Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
File: 1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa (raw, json)
Hash identifier: n2EsLlrpTpHXhVcWtUEVQ6ChUUZvMCqOCedaZ7OzsgQ=
Subject key identifier: 78:25:97:6A:6C:82:70:73:D5:1C:AE:2E:7E:CE:05:FE:D1:64:BC:50
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 365B4ADD11420F1D880200AEE8011C4F99EFDA79
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
Signing time: Fri 25 Apr 2025 19:41:07 +0000
ROA not before: Fri 25 Apr 2025 19:41:07 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:4040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5b:4a:dd:11:42:0f:1d:88:02:00:ae:e8:01:1c:4f:99:ef:da:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:41:07 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=d59353483b7d15dfa49c807d9b09e8db892483386481635f936435d8d45ddcd6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:7f:86:55:14:92:fd:a1:48:6c:f7:16:35:
fa:aa:43:a7:fb:67:7b:90:30:ff:37:00:de:4c:c4:
9e:81:95:99:d2:a2:3e:9e:e7:7a:19:5a:39:71:e0:
c3:42:a8:f9:80:5a:ae:42:28:13:43:d5:da:36:4c:
95:2d:2a:e0:ea:dc:81:a6:c5:0c:cb:78:cc:bb:ee:
6c:da:07:2c:7d:a2:12:d1:2f:89:6f:5f:ab:88:d2:
6d:4f:e6:49:00:6e:ee:67:af:df:a5:30:ef:d0:99:
a9:e8:4d:0e:88:5f:50:09:a9:26:10:c9:c7:0d:a4:
e6:b3:36:b7:12:08:6d:4d:d1:0b:05:29:58:7e:55:
ad:d3:ba:9c:7c:a8:c7:70:46:28:53:65:21:ee:5f:
85:63:39:d5:10:12:84:87:88:3b:b6:7f:92:95:70:
b8:a2:8e:30:d3:8b:3d:b9:1b:d2:74:cf:5f:66:81:
70:d3:93:f2:4a:fd:27:14:6f:94:0c:cb:67:73:87:
d0:e2:19:e6:19:25:99:bb:85:77:14:43:66:dd:bb:
01:5c:2d:f6:2d:39:f5:56:32:36:42:de:20:5a:fa:
16:9d:e2:60:bc:4b:61:9d:31:7e:eb:ce:cf:c6:9e:
96:26:10:1c:26:26:92:54:58:9f:ff:63:56:16:f0:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:97:6A:6C:82:70:73:D5:1C:AE:2E:7E:CE:05:FE:D1:64:BC:50
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1acc9be2-9211-4678-96a4-ec65ebb7bc77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:4040::/46
Signature Algorithm: sha256WithRSAEncryption
a7:91:4e:b9:d9:56:4d:8c:5d:8b:71:c3:f4:ba:96:48:8a:cd:
bf:cc:9b:d9:09:77:c6:15:aa:f5:5c:1e:33:59:61:3d:37:9c:
65:c4:31:d8:7d:70:b6:2a:50:8d:6c:4c:b0:9a:20:07:8f:2e:
88:c7:33:f4:36:9b:6c:36:74:da:ad:8a:87:07:f0:04:81:32:
90:a7:ad:20:42:c5:4c:36:f7:54:c4:87:27:9f:f7:af:ff:a5:
b9:82:6b:5c:4c:8e:2e:30:96:97:26:87:35:45:e4:3b:cc:7a:
dc:a8:48:24:da:e9:c9:b5:36:22:76:04:c5:a8:32:cf:cb:d5:
cd:60:a7:8f:31:80:17:e4:59:82:0d:1f:6a:87:01:fe:bc:36:
44:55:51:c7:59:1f:74:0d:22:3c:01:d7:8b:f3:c3:d9:fb:dc:
44:0d:c2:46:90:6f:3c:3a:d0:95:1c:3b:86:84:f7:47:ea:79:
1a:8c:ee:ae:b4:3a:96:9f:41:30:50:34:07:50:49:6b:1a:23:
cc:2d:77:63:00:f9:83:bf:11:34:ed:d0:21:3d:2a:04:f8:a7:
9d:79:43:24:c9:3d:d3:d6:85:e8:bc:89:9e:5b:93:fd:37:fd:
ab:44:28:94:30:81:d2:bb:cf:45:1e:83:3a:6e:b1:69:2c:5d:
63:df:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:13 2025 by rpki-client