Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
File: 5fe931ae-e353-437d-9738-79004c5e9188.roa (raw, json)
Hash identifier: KXSdpsY3YM3zIER+du1ZfcZq0SI5Veuo3aY7Fp+xssE=
Subject key identifier: CE:BD:FC:C2:D7:60:4D:93:8C:5B:E3:8D:C6:9C:BA:C6:DF:F6:89:08
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 59746426D4C54A400EB1F63ED162EEFF22A318DB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:74:64:26:d4:c5:4a:40:0e:b1:f6:3e:d1:62:ee:ff:22:a3:18:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:ca:2e:c0:68:d8:0e:40:67:00:39:ad:10:
c2:c6:01:d1:00:44:4c:6b:73:4f:a7:db:65:b9:1c:
ce:2d:14:3f:d2:e3:88:88:b3:36:85:31:05:e6:a2:
b1:db:df:3a:b4:e0:8f:43:3c:b8:e3:0f:c0:48:6e:
f7:31:28:2f:7c:05:2d:86:21:d3:e5:5e:23:4f:7e:
b2:d6:5b:99:5c:e5:1d:2d:70:16:6f:b0:3a:3d:62:
4d:00:2c:6b:14:1f:2c:21:6a:ca:2c:ef:32:90:eb:
e9:2b:c3:26:28:a9:6d:8e:11:e3:66:59:fb:26:b7:
ee:bd:b2:24:3e:57:e4:df:19:56:11:80:86:d9:b4:
7e:df:29:76:b7:91:07:cf:53:96:7a:ec:ca:14:17:
f4:dd:cd:32:aa:98:34:92:d1:26:e0:58:c8:5b:6e:
2b:41:50:f3:5b:8a:22:ea:03:9b:8e:20:90:7b:ea:
4e:ff:f3:e2:1d:13:14:47:3e:b3:9e:37:b3:9a:5c:
cf:ba:a3:d2:76:fa:be:4b:83:d8:af:fe:3e:d5:05:
1e:06:f9:aa:ea:f6:f0:e3:b2:34:e3:c8:52:d0:70:
76:49:c7:57:94:c6:57:a5:fd:d4:b5:6b:78:7d:f7:
67:ba:41:f2:b9:1d:55:6d:65:6b:df:eb:bf:73:6c:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:FC:C2:D7:60:4D:93:8C:5B:E3:8D:C6:9C:BA:C6:DF:F6:89:08
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fe931ae-e353-437d-9738-79004c5e9188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:c000::/40
Signature Algorithm: sha256WithRSAEncryption
57:ab:dd:ec:4c:13:fa:53:18:7d:ad:a2:fa:6b:64:e1:6d:45:
4c:69:db:87:6c:39:8f:33:58:ce:f7:2e:2e:eb:1f:21:8b:ac:
c6:3f:16:95:0d:a8:0f:d6:4d:d7:18:0a:10:81:ac:d1:4f:a7:
5e:42:dd:12:b0:5e:0c:e0:5d:65:ab:a1:7a:90:b1:61:75:5e:
3c:e6:d4:23:75:8c:89:bb:d5:e3:89:0b:65:d4:01:3a:d2:f1:
82:1c:8e:1d:1b:9f:41:9c:5a:c0:36:61:13:4b:b6:b5:76:5f:
90:17:c1:12:16:e1:95:7f:69:b3:fc:3b:d8:ea:f4:8b:6a:f7:
9e:07:55:74:e6:1e:51:25:b6:ad:6b:be:27:5f:8e:4d:9d:8c:
03:93:17:6a:d6:8a:ef:d1:2e:44:03:57:a4:a0:75:06:09:60:
59:b1:69:36:a8:e0:ca:ab:c9:d3:13:a7:fd:3a:16:b4:3f:40:
02:60:50:33:0c:92:d5:33:66:0b:c5:7d:87:23:35:5d:1e:26:
89:c4:7a:4b:74:75:72:17:fd:47:f8:86:49:a9:66:d3:98:05:
68:e0:9c:9e:9a:47:ce:77:fb:9e:84:59:a6:72:33:ff:1f:36:
ac:bc:f9:fa:92:e8:11:2d:0f:a4:2c:4b:62:01:a1:42:66:06:
1f:c0:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:54 2025 by rpki-client