Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
File: 70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa (raw, json)
Hash identifier: 0B4ron8PyZXKlb/BBXTTXkMHLLpqU/Vsy5Jg9ZLvoVY=
Subject key identifier: 83:4F:0E:9F:7C:AD:87:A8:2F:19:94:14:15:03:73:F1:52:C4:F9:B1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53DC9CE8AD747FD2EA7166265DD9297D4FC3114A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:dc:9c:e8:ad:74:7f:d2:ea:71:66:26:5d:d9:29:7d:4f:c3:11:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:cf:9f:81:c7:99:00:af:66:20:45:82:08:
56:a4:a4:0f:b7:17:be:54:6b:c8:97:7d:ec:e0:34:
24:17:09:ea:0c:94:76:d6:85:f4:41:62:35:67:90:
3d:c9:f2:9a:7a:ce:b3:ed:82:8c:bc:8f:57:fc:c5:
67:30:c7:3b:f8:41:41:5d:c5:6d:eb:cc:de:83:62:
e8:e1:99:bd:63:41:39:27:5c:cc:a9:cf:7f:45:a1:
44:a5:3d:61:c3:42:16:45:aa:a9:bb:f5:d3:48:89:
5b:4e:d4:62:a3:25:b4:3c:64:ef:ba:8c:86:ce:1d:
92:5b:1b:fb:06:6a:36:62:cd:a7:ea:73:38:9e:3b:
18:31:7e:91:35:12:97:eb:c0:41:cb:29:5a:1b:07:
05:b5:1e:fd:c9:b8:97:e3:f1:a0:cf:cb:94:eb:e5:
02:b3:7f:3e:8d:bd:56:38:b6:58:41:98:ca:8d:4c:
3c:cc:01:00:eb:24:9e:f9:8f:23:9c:52:4d:91:51:
84:1d:ac:51:45:3a:14:f9:be:15:4c:c9:dd:64:c7:
96:01:ac:4c:42:25:46:d3:ea:ca:15:fb:95:99:88:
1a:e5:a0:3d:31:89:ad:f9:b3:2c:60:e8:61:13:14:
07:0d:aa:e1:9d:fb:c9:55:84:a1:14:e5:d0:a3:5c:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:0E:9F:7C:AD:87:A8:2F:19:94:14:15:03:73:F1:52:C4:F9:B1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/70d9b32d-6db3-4971-bdb4-e5dd251f6705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:5000::/40
Signature Algorithm: sha256WithRSAEncryption
ba:c9:05:e2:8a:db:d2:02:d7:a4:29:b6:04:df:b4:55:06:1a:
66:e3:e9:21:dd:fe:75:a6:de:3c:bf:0b:a8:0d:0c:fe:36:98:
94:49:6e:4c:e4:90:e9:02:d2:d7:fd:b8:78:9f:0d:5c:24:46:
50:83:0f:c2:85:b7:62:b2:c4:21:21:51:17:66:f0:85:9a:53:
b2:16:98:52:f2:47:c9:ea:d4:41:32:b4:1d:94:53:1b:cf:6f:
6b:99:58:ad:3b:15:6e:43:8c:6f:f2:92:25:36:2a:02:5d:f0:
3b:9a:55:65:c2:79:d1:ff:35:a4:d4:27:02:45:15:78:90:b4:
ea:12:42:fe:c0:81:5f:3c:2c:b0:e4:ef:84:43:96:74:28:6e:
55:e4:f7:07:9c:0e:ba:16:a8:a3:b7:bd:26:bc:9c:92:f2:75:
dd:b4:d0:e7:52:d4:30:4d:10:8f:b9:0e:a0:65:42:66:bb:ba:
56:55:4f:67:24:1d:d5:63:9a:2d:c4:bc:c6:89:94:f4:ad:bb:
11:a9:20:47:96:59:bc:77:74:99:02:cf:b7:65:2c:6f:8c:25:
02:f3:02:af:d2:b9:53:a6:d3:cf:d3:06:fd:1b:0f:1b:2c:86:
92:28:96:d5:09:76:c9:bd:a8:77:5f:d7:2e:34:0c:3c:3a:ce:
88:78:9c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:05 2025 by rpki-client