Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
File: 42b92c19-37c5-4b41-b1df-818a1569d759.roa (raw, json)
Hash identifier: swIxuFvpap/M2+ebytj9W3ZsSXm3kVtwKbZ0FQU2jTU=
Subject key identifier: EA:06:C1:E3:2D:18:10:B5:78:BA:49:63:B5:FD:4B:57:51:AA:D9:33
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 67FD153D204B5E23691052CFA085F272A858121C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
Signing time: Fri 25 Apr 2025 19:10:21 +0000
ROA not before: Fri 25 Apr 2025 19:10:21 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:2080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fd:15:3d:20:4b:5e:23:69:10:52:cf:a0:85:f2:72:a8:58:12:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:10:21 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=6bc0f78bdc19de3d5923c5bc10303ef322985d4dd087309cb626b33553f7d433, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:4b:b7:ad:be:49:e2:63:41:52:3d:47:14:
48:30:f9:28:51:6c:b1:49:48:06:46:06:5a:4a:09:
ac:3d:24:06:c0:06:37:e4:27:29:aa:a3:89:ef:30:
76:85:f1:32:39:b1:13:d9:8f:c4:99:44:b9:4b:a6:
66:70:25:e1:0c:3d:15:fb:b9:ac:71:fc:ec:78:3e:
83:b3:7e:73:9b:c4:ae:e8:67:54:bc:a6:18:1b:42:
22:9e:f1:85:1d:4e:58:47:c5:b5:7c:bd:3f:2a:db:
bf:7b:8f:da:2a:19:b1:77:8e:ba:c5:2a:ec:13:cb:
f1:c5:e9:3a:72:5c:34:b2:b2:12:53:f6:7b:5d:2a:
b7:7a:fe:a4:cf:23:1e:06:ea:4e:8d:88:07:98:07:
f9:86:3e:df:80:69:21:70:7b:f0:b7:e7:e1:9b:5d:
f0:38:30:a2:b9:b2:b5:8b:4c:81:0e:b1:e0:68:02:
76:69:bb:b8:68:e8:61:34:ae:21:b7:ce:b4:35:68:
21:fc:c1:ad:5f:11:8c:84:6a:b0:08:9a:1d:19:85:
61:b4:83:3d:9d:e1:4c:4e:20:9d:52:f4:ac:e7:c5:
e5:5c:c8:81:ff:e3:d0:99:57:04:4c:82:ef:5b:79:
c6:75:e9:f7:96:df:d9:a0:2f:f5:6d:48:79:be:5d:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:C1:E3:2D:18:10:B5:78:BA:49:63:B5:FD:4B:57:51:AA:D9:33
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42b92c19-37c5-4b41-b1df-818a1569d759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:2080::/46
Signature Algorithm: sha256WithRSAEncryption
02:a8:85:10:7f:e4:78:e3:ca:e7:50:bf:49:b5:14:93:c2:dc:
52:bf:6d:e5:3b:a4:56:8a:c3:43:05:22:a4:b7:b7:dd:0c:11:
e8:9c:e4:33:3a:1f:68:3c:bc:2b:ad:5e:8c:05:84:fc:b5:61:
cd:c9:7a:29:7d:80:46:17:ff:02:c4:a8:fa:b3:ba:1c:18:2b:
e4:71:cd:31:f2:45:2b:01:f4:dc:b9:d5:0f:6b:f5:dd:aa:64:
d1:c5:94:fa:19:19:2c:98:b3:1c:61:13:75:d1:b3:b5:69:6a:
ec:1f:8a:32:f5:dc:b3:be:96:a9:05:a9:e5:04:2f:cf:d0:d2:
53:db:4f:74:b5:d9:38:78:26:15:d9:2e:7d:90:f8:f2:e6:9a:
d8:ed:1b:0a:d8:f9:3e:d3:63:18:99:91:39:ea:ec:77:b3:fd:
22:6c:4f:f9:07:9d:4f:fd:2b:d2:e5:b4:06:e4:bd:f9:bb:18:
17:e0:ed:e4:15:01:be:54:66:c2:ac:4b:74:06:31:0a:0a:87:
b4:b5:ac:5b:65:52:1d:6d:b8:8c:4b:f5:30:0a:c9:42:eb:9a:
7f:49:3b:84:a7:a8:8c:b8:79:f6:89:77:07:04:62:6e:2f:c2:
54:8f:37:4b:6c:5a:56:a5:b5:5a:27:84:24:af:24:6c:99:7e:
c7:d8:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:48 2025 by rpki-client