Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ce4b79c-26b8-4e2b-8de2-ef5254a2c33e.roa
File: 1ce4b79c-26b8-4e2b-8de2-ef5254a2c33e.roa (raw, json)
Hash identifier: VfnsC9FVy+LJGWwWgv96XuTv3fUgCR66WRxjkvSlYsY=
Subject key identifier: DB:36:F9:EB:0B:BA:3D:78:F5:D3:E5:8A:1C:E2:F6:EE:67:3A:D7:5A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69207FD2AE2169361DD76A33E616E4B85F0E08DF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ce4b79c-26b8-4e2b-8de2-ef5254a2c33e.roa
Signing time: Fri 25 Apr 2025 19:01:27 +0000
ROA not before: Fri 25 Apr 2025 19:01:27 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:20:7f:d2:ae:21:69:36:1d:d7:6a:33:e6:16:e4:b8:5f:0e:08:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:01:27 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=cc2d2946e6efcda34d62bbef7f1d7c71a5e86dbaa83cc3009f0a967244f77213, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:94:4e:7f:0a:80:45:3d:5f:81:c7:4f:16:
09:c6:2a:80:d2:8c:d7:34:e0:46:f6:41:58:75:aa:
2b:b5:3f:ec:28:61:21:f3:c1:71:05:87:fa:7c:1d:
4a:9e:e4:c1:62:42:1e:85:fb:da:66:a7:3a:a7:62:
98:46:5e:e0:2f:4b:a2:35:dd:47:4b:ac:e0:25:71:
2b:10:7a:6d:9d:47:ac:20:55:2a:7b:9a:4f:ae:43:
1c:9a:c1:2b:20:c7:e3:d5:a9:29:fe:4b:27:84:19:
13:7d:f2:84:76:15:2b:5e:7f:39:2d:57:2a:b2:3a:
ec:5d:d9:77:4a:65:c6:00:e5:4e:e5:f6:5c:78:86:
7b:16:76:d2:f1:9a:4f:ad:ee:9f:fa:fc:6d:4c:53:
05:df:bb:f6:e1:8c:85:0f:b4:e0:7c:75:a2:9d:a6:
35:fa:05:16:88:ef:45:6a:5b:b5:e3:7a:6b:72:a3:
d4:a3:2c:8c:ed:cd:a0:ce:e2:74:41:51:e8:1c:02:
95:c7:82:90:e2:05:ee:ee:9a:79:d9:d4:87:fa:af:
8e:86:ba:d1:40:48:40:cf:65:df:a8:f5:43:52:af:
33:3c:6b:1c:ba:95:3c:4c:2b:70:49:37:e6:82:f7:
a2:ed:99:ad:63:b8:65:a2:5f:5b:1a:78:30:4e:79:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:F9:EB:0B:BA:3D:78:F5:D3:E5:8A:1C:E2:F6:EE:67:3A:D7:5A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ce4b79c-26b8-4e2b-8de2-ef5254a2c33e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6040::/48
Signature Algorithm: sha256WithRSAEncryption
74:b6:23:33:89:62:2d:e2:9c:2f:31:27:a6:d6:8d:0e:78:85:
55:1b:65:76:5d:8c:2d:aa:d6:47:83:26:1e:b6:0c:73:d4:1f:
ca:c2:66:23:57:13:bd:4e:00:0c:10:fc:d4:19:78:46:76:07:
42:53:f5:01:a7:ff:d9:95:da:af:f7:0e:de:71:b4:e4:e6:a4:
cf:f7:be:75:89:df:57:3c:99:e1:97:6e:f3:9f:bb:d1:8d:f6:
ee:d1:dc:fe:ca:6e:c9:42:bd:df:6b:ba:43:c3:9d:45:b7:1d:
fb:63:c9:f2:36:63:bb:a5:ac:80:2a:3f:f1:e1:b7:88:4d:0b:
ea:02:c9:49:c4:6c:d1:58:af:e9:ab:2f:64:0b:76:d6:f0:d1:
53:6d:79:eb:36:9b:bb:62:dc:73:86:52:71:b3:6d:01:7a:cf:
d3:c4:7b:45:db:36:17:44:47:52:40:c8:7d:de:58:a2:c7:1d:
af:fa:81:c0:26:37:ce:af:bf:23:7f:12:d8:b8:62:7a:7f:c9:
ae:e3:dc:2a:e0:da:8f:27:f8:30:be:04:9b:fd:4a:51:c9:f0:
99:d6:50:70:9e:f3:42:54:60:11:c4:62:3f:a6:24:10:7a:68:
48:27:d9:76:9b:09:02:c1:23:cb:3d:0f:23:16:b0:5a:1e:d1:
e9:51:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:39 2025 by rpki-client