Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
File: 3401cced-770c-4585-9f39-cb17444bbb38.roa (raw, json)
Hash identifier: 1n4oIID0wowwxbN7RomW0cc32ewebku/L/3dXX5Yw8c=
Subject key identifier: 29:D0:0E:5A:48:B6:CD:42:A0:C2:16:60:C8:C6:62:5B:1F:8E:CE:7F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5C24398054F8D1EEB2D484C9BF66BE6C4C0696B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
Signing time: Fri 25 Apr 2025 20:10:41 +0000
ROA not before: Fri 25 Apr 2025 20:10:41 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:24:39:80:54:f8:d1:ee:b2:d4:84:c9:bf:66:be:6c:4c:06:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:10:41 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=9b991edbc929d5fdd8c184d5af34b633397efa8bba181e4acb0824e8b74a7afc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:0e:d9:25:a8:e9:02:cd:e8:36:8a:d2:4b:
6e:2e:6b:8c:69:c5:aa:fe:b7:54:47:b9:b6:56:a4:
21:ba:57:62:1c:d5:3f:66:fc:8c:e1:50:c0:22:db:
79:d1:c3:84:5f:e4:4f:17:8d:21:fa:dd:bd:1c:d3:
ea:36:d6:81:d2:57:e6:ac:87:fb:a9:aa:12:74:dc:
b9:34:05:fd:e3:37:e0:4b:58:81:f6:b6:fb:97:4d:
34:1f:30:70:45:ea:e0:55:70:20:91:5e:f3:2a:8d:
0e:01:8a:1d:58:2c:ae:2f:7e:28:34:bf:d2:ea:3b:
56:51:73:1c:24:e1:f3:58:4f:61:65:14:35:1d:20:
01:d3:d2:0c:54:52:50:f1:e6:e1:bd:55:38:e6:43:
76:ef:00:f5:59:98:b1:c6:96:48:c3:13:ac:63:3b:
bf:f3:55:28:31:b3:50:da:e6:0c:00:b7:3f:d6:b6:
f1:5d:14:22:38:22:05:97:30:37:78:1f:34:00:c7:
d3:f8:8d:7d:9b:c6:ab:60:b6:91:d8:20:d0:43:82:
8b:46:bc:0c:b6:02:93:38:e4:68:1b:34:70:a6:e3:
b5:49:14:2b:2c:27:b3:73:7b:9a:d0:b8:0d:ac:07:
bf:17:6f:fc:47:7b:d7:0c:f9:68:2c:04:35:d6:e3:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D0:0E:5A:48:B6:CD:42:A0:C2:16:60:C8:C6:62:5B:1F:8E:CE:7F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3401cced-770c-4585-9f39-cb17444bbb38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032::/32
Signature Algorithm: sha256WithRSAEncryption
0a:6a:d7:70:ba:62:22:3a:38:1f:a6:54:f8:39:1c:1b:62:13:
3c:64:b2:b1:50:a1:05:9e:41:c5:fe:22:7d:3d:b6:99:ef:bc:
fe:36:ea:d3:15:0e:6a:e7:ea:03:81:80:f2:21:fb:c2:23:b8:
37:f0:a3:8b:48:7e:cb:7d:f8:e1:68:14:e1:80:f3:f7:02:2d:
f6:fb:12:71:8f:de:9d:e8:79:8f:e8:c6:4d:0d:35:28:df:c0:
87:ce:39:2e:b1:d2:b6:9b:f2:b2:ab:e7:b2:c6:49:fa:9c:68:
40:43:b5:be:85:2b:24:88:4f:36:56:47:59:d3:e4:7d:65:db:
3d:8c:3b:10:74:a4:75:1c:89:2d:11:59:0d:b2:e5:ac:c5:d9:
c7:65:7c:3c:94:69:b7:18:b0:e4:cf:61:54:a6:24:ee:fb:4f:
c4:db:25:d0:db:ae:5d:5d:fa:32:47:1a:a7:1f:e1:80:49:36:
f2:5a:11:e4:19:f2:f8:b7:d5:01:11:cf:64:2e:b6:f7:99:dd:
b5:cd:f5:90:ee:40:1d:1a:9d:2f:08:ac:e3:5d:12:ec:f5:05:
a3:6d:22:cf:3a:7b:8f:5a:1b:c7:89:ee:42:b5:ed:2c:f3:89:
30:2a:d9:2d:e9:53:a3:ea:d9:48:de:6d:14:78:88:4a:a9:be:
87:56:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:27:10 2025 by rpki-client