Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa
File: 9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa (raw, json)
Hash identifier: 8/JNR8uEAPg4FqEc3Ps/iCZxN6H3BvzIj9SqAtskRJY=
Subject key identifier: 8D:0D:76:F9:F5:EE:C8:AB:85:40:C9:4A:B8:30:30:95:2E:DE:3B:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 73BE9087FB0A66FA5EECEBB57E28C2FE7B895B0C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa
Signing time: Tue 13 May 2025 18:30:19 +0000
ROA not before: Tue 13 May 2025 18:30:19 +0000
ROA not after: Tue 17 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 13:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:be:90:87:fb:0a:66:fa:5e:ec:eb:b5:7e:28:c2:fe:7b:89:5b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 13 18:30:19 2025 GMT
Not After : Jun 17 23:59:59 2025 GMT
Subject: serialNumber=03c58b051aae4642868d322267dac97aece8ffd6cb112dec3090242635f9c013, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:52:85:be:27:ca:ac:15:d8:ca:dc:df:5a:
07:c1:b0:af:fa:94:75:16:d1:97:b7:1e:2a:5c:85:
9a:a4:25:3d:e2:51:56:c9:f3:b9:44:b5:ee:8f:c0:
03:c6:1e:da:ad:11:b5:01:89:d9:ba:50:12:36:dd:
b8:55:32:2d:28:1d:4b:40:e3:8c:c7:d4:55:a8:68:
52:be:ef:58:9c:e7:5d:4d:e6:c4:48:9c:5e:14:69:
b8:35:ef:2b:1c:e7:8c:31:50:cb:f2:2f:37:68:1c:
ef:c4:b9:3e:2c:17:a1:d9:4c:1c:fa:de:a1:f7:c2:
da:37:c8:ca:4d:94:bb:bf:19:40:24:c5:c1:5d:c1:
b3:62:d2:fc:7c:15:92:18:8c:73:d0:39:18:e5:b4:
77:22:ca:ab:db:ca:d9:97:79:92:18:08:98:cb:e1:
4f:e3:f8:e1:74:10:f0:4a:83:01:d3:3a:b8:d6:4b:
f1:be:8a:c7:62:74:eb:2c:d4:35:59:67:86:e7:82:
ba:2a:10:d4:17:59:21:43:87:17:54:be:33:84:e4:
62:19:76:36:ef:c6:04:2e:a5:57:b2:e0:fd:ef:b7:
2c:0b:65:ed:d2:99:14:06:28:24:ee:86:0e:f2:37:
87:26:d7:8e:7f:90:66:46:bd:4c:ae:99:ae:5c:ac:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:76:F9:F5:EE:C8:AB:85:40:C9:4A:B8:30:30:95:2E:DE:3B:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9c1a10cc-5dc9-44bc-a4d2-9396bd9bc959.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:a000::/48
Signature Algorithm: sha256WithRSAEncryption
25:01:8c:85:1b:80:e2:f1:05:16:0a:2b:91:50:f4:6a:f0:b3:
7c:17:80:33:32:28:62:21:4d:73:5d:76:36:09:2f:e2:82:55:
80:fc:ab:f5:ef:c3:10:fa:49:b3:2d:11:02:7b:3d:4b:1a:78:
ea:17:53:2a:7d:a1:de:02:31:93:34:b3:45:3f:c2:42:e4:48:
bc:df:49:97:9c:bc:61:3f:bc:23:53:72:3b:14:b3:1c:ad:b5:
ca:96:f3:62:78:ec:eb:32:5f:2e:b3:2f:c6:88:40:73:c6:80:
02:45:85:41:07:1e:2b:c2:4f:eb:c8:b2:14:59:6a:93:1e:fc:
d7:a4:19:f4:17:57:5f:4e:88:dd:37:e7:66:8e:5a:28:f7:ca:
b1:cc:2b:e1:e9:ac:de:fa:59:28:30:71:61:38:29:ef:be:34:
a6:7f:a1:2d:d3:c0:8c:6e:70:be:ad:36:0f:1a:e9:44:03:29:
e0:4f:fe:c6:a7:c7:a2:46:13:fe:ad:b7:ad:e1:d1:d1:37:ca:
2e:cc:fa:96:5a:33:9f:37:0a:a2:61:6a:0b:78:ca:9b:a1:14:
d7:a2:a8:56:8c:95:9b:9c:cc:81:78:34:b8:04:ce:a9:4a:f0:
e3:04:e3:83:ed:4f:94:ad:a2:a7:dc:00:a8:b1:d2:fc:70:56:
df:27:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:26:02 2025 by rpki-client