Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
File: 70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa (raw, json)
Hash identifier: znrPlTTzAIvCVrILJvta5aTquL0s9VWXaZOQw3alVXo=
Subject key identifier: A6:EE:DE:DC:0F:EC:20:21:8C:63:94:BF:55:DC:80:9D:68:5E:81:07
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1D8615BC9A1441C58BFD995DC52F8EA4ED3F0932
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
Signing time: Wed 05 Mar 2025 17:21:28 +0000
ROA not before: Wed 05 Mar 2025 17:21:28 +0000
ROA not after: Wed 09 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:86:15:bc:9a:14:41:c5:8b:fd:99:5d:c5:2f:8e:a4:ed:3f:09:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 5 17:21:28 2025 GMT
Not After : Apr 9 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:6f:c6:a9:fc:46:9c:56:6b:ab:3c:ef:de:
6b:3c:84:2b:f3:b9:b0:bb:f8:0a:99:26:8d:33:72:
c5:a8:31:11:da:55:d7:14:60:49:9c:b5:55:ae:aa:
d1:23:03:b6:6f:77:85:cb:d9:0d:0c:43:df:bd:0b:
1d:7e:89:e7:e5:ca:c0:fa:4e:50:6f:07:b7:93:bf:
7a:e3:d9:93:15:db:22:99:66:ba:42:e7:0b:f7:6b:
5d:05:a7:74:dd:6b:77:c5:bc:59:54:8e:9a:af:8a:
4b:04:b3:18:a7:51:0b:26:b4:49:19:92:b5:19:66:
66:92:d3:d4:8c:06:e9:cd:61:4e:77:ea:13:ca:48:
4e:f7:24:ff:3a:19:08:3d:d3:b4:e8:ee:13:00:b0:
d7:36:3d:e9:89:f4:2a:a0:ee:e3:d9:99:13:c7:0c:
5d:44:0a:e2:20:67:0b:65:cd:90:15:18:2e:5f:02:
f7:4e:c2:44:ed:40:b9:2a:81:e7:a8:3f:5d:22:91:
d9:de:fa:31:18:a5:7e:c5:6e:2b:ff:c3:eb:4e:c1:
61:76:fc:db:b5:a8:e5:50:5b:76:11:4d:fe:c5:1c:
a3:b0:35:29:45:4b:c2:08:4b:c0:5b:fa:f5:26:83:
7e:2a:64:de:dd:01:aa:fe:7d:45:d7:e4:71:97:f3:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EE:DE:DC:0F:EC:20:21:8C:63:94:BF:55:DC:80:9D:68:5E:81:07
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:5000::/40
Signature Algorithm: sha256WithRSAEncryption
33:f8:63:61:a6:9e:47:42:94:f0:67:fc:45:ed:63:ee:57:23:
5a:3d:f5:b4:2f:6f:17:8a:84:51:85:82:a7:86:f7:f5:a7:10:
f8:fc:60:80:6f:6a:cd:64:36:f2:03:78:16:fe:c5:a1:08:e0:
db:4d:b6:5e:50:75:5a:4e:5a:ef:f4:08:15:b7:cb:03:a6:45:
01:ba:db:74:79:3d:fa:92:62:9f:5a:f9:76:e1:9b:23:57:a8:
f0:2c:8d:28:09:2d:37:00:af:c5:71:ed:38:64:14:05:62:9b:
70:3a:4c:ad:34:89:5d:40:3d:32:57:68:b5:cb:69:b2:8b:82:
9b:61:0f:02:cd:e6:e4:81:be:5d:8c:91:74:76:76:34:d2:bf:
b1:80:b3:60:3a:95:24:6c:60:db:73:72:a9:8a:63:13:3b:12:
89:2f:df:5f:e4:ed:9f:d9:3a:2b:44:00:2b:d8:1e:ac:a8:a0:
fd:8a:5e:0b:88:31:45:d7:25:ef:20:e5:5b:d2:75:24:f3:21:
4f:81:58:7a:dd:8d:e8:c2:d4:e1:51:ad:49:15:98:b7:9c:c8:
35:bd:62:b1:1f:88:03:e0:eb:69:3a:fe:2a:d6:00:95:3a:e6:
e2:00:3a:ec:a5:6b:67:bf:00:14:7a:22:1a:08:13:f7:68:55:
89:65:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:48:53 2025 by rpki-client