Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
File: 12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa (raw, json)
Hash identifier: IcAzlfPuZ+O0Unzl2IfFHQVMdPPFRittZdIm53JCYPU=
Subject key identifier: 14:5C:68:1A:35:D1:40:84:CC:63:E8:4A:CD:64:C4:C6:5F:B1:93:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7A04EEB601EC2E2A846A0B67377EA38AE2A64F17
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
Signing time: Fri 25 Apr 2025 18:11:01 +0000
ROA not before: Fri 25 Apr 2025 18:11:01 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:04:ee:b6:01:ec:2e:2a:84:6a:0b:67:37:7e:a3:8a:e2:a6:4f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:11:01 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=5de4dd560ff3f6ac71ce765b306cf7f67d4850ed5022047826563fbeec5e7ded, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:1c:39:fd:59:b5:65:70:51:ee:96:a4:ff:
5a:a0:a2:20:ce:19:4b:1a:59:c8:7e:70:99:7c:a3:
a1:e3:0d:d2:74:db:c4:c0:27:01:7c:59:69:c7:14:
cc:42:f8:35:e3:e4:7f:6b:b4:d9:6e:42:27:65:34:
de:23:7a:9e:fc:0f:a1:72:ff:be:24:69:31:8e:58:
27:18:45:a4:45:c6:cf:95:22:a0:ad:90:32:ff:8f:
1c:aa:f4:b3:64:8a:b5:a1:89:3b:eb:64:28:34:7f:
7d:5f:97:04:d0:6a:46:f2:b8:06:e9:9a:80:dc:a0:
f5:99:6f:9f:44:18:39:55:21:aa:67:4a:4a:f0:fe:
04:8f:52:9d:2d:97:c6:55:b6:0c:61:74:f7:2b:f5:
79:be:e1:a0:84:02:cb:bb:83:c8:57:09:a7:bc:94:
97:3e:05:09:c2:87:40:a9:88:39:57:78:53:65:73:
1c:e5:3e:f8:5c:cc:09:cb:04:a1:5a:47:0b:2d:af:
84:d9:c1:55:21:80:fd:88:7e:2e:b4:d8:b5:27:72:
72:a7:1e:34:d3:84:97:36:69:ba:d3:08:5b:58:1c:
bf:4d:7e:83:99:75:89:58:18:38:2c:82:bc:ce:a5:
c0:92:bb:0f:e9:8e:ed:31:5a:d4:14:e6:cb:8b:bd:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5C:68:1A:35:D1:40:84:CC:63:E8:4A:CD:64:C4:C6:5F:B1:93:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12fa0094-3721-4a61-a72f-8cdeff5e5f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
92:a0:66:fa:bc:c3:24:40:cc:14:46:cb:a0:e0:a6:cf:5f:d7:
da:51:9a:3a:40:da:68:49:e7:ef:f5:53:a2:70:b7:53:d9:09:
b9:d3:d8:f7:3a:bb:b5:68:68:ae:db:cd:ac:d7:e9:86:14:5a:
bf:eb:06:31:d5:9d:cb:36:97:f0:40:52:d7:a0:91:2c:11:27:
26:37:a3:10:be:47:d9:7c:2c:c9:e5:d6:0c:cd:b2:6a:45:98:
60:4a:e9:e1:42:39:51:3c:6b:1d:be:b1:79:36:15:1a:7c:da:
db:88:34:ce:68:1f:23:95:5e:29:53:d0:b6:aa:b5:7e:4f:68:
cc:06:61:99:e8:88:80:db:1a:6a:ab:c0:98:a8:1b:d1:7d:d0:
34:15:e2:9d:b2:1b:cb:f7:c9:0d:63:e0:b8:a4:b2:0f:ea:5e:
09:9c:13:ed:d4:e6:99:88:e5:91:07:67:d5:82:94:0d:b5:78:
cb:12:ff:91:e1:b3:89:46:86:f7:5b:6b:cd:6c:4b:02:bb:44:
6f:b7:78:d2:20:33:75:8f:b4:5f:a5:15:74:c6:46:4f:45:86:
11:c3:5e:74:32:40:d6:8f:94:31:89:f2:44:d5:c3:f1:62:ac:
25:97:fd:3b:17:a5:f5:a8:e6:c6:9c:09:18:68:2b:2b:32:5f:
b0:12:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:38 2025 by rpki-client