Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
File: 08648cfd-d5cb-4480-92d0-084369ff8b4d.roa (raw, json)
Hash identifier: xrLV/vriI2WpYzypXViuXmD72R61bnbwKJE6DoEApzo=
Subject key identifier: 04:AC:24:0A:F5:36:BC:6A:16:8E:97:4C:59:12:3E:AC:EC:FF:34:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7B698D9F9700791C7A6AE1A5CF5BD2799FF93B73
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
Signing time: Fri 25 Apr 2025 19:41:15 +0000
ROA not before: Fri 25 Apr 2025 19:41:15 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:1040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:69:8d:9f:97:00:79:1c:7a:6a:e1:a5:cf:5b:d2:79:9f:f9:3b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:41:15 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=a266eade93e1dd60b070c134dcee672d4a9d1811e4f55117f9108855271738e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:52:c1:e8:9c:ad:f7:3e:77:94:c0:be:83:
28:77:92:29:ba:eb:7b:55:6d:cb:4b:a5:6f:c7:41:
a0:9f:36:b1:bd:85:60:4f:0b:74:d9:81:0b:ef:05:
93:0b:e7:9d:68:6e:2b:b0:37:b7:53:63:37:2c:ec:
fb:df:bf:34:71:78:2e:27:46:8e:a9:0b:5d:bb:05:
5f:25:d1:b9:6e:72:43:39:24:16:de:e2:3d:95:ec:
4e:51:0f:79:87:e8:9f:8a:6a:c2:76:b0:8b:05:4c:
21:9b:68:09:89:24:bf:64:1e:c3:84:9f:9e:89:eb:
2d:be:51:14:a5:43:7d:d2:bd:d4:52:cd:6d:e4:f6:
fe:ad:a5:8c:1d:59:5e:d4:79:2d:56:fb:b0:e5:ad:
ee:3c:01:9c:11:1d:75:64:bf:ce:b2:74:d5:25:b9:
60:42:c6:71:d7:a1:cc:22:c9:15:a0:cb:c5:c2:15:
59:20:30:cc:73:60:a0:98:24:5e:b8:42:1f:7e:e6:
50:3d:fb:4a:a0:60:d2:0d:14:6d:2b:8b:df:9c:72:
e8:b3:88:d2:a8:22:4d:8a:3e:94:cf:03:8b:c2:71:
04:e2:74:d3:af:8b:8b:e8:34:06:55:8b:c3:84:c5:
25:b4:71:e8:26:8c:e0:9e:2e:93:85:91:81:c4:0c:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:24:0A:F5:36:BC:6A:16:8E:97:4C:59:12:3E:AC:EC:FF:34:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/08648cfd-d5cb-4480-92d0-084369ff8b4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:1040::/46
Signature Algorithm: sha256WithRSAEncryption
00:c9:bc:15:44:9c:17:5d:92:01:f3:80:8e:2d:d8:b4:8c:c1:
e1:7c:45:ad:f4:f6:ab:f7:64:e2:f7:fc:26:44:a7:b4:ef:4b:
45:5e:1e:40:d2:7d:e4:a0:e8:ab:35:87:44:87:f6:54:f3:a7:
67:08:9b:05:35:77:06:06:c5:06:b1:71:48:24:31:5f:a3:9f:
c6:2f:6b:27:e4:45:91:10:46:df:1c:b5:c2:4e:59:83:f5:2f:
fc:28:ac:69:28:ef:12:a1:fd:32:24:d8:53:ee:3b:6f:9e:bb:
3e:2d:ca:e7:64:ed:e2:dd:21:de:68:82:98:b0:74:08:1d:79:
b2:b0:b2:af:06:fd:d9:b8:c5:6b:a6:3a:14:8f:4e:50:e8:30:
4a:b8:04:14:53:af:f4:af:63:c2:f2:86:a2:48:4a:a4:cc:7a:
d3:79:bc:42:be:ec:d7:c8:a2:e1:bb:d4:a4:62:d5:ed:99:29:
07:90:fd:03:48:5a:c4:93:26:3f:c1:8e:f4:45:d8:4d:d9:2c:
4d:c3:3f:ba:fa:54:c2:fa:38:9a:a4:98:d8:e6:9f:2f:70:2f:
c1:d1:a2:d4:b4:e0:63:d6:14:54:43:fd:3f:57:1e:d6:2b:57:
f4:f1:26:3a:c3:88:2d:a2:7d:d6:2d:11:2c:27:90:3b:a1:87:
28:b4:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:01 2025 by rpki-client