Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
File: 3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa (raw, json)
Hash identifier: wNSvo2VNqT2K1ARLY57rZlNfE9s4/97QzEJ01S+5fiA=
Subject key identifier: 83:85:61:03:CC:C8:F6:9D:6E:33:DD:48:E2:78:2F:35:B8:7F:AC:7F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6090284BA740097873EAA7653444A6C45F8DB11E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
Signing time: Fri 25 Apr 2025 18:40:39 +0000
ROA not before: Fri 25 Apr 2025 18:40:39 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:e000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:90:28:4b:a7:40:09:78:73:ea:a7:65:34:44:a6:c4:5f:8d:b1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:40:39 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=b9a0c0ab87c6c69e99c0e1ac8c486932afc8d1bc2bcf6e4b4017428a07630729, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:50:fe:8d:ed:99:6c:27:3e:a5:53:58:9d:
85:25:48:64:1a:3c:4e:7e:87:a5:c1:57:84:bf:68:
ae:48:0b:b0:31:e7:76:05:32:e8:8d:38:89:1b:e0:
1b:3c:64:0d:3f:22:8b:50:e6:81:c5:26:09:21:33:
67:6c:2a:57:39:39:c7:eb:52:1a:52:fa:b9:62:4e:
3c:26:b7:12:f0:bf:69:d6:5c:f4:ba:0e:8c:4f:39:
ef:ac:39:d5:d2:c8:38:99:7f:b9:79:c8:9a:d5:5a:
fe:05:93:4c:ae:ed:3b:21:88:6e:16:18:74:b2:4f:
26:e4:d1:82:b3:4c:91:73:67:99:75:79:4b:9a:ff:
17:f8:69:e7:bd:cc:9e:b0:e6:99:3b:f9:38:8a:cc:
d1:da:7c:0c:ed:b7:dd:3b:c0:4d:7f:c1:a8:f5:fd:
7a:12:1f:49:45:04:82:ca:5a:17:ca:2c:8a:ab:a7:
94:21:95:47:a3:01:bf:aa:68:96:21:bb:2f:79:2d:
85:ad:4c:c0:aa:5b:d6:ce:c0:21:d3:64:f0:6f:3b:
ce:72:62:e5:31:aa:e0:bd:5b:1a:b9:d1:17:45:1f:
1d:0b:62:ac:d7:3c:20:a0:d9:8b:7b:91:2a:eb:e5:
ea:15:21:8e:d9:b2:05:0a:30:8a:0a:a1:de:d1:2d:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:61:03:CC:C8:F6:9D:6E:33:DD:48:E2:78:2F:35:B8:7F:AC:7F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3fa5589f-917e-4d55-9b50-251b7e2f5d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e000::/40
Signature Algorithm: sha256WithRSAEncryption
70:e6:2d:46:b3:5d:82:0d:ba:4d:f9:d6:d7:0a:a8:e8:3c:8c:
91:a2:21:85:ae:65:3b:cf:67:46:ae:86:c9:4a:dc:2e:5c:a3:
3a:18:6b:d5:43:9a:48:2d:c8:d3:50:48:f9:85:9b:ed:b1:0e:
d5:1d:01:24:30:db:7d:3f:f9:5b:60:cc:28:76:46:1d:a0:89:
15:9f:47:e6:24:73:48:e7:14:71:6e:1c:be:5f:c6:63:8e:bc:
03:db:b6:88:6a:d2:fc:90:1f:f7:e5:8f:24:fc:45:54:08:1e:
e7:90:b2:ed:69:39:1e:7b:be:33:63:a6:0c:74:1f:19:57:8e:
9f:1a:80:da:90:09:84:0f:37:ae:25:0a:58:fe:b8:a6:88:88:
71:b0:c9:1a:56:17:5b:fe:ba:ca:68:ce:3a:0b:84:0d:db:b7:
87:0d:98:6c:a5:9f:77:4d:3d:6f:03:9a:d3:c6:df:b4:6c:08:
c7:cb:9a:55:56:5a:63:43:65:4f:66:e3:d0:13:8c:9c:ec:5b:
78:10:d5:cd:6a:b2:66:d1:68:4d:ea:04:89:e5:83:d9:58:c5:
dd:ed:3d:42:0c:d6:64:4a:bd:16:6c:a3:e7:80:1e:b1:ab:fa:
61:38:3d:1b:65:9d:cd:3a:5d:3b:a6:d9:d5:04:39:54:b2:69:
43:e7:4a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:35:42 2025 by rpki-client