Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1af8ee5d-0148-4672-a9da-a1980cfe4768.roa
File: 1af8ee5d-0148-4672-a9da-a1980cfe4768.roa (raw, json)
Hash identifier: fBEeqRCLDbfSxFg1m9ShFr/cLXf0dYamHVxkgNAW7iE=
Subject key identifier: FF:F8:90:D6:03:35:41:03:4D:E1:67:58:C1:4E:77:B8:60:F1:D5:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 08DB624D4D66C93343B4E7A2F87E3124C3C07C0E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1af8ee5d-0148-4672-a9da-a1980cfe4768.roa
Signing time: Fri 25 Apr 2025 19:00:13 +0000
ROA not before: Fri 25 Apr 2025 19:00:13 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:8080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:db:62:4d:4d:66:c9:33:43:b4:e7:a2:f8:7e:31:24:c3:c0:7c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:00:13 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=ff283f2a87930796867a5211a3ff10ebde0c6680f502a7a5801077077ab7c0d4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:8c:73:c2:1c:91:b0:8e:f3:f0:23:0b:13:
21:75:42:66:39:28:2a:cc:e7:76:dc:b3:a8:70:90:
1c:ee:37:77:f7:60:0d:1b:8a:9f:d9:4f:19:63:fa:
91:e6:60:a7:c7:42:7b:e2:2a:10:41:a3:6d:b0:2b:
d1:e6:5f:7b:43:1b:2a:98:25:a9:38:ba:26:89:57:
d0:02:63:ae:24:9e:d3:d6:f4:4f:db:f7:d4:a1:8c:
c6:d4:65:28:34:cd:03:f6:26:86:7b:f5:e2:51:11:
85:48:0c:26:24:b8:8f:54:f4:d1:20:5d:aa:9b:61:
61:a2:3b:2d:99:90:ac:cd:02:02:b1:fe:f4:38:68:
24:ec:c8:2d:9b:54:8d:6f:81:8f:4a:8b:e7:e2:16:
9a:29:f1:d4:39:24:56:6f:8d:11:fa:93:b4:b8:fd:
29:38:fe:b8:09:10:01:5e:af:e5:09:b6:2f:71:ec:
44:33:de:24:35:87:c7:61:44:f5:bd:e2:65:7b:fc:
8b:ca:59:75:a6:01:e7:b7:d8:69:92:25:88:5c:06:
8b:e8:7e:15:7c:02:5f:79:83:cf:3c:87:27:e8:7b:
3b:37:9e:68:0a:cd:5a:76:8f:19:e5:88:d2:62:b8:
e6:0d:e1:9a:90:bf:3d:f3:76:a2:85:ae:91:f3:83:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:90:D6:03:35:41:03:4D:E1:67:58:C1:4E:77:B8:60:F1:D5:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1af8ee5d-0148-4672-a9da-a1980cfe4768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:8080::/48
Signature Algorithm: sha256WithRSAEncryption
4b:bb:f7:4f:80:b7:eb:89:6e:ca:20:e1:4b:81:bb:50:fb:1f:
15:3c:a6:f0:9d:7a:a8:af:05:f7:1e:91:55:e4:a3:dc:a4:a8:
f6:ed:04:c6:51:2f:6f:a3:30:67:59:59:5a:d9:57:d2:00:87:
df:c4:4d:52:bb:cd:39:5c:3b:62:22:4c:44:46:f1:16:1f:b8:
a0:b8:0d:01:a6:7b:0d:55:16:80:5c:b7:b7:36:a3:68:84:12:
86:64:18:4a:9c:a5:55:6f:92:b7:98:5d:93:e5:0f:bf:8d:6f:
0d:d5:59:d6:52:9d:86:39:4b:aa:f3:25:da:44:29:e0:08:0b:
76:66:ac:cf:36:93:b0:06:b2:f7:3c:45:05:03:57:80:92:eb:
d1:9f:0a:ed:8e:ae:a6:4d:2a:a6:fa:b0:e7:96:e7:01:8e:9c:
f4:e4:da:7e:c9:88:82:14:76:b7:68:60:2e:8e:de:5b:be:96:
8a:74:61:75:17:34:45:23:a2:a6:1c:41:d6:2e:d8:26:ac:02:
e0:9d:d9:d8:dc:d5:c2:56:9a:cc:24:de:d0:f8:44:5c:b1:54:
ee:6f:d7:bf:c4:7b:f7:12:4b:ca:c2:63:ad:9e:c6:8a:f1:36:
30:8a:d9:53:69:f3:f5:d8:4d:cb:5c:e6:53:fc:b2:74:51:1d:
12:ad:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:26 2025 by rpki-client