Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
File: ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa (raw, json)
Hash identifier: rSFBE0Fz2iCIwkNqm5GWvnoVel48/z8wjUFcV4gvzXc=
Subject key identifier: 59:63:34:5A:19:2E:AD:DC:18:81:87:3E:6D:7E:FC:89:E8:B2:F4:7E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1368DEF0E364720B23BF108EFE6A9B85A46E9E2F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
Signing time: Wed 02 Apr 2025 00:30:36 +0000
ROA not before: Wed 02 Apr 2025 00:30:36 +0000
ROA not after: Wed 07 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:68:de:f0:e3:64:72:0b:23:bf:10:8e:fe:6a:9b:85:a4:6e:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:30:36 2025 GMT
Not After : May 7 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:a9:13:e4:25:35:f3:41:a8:7a:36:08:53:
85:12:2a:ae:1c:a0:60:a7:e8:6e:8e:ed:a8:02:95:
e3:7f:3b:bb:38:28:b9:6a:49:a0:65:5d:6e:02:2a:
ce:03:04:d7:f5:92:ac:21:c6:dd:80:6c:15:5e:c1:
bc:cc:37:89:0c:11:9d:93:59:27:cb:dc:85:8f:fb:
1b:98:5b:cf:ca:54:e6:eb:7c:3e:36:66:17:92:24:
ea:14:0b:be:16:f1:22:78:38:89:b6:71:e9:c9:a4:
58:4e:b1:fe:7f:f4:96:19:60:68:51:2d:d7:73:bc:
22:3e:f1:91:24:6f:7a:24:a2:3f:87:12:3f:80:38:
7b:30:25:b3:4a:1d:ca:d7:1c:f5:a7:04:22:c9:4a:
d7:cf:dc:6b:60:22:91:87:d4:b9:dd:88:a8:21:a8:
31:d2:a0:7b:8a:e1:9b:16:f6:65:f0:80:a6:67:0b:
f7:9c:45:ca:24:4c:97:5c:ce:6b:89:73:e9:a2:cc:
95:8b:22:7f:01:64:a1:e7:d1:93:38:da:f2:ca:90:
00:0a:81:41:04:9b:de:7e:52:b1:f1:ee:65:8b:8f:
b2:8d:31:e6:3c:0e:f2:54:63:d5:42:d6:ac:7d:23:
71:78:a6:e5:71:b3:8a:0b:1b:8b:94:5d:fd:ad:60:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:34:5A:19:2E:AD:DC:18:81:87:3E:6D:7E:FC:89:E8:B2:F4:7E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ffdc3da1-2ec7-411e-9550-b7c956fb46db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:4000::/40
Signature Algorithm: sha256WithRSAEncryption
07:16:11:28:34:97:a9:7d:91:49:16:83:83:d7:7e:b8:db:00:
d4:ef:e3:a7:f2:2f:74:98:c6:26:25:8d:ad:51:f3:c7:21:c2:
8f:2f:03:23:93:07:d6:32:e9:f2:a4:f4:a6:30:cd:47:bb:6e:
1e:a4:4d:bc:37:d0:2c:60:ff:1c:60:8e:dd:2f:1e:19:2f:1f:
4f:b2:26:0d:f1:70:66:97:4a:fd:8e:27:73:4e:e7:7f:62:71:
c5:4f:c8:db:36:77:41:5d:a3:13:e3:d6:30:3d:25:76:b9:27:
d5:a0:be:35:83:3d:88:cf:7a:36:ba:c6:a4:ea:aa:0b:c2:08:
37:33:db:05:99:31:e8:d0:9a:9a:8b:45:b4:55:f3:ef:6d:f9:
1f:01:d3:af:c9:06:ca:9b:61:22:4b:f3:28:b3:ed:59:26:c6:
92:6d:79:47:89:51:62:5c:aa:93:d0:ae:4a:2d:cf:bc:be:d5:
2d:c9:e4:60:3b:fb:b5:4e:bd:42:aa:ef:e2:71:da:01:07:ce:
b8:c8:2c:32:ed:34:2d:d6:87:9f:b5:8b:f6:e0:3b:bb:2f:aa:
e2:b0:db:b3:53:12:bc:f0:8d:ac:d2:85:78:14:72:09:ae:f3:
ae:af:d0:26:5e:63:26:f4:82:27:2a:bd:5b:d5:53:af:8c:e3:
8c:f9:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:22:44 2025 by rpki-client