Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
File: 29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa (raw, json)
Hash identifier: oOtSC7gaV4OS0Q0HzrtB3nQX/BdfW0x0o7Fo7WHddYI=
Subject key identifier: 6A:C7:1F:D3:4C:07:39:30:8D:06:3C:A2:0A:53:62:29:FD:6E:8B:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 09FB71485D5F95494C4A0CA090A424DBB4F39CD4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
Signing time: Fri 25 Apr 2025 18:20:45 +0000
ROA not before: Fri 25 Apr 2025 18:20:45 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:fb:71:48:5d:5f:95:49:4c:4a:0c:a0:90:a4:24:db:b4:f3:9c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:20:45 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=8e6dbe7f6ff0f7440465598dade95a909410ed91c2d7ae78c1fa05a9ee16238c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:8f:94:3f:db:81:66:d8:0d:df:7c:f4:c7:
7d:c3:20:a8:ae:6b:12:84:1d:90:a7:9c:08:41:90:
5d:0f:43:f0:f9:f9:1d:57:9e:59:22:f8:65:dd:4e:
83:96:f5:ca:b1:0b:af:b6:d5:13:0a:a6:66:95:a0:
2e:76:73:56:4b:8e:6a:8b:e9:e7:92:da:2b:ae:dd:
b7:c2:c0:13:6a:77:fb:ee:24:05:86:38:42:cb:77:
46:c4:99:6a:46:72:0b:00:60:28:91:0f:53:5b:06:
77:46:bc:f3:d9:5d:d2:7b:69:46:2d:75:a8:ba:7c:
7d:cb:24:ce:8e:5b:e4:8a:c0:0f:97:e7:ca:ee:8a:
5a:7a:ab:3f:ce:ad:ba:d0:65:64:5c:b5:84:7f:c4:
e8:98:15:ce:46:4a:e8:a7:40:5f:dc:df:7f:d3:c9:
f2:0e:9a:cc:9d:cf:82:64:3b:9f:61:8d:d8:25:34:
ab:12:ec:60:c0:fe:10:1c:61:72:2b:48:58:e0:1e:
6a:d9:48:6c:f8:9a:47:c5:51:36:56:c9:7d:c9:24:
5c:85:d8:08:1f:91:6e:96:b3:c2:71:3c:92:cf:97:
e5:08:81:fa:31:b0:15:b6:f5:d1:d1:ab:9c:e1:b5:
0c:db:23:b9:ed:9c:cd:bf:79:79:53:fa:c0:e4:86:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:1F:D3:4C:07:39:30:8D:06:3C:A2:0A:53:62:29:FD:6E:8B:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/29ccbf1f-bd18-437f-87cb-c8d85587cbea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8030::/48
Signature Algorithm: sha256WithRSAEncryption
31:6f:c2:b8:63:08:49:16:0d:de:93:3c:a3:78:0a:c5:51:c8:
a4:c0:85:f5:88:f0:c6:25:46:7e:a6:2d:69:49:e7:1c:19:44:
5b:60:ee:ff:3c:c3:16:38:96:98:62:c4:f5:95:f5:ea:a2:ca:
b2:ff:ad:3b:c1:f3:53:ad:00:70:f7:bf:8a:78:cc:c1:7b:a1:
f2:48:76:91:30:4b:00:e7:a5:ae:f8:8f:90:3a:26:b0:a9:c1:
0c:5b:99:d7:c1:09:57:b9:05:85:9e:e9:45:00:e8:5d:ff:b5:
40:db:92:e8:19:16:9b:2c:cc:ae:1a:b7:6d:ec:f2:ae:6b:b2:
58:79:28:6f:87:0f:2a:e6:8e:6f:69:08:55:e8:bb:b8:1d:f6:
ee:06:49:3c:ba:8a:72:f9:5f:e3:cc:2e:e8:e3:b0:cd:2d:a1:
65:f5:fb:b0:7a:24:61:ef:d3:c7:2b:7c:c5:18:17:d6:64:56:
94:88:01:f0:15:7d:a1:bf:5b:6a:36:a8:2b:5d:93:72:cd:10:
bd:1e:ba:e9:f5:ba:87:5d:18:d4:88:15:17:92:17:74:b7:ba:
2e:c1:88:75:bd:3b:ca:89:1b:22:6b:23:24:fa:78:8e:99:45:
4a:83:c7:39:df:53:01:e0:15:e4:67:00:ad:e4:2a:9e:db:bf:
28:0e:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:19 2025 by rpki-client