:93:e1:cd:8f:20:63:53:b1:
cb:aa:bf:27:2f:1c:9c:6f:a5:cc:90:d7:71:1c:af:8e:f5:f9:
de:2c:fa:98:93:46:15:5f:08:75:91:17:c0:3e:94:9b:e3:f7:
b4:38:d3:8d:c1:fb:61:05:25:f0:8d:19:d4:80:f9:71:db:52:
f3:78:6a:d2:d0:da:9f:11:0c:9c:c5:39:82:8b:37:45:5b:c4:
b3:93:ab:ca:82:70:28:10:4b:b7:52:cf:04:e8:71:59:66:e8:
ba:ab:24:d0:24:91:61:cd:20:a1:8e:a8:4d:c5:80:79:2b:da:
d0:99:d8:26:f9:a0:e6:68:ba:bf:47:7c:1c:14:ab:12:7c:0e:
d7:26:9f:1b:0f:17:fc:d7:43:99:b7:14:21:53:01:b7:4d:aa:
3e:a9:73:b4:f6:8e:aa:3c:da:97:a1:53:1b:3d:70:c1:99:de:
8a:8a:f5:eb:a8:5a:01:e4:3e:41:22:f7:99:94:59:01:f6:84:
ea:ce:c4:60:2f:45:a8:1c:21:10:80:08:32:ce:87:48:b8:d5:
c7:69:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:05 2025 by rpki-client