Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
File: 7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa (raw, json)
Hash identifier: gBtHwMmcU6whl3E98x27qauf7SMM8Gh8Zq6VfDkbiFw=
Subject key identifier: 13:CE:DC:A7:49:6D:2A:4D:2F:D3:E0:D7:A4:C1:75:E0:2B:70:95:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6E1213721B1F917C5FF77673DD07116AD5F3AEF1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
Signing time: Wed 05 Feb 2025 00:00:00 +0000
ROA not before: Wed 05 Feb 2025 00:00:00 +0000
ROA not after: Wed 12 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:12:13:72:1b:1f:91:7c:5f:f7:76:73:dd:07:11:6a:d5:f3:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Feb 5 00:00:00 2025 GMT
Not After : Mar 12 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:4e:90:ab:c6:21:02:9f:80:25:70:44:d5:
ef:a0:73:8b:d9:ae:b3:c5:7d:a9:26:ab:d5:4c:b8:
59:eb:7c:8c:1a:a2:8e:a3:2a:c8:48:5b:a6:42:e6:
fe:ef:00:44:f1:4c:96:0b:ae:d6:c3:ae:26:60:43:
a5:00:cc:27:80:ef:a0:21:89:1d:10:0b:95:96:78:
79:2c:df:76:98:f0:37:9f:04:66:af:27:bc:2e:62:
f4:74:8b:47:88:f5:ed:dc:42:e1:3c:40:47:87:06:
4f:6c:d2:70:d1:af:ea:75:5e:9e:a4:1b:c3:0a:b6:
aa:4b:9e:58:fd:cd:b7:ef:67:18:67:0f:69:45:2b:
e8:7d:81:88:3d:3b:fc:7e:b4:6b:c6:15:1f:05:c5:
bd:fd:a1:cb:eb:eb:85:6e:d2:25:77:30:b6:47:d1:
c8:97:3b:dc:36:da:83:5a:e4:0a:95:87:98:5a:2b:
2e:90:81:b1:e0:06:76:95:43:78:de:66:4f:aa:f1:
34:c0:65:99:7e:4f:6b:da:84:e7:a2:7b:bc:bd:13:
c8:ad:d7:cc:7c:5e:a8:a4:69:92:93:57:71:65:fd:
55:9f:72:04:8b:d2:d1:d2:b9:e3:9b:5b:23:5c:b3:
f2:8a:41:9d:57:e5:fa:a9:3f:93:6f:d8:e1:42:c2:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CE:DC:A7:49:6D:2A:4D:2F:D3:E0:D7:A4:C1:75:E0:2B:70:95:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7d96d3ad-0ee7-4630-9a49-a0dcc2b71da5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:9000::/40
Signature Algorithm: sha256WithRSAEncryption
97:50:f1:68:7e:c0:35:0b:0f:ad:b1:5a:0a:3b:41:12:ec:65:
3b:79:11:c0:5a:6d:22:d3:de:3b:6c:49:b5:62:3e:bf:26:b3:
f3:90:9d:56:5d:fe:40:66:0c:88:98:70:3c:5e:43:dd:d6:92:
08:8b:c6:0f:9c:69:69:c1:cc:d8:46:1c:1a:18:cd:1e:eb:c5:
8c:ee:13:74:31:ce:77:94:2e:14:6e:ee:49:54:10:fd:38:e8:
d1:a9:b4:82:17:a2:ce:5d:91:1c:ca:3a:08:4f:d3:59:ce:43:
90:42:8f:4d:ef:d6:98:d4:92:50:09:9f:d8:b0:04:b2:6e:29:
5e:27:93:71:62:d5:aa:8a:11:8c:9a:16:ed:aa:1f:f1:eb:dc:
10:ea:d4:44:27:83:ae:21:81:c8:b6:af:e8:5a:09:aa:7d:0c:
ac:3e:82:a4:6c:0d:39:0c:b1:21:7b:5b:16:4a:ac:1d:15:0c:
4d:36:77:72:c1:1a:5b:be:d4:50:56:0c:f2:f5:63:e3:90:b2:
bc:ad:22:69:de:b9:5d:23:a7:dc:ac:a3:f9:00:8c:2b:1a:de:
a3:e5:82:c3:e7:04:94:2a:eb:d9:a2:f9:db:ee:1f:a1:41:ff:
f5:60:b2:d8:e9:42:40:9e:ce:35:2c:f7:f3:e1:2e:b2:9a:f0:
e0:a2:6d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:09 2025 by rpki-client