Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
File: 37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa (raw, json)
Hash identifier: t9gA9ZunOLiaDhta3BrM6UC3KteS8Oxs/EH3rAbO9js=
Subject key identifier: 4D:27:22:88:FD:1E:1C:69:36:98:95:A9:A8:15:11:E4:D2:31:B7:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04E35DC76E7581ED2EE555D9A755BFEF25AB9594
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
Signing time: Tue 15 Apr 2025 15:00:59 +0000
ROA not before: Tue 15 Apr 2025 15:00:59 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e3:5d:c7:6e:75:81:ed:2e:e5:55:d9:a7:55:bf:ef:25:ab:95:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 15 15:00:59 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=deb674536aafdff5192237926925ed69c8054dd4eafcc4ba24bac79b6cba55f6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:71:c7:00:16:a8:a9:52:a6:18:2f:3a:22:
53:04:0c:53:44:0b:24:44:00:0a:b5:60:81:18:ed:
a2:cd:97:d0:64:d2:d9:1a:dc:97:9a:5d:42:c2:f1:
72:e2:3c:99:7b:00:08:54:e8:09:ce:54:25:aa:b4:
8d:1f:46:32:f0:e5:f6:0a:bf:a3:fb:7c:85:56:f3:
19:a8:83:5d:3b:83:6c:a2:32:87:86:5a:89:98:c8:
78:6c:d3:6d:c0:50:1a:73:22:58:8f:32:00:ac:62:
ad:56:89:ea:11:cf:06:72:10:a0:4c:ba:72:5b:bd:
a9:c7:62:95:84:96:fe:cf:a9:88:0c:2a:74:9a:68:
2e:98:d2:91:88:7d:74:1b:fd:2b:03:50:ee:21:46:
4c:a4:7f:f7:cf:8f:c1:33:d0:1b:eb:e7:64:92:6a:
c3:e3:31:0e:76:01:41:69:26:42:96:e5:3a:0b:6a:
98:c1:fa:2f:de:58:5d:60:5b:f7:69:44:39:ca:c7:
c0:19:a0:3e:21:dc:f0:54:74:a6:33:0d:22:cf:28:
aa:3d:a6:31:4e:d5:a4:7d:10:f6:16:61:a5:b8:c6:
16:8f:ec:c2:c3:6d:60:d5:19:b5:04:1d:44:dc:52:
70:0f:7d:a3:46:e1:dc:62:16:62:00:9d:69:8a:d1:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:27:22:88:FD:1E:1C:69:36:98:95:A9:A8:15:11:E4:D2:31:B7:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/37b00c63-4d48-46a2-a2ac-c6d3bf6953bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:8000::/48
Signature Algorithm: sha256WithRSAEncryption
45:75:5f:8e:a8:9f:66:4f:d4:6b:d9:20:35:27:bd:ce:a1:85:
24:8a:45:1a:cc:8a:bf:5c:d1:91:ba:00:c7:1b:ae:0f:4d:43:
87:40:19:e0:83:14:f5:a8:b8:b0:cd:c0:34:45:35:e0:1d:cc:
17:73:13:8f:85:b5:76:7e:9a:a0:6a:cd:bc:2c:0f:ca:3e:18:
e7:c0:83:30:eb:bf:74:fe:b1:ee:8f:44:49:a3:35:f0:be:0b:
2c:8a:6a:df:e8:f8:47:18:e1:a8:db:02:14:38:0a:d0:85:ba:
5f:a8:cb:52:61:71:3c:38:23:87:ec:c2:f0:7f:51:ed:a5:c0:
94:97:86:28:84:73:0d:a2:6c:3d:72:0c:36:10:df:70:4f:92:
0a:f0:4f:4e:67:cf:ad:87:92:68:c2:d3:65:f1:c1:23:84:c3:
42:b4:e1:f8:13:51:18:4b:4c:25:b3:31:68:36:8e:3c:d3:c2:
2b:60:5b:07:ab:6d:fd:7d:ae:8f:31:9b:90:78:fd:18:89:0d:
ef:77:31:76:4f:87:7a:a4:66:23:c0:d0:74:bb:14:46:7e:4c:
7f:ce:a6:c5:5c:ec:7c:33:64:f0:f3:bb:da:f3:80:58:45:89:
a9:9c:a9:d3:f0:ce:bb:07:ab:31:51:38:7c:30:02:19:27:d4:
b6:8b:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:18 2025 by rpki-client