Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
File: 0d8c280f-edb2-45fb-9207-8226dc900bb1.roa (raw, json)
Hash identifier: yJwyVxAsJlemAyhx38jVvOL8nK6REbNnuLmFZQQg0ZI=
Subject key identifier: 65:F2:42:89:C5:41:16:C3:C0:F0:34:04:4C:5B:7B:6E:D1:CB:DA:95
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41CA1F0F0664B9F65737AE463B43050E23FDEF64
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
Signing time: Fri 25 Apr 2025 18:31:32 +0000
ROA not before: Fri 25 Apr 2025 18:31:32 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ca:1f:0f:06:64:b9:f6:57:37:ae:46:3b:43:05:0e:23:fd:ef:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:31:32 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=10f62ac5aaa0067b2f5d26770001458d5382279228e9029c41ee2239f672ddfb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:46:51:6a:00:bf:ff:f0:e0:92:69:2c:a7:
a0:3e:87:ef:09:c1:45:f9:0a:26:1c:07:0c:1b:66:
18:ae:15:9d:94:60:6d:8d:bd:b7:11:5c:e4:30:6f:
f5:5e:4e:19:fe:3e:e8:88:32:07:a3:85:d2:d5:4e:
fd:69:eb:2d:25:06:3a:bc:82:84:32:89:57:02:f2:
82:ea:86:6f:ae:c6:7c:b7:ea:8e:a7:f2:e2:b9:59:
b5:91:b9:be:7a:5a:72:46:a4:f4:fd:d6:f6:86:2b:
12:27:5f:20:ef:08:4d:73:83:70:60:75:4b:46:64:
63:e9:67:8c:ff:43:e4:27:8b:1d:61:2e:47:a2:c6:
f8:2a:11:f8:b8:19:b5:a8:67:88:c3:2b:2f:e6:48:
64:8c:51:ff:d3:53:ef:d0:36:f0:61:12:4b:fd:3a:
b3:14:df:56:c2:0a:69:65:5b:84:6e:cd:5a:23:99:
13:39:e0:ff:2d:7e:76:0b:de:b7:f1:6d:63:3c:d8:
f8:ae:4c:c2:c3:cf:99:63:bd:b2:f3:f3:94:a8:c1:
28:40:6b:b4:ee:f5:d4:2e:1e:78:98:1c:ca:ba:52:
be:8c:10:27:20:02:55:81:7a:48:37:38:a5:76:84:
2f:6c:46:26:af:ed:8d:6e:39:a3:a3:94:6f:9f:3a:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F2:42:89:C5:41:16:C3:C0:F0:34:04:4C:5B:7B:6E:D1:CB:DA:95
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0d8c280f-edb2-45fb-9207-8226dc900bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:5080::/48
Signature Algorithm: sha256WithRSAEncryption
68:06:84:e3:a1:80:01:3c:d1:d6:f9:5d:f1:9d:5f:dc:6c:27:
87:2a:0e:5f:2e:19:2c:a6:1f:60:ce:43:34:55:db:1a:7b:e8:
3f:52:56:b1:d8:97:07:e1:54:46:cf:e3:9e:7e:e8:42:f1:63:
55:42:e3:20:54:66:de:67:e1:30:29:c4:f2:e0:f0:c1:d7:76:
70:74:8c:55:4f:76:6a:aa:b4:95:09:78:d4:69:4d:5e:5d:89:
0f:40:fe:b4:8f:57:de:cb:a7:6c:5e:34:00:95:b6:b7:e2:94:
09:ff:76:2a:26:73:8a:a6:a1:11:9b:6d:7f:15:41:11:42:35:
a0:48:a6:a9:cc:70:9f:5d:e3:2c:85:01:eb:ea:f5:5f:6c:04:
47:cf:80:ad:4d:c9:0b:c9:1a:b2:f8:d9:d2:68:c9:8f:3a:eb:
da:83:fb:f3:b6:a4:fa:81:ec:f4:50:cb:a3:99:6b:c2:14:59:
c7:c1:c3:9a:4b:4a:90:80:57:73:3d:e7:cd:9d:1d:e3:9e:ef:
b7:fc:69:d1:ad:16:e1:df:0a:96:8c:1a:b5:47:0d:44:88:ed:
e4:1a:4a:fc:0d:53:93:f2:22:c4:8c:2e:85:b2:3f:09:ed:31:
b1:6a:95:f1:6e:e8:16:1f:8b:bc:1f:b8:e4:9c:64:c0:6d:c5:
b9:80:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:45 2025 by rpki-client