Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
File: 17c361aa-9d23-48f1-8250-bc772fa7773a.roa (raw, json)
Hash identifier: NEOXkUMyWoDbocxdX7P2kciuY7HqH2WXkjiqPUxBy7k=
Subject key identifier: 8A:53:89:48:27:CF:D1:88:DC:6E:08:24:A1:CF:84:2D:20:00:EC:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 530952D21F5A10EF9BBA7418A48B89E7B1BCDA36
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
Signing time: Fri 25 Apr 2025 18:10:20 +0000
ROA not before: Fri 25 Apr 2025 18:10:20 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:09:52:d2:1f:5a:10:ef:9b:ba:74:18:a4:8b:89:e7:b1:bc:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:10:20 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=3de6c43215a9589b410bfb13192d0130eef434172c0aad5568104ad31b37eeba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:44:74:4c:df:27:bb:07:ff:49:d0:ef:ba:
c0:1f:fc:97:e9:ff:e2:8f:1d:0d:ce:92:b5:99:e2:
7b:1d:d2:43:ce:8c:4e:ac:6f:95:24:dd:d9:51:09:
94:b7:15:4c:b2:ad:e8:18:c7:e8:78:d6:84:38:72:
6e:9a:a0:2b:0f:5c:2c:c9:ce:cb:44:df:ff:84:f4:
93:86:5c:2d:10:9f:c8:34:96:c2:38:54:89:85:69:
6a:98:19:96:04:eb:6c:1d:7c:a8:7d:ab:fe:a9:1c:
88:5e:1b:30:bc:c2:ba:95:d9:5b:9f:51:7a:6e:14:
b6:dd:92:fc:fb:81:31:de:50:67:e3:ea:57:4c:55:
6c:66:91:2a:52:1b:e2:30:eb:bc:fd:18:96:05:9b:
1b:37:bf:c1:8b:f0:68:56:30:62:71:b2:e2:82:3e:
0c:66:e2:3a:8c:60:6e:c5:5f:c4:25:73:f3:ba:16:
34:c3:f9:09:87:36:ce:82:89:1b:4d:c3:30:d3:5c:
c3:99:67:3b:a0:f0:2d:d0:61:20:78:cc:91:4b:b7:
66:f4:ca:53:21:de:ed:19:de:d2:8e:94:eb:33:2b:
fc:87:d1:6e:e0:e3:06:26:3f:05:11:06:04:dc:52:
7d:fc:08:39:8b:b1:17:3f:21:19:33:aa:b7:5c:9f:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:89:48:27:CF:D1:88:DC:6E:08:24:A1:CF:84:2D:20:00:EC:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/17c361aa-9d23-48f1-8250-bc772fa7773a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
bf:8b:2e:e7:92:4d:78:c8:6b:ae:c1:02:ea:42:dc:80:15:3c:
d3:b2:df:7a:2b:17:3b:78:f9:91:19:a7:df:e2:c3:42:79:84:
12:3d:0b:21:4b:c4:b7:00:1e:5c:cd:6e:cb:29:4c:5f:83:20:
21:71:88:51:71:28:3a:98:23:09:92:0f:cb:d9:9a:22:f3:85:
a4:b0:54:1e:a8:f4:f1:fa:86:73:ac:00:63:58:9b:f0:f8:69:
58:a1:1f:1f:d0:a3:da:d4:34:78:51:3c:83:e1:e7:52:49:80:
8d:4c:cc:f0:90:d3:0e:2f:00:11:9d:f5:cb:a1:58:74:cb:9b:
c0:c9:fe:15:d7:17:f3:41:83:10:8f:18:21:87:29:47:5f:94:
d6:07:e5:0e:f7:9b:91:a6:3f:52:af:16:a0:11:6d:e2:c4:bf:
da:9e:c8:51:c8:fe:b4:95:df:84:a2:73:b6:1d:fc:a7:e8:18:
cf:f3:95:9a:16:21:ec:73:f5:cf:ee:47:37:ea:b5:ca:4e:55:
84:eb:9c:ea:7b:b7:fb:db:73:bf:96:dc:b4:49:14:4b:de:f6:
f2:c4:7f:6b:e7:bc:df:7f:f4:d8:10:e6:c6:7a:f2:8e:e5:b2:
d1:63:32:be:0c:83:fa:a6:90:87:0b:4f:a2:84:e1:9f:6a:27:
38:b8:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:09 2025 by rpki-client