Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
File: 42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa (raw, json)
Hash identifier: NDjF9QZK72OsFyhs+SRHEvIAUVEu0H2nO4IAf4sQURQ=
Subject key identifier: B6:BD:74:8E:B3:3D:BF:B5:6E:57:2D:5E:0D:E4:7B:E8:1A:B2:56:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E60FF19602F8D16F30E92D4FE8EF9DA816DACE8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
Signing time: Fri 25 Apr 2025 18:30:08 +0000
ROA not before: Fri 25 Apr 2025 18:30:08 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8090::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:60:ff:19:60:2f:8d:16:f3:0e:92:d4:fe:8e:f9:da:81:6d:ac:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:30:08 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=e30a48e74dd23fc6d239baf76bd1c96ea30d681d47983b6b31ae20be4bea9875, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:29:a5:bc:c5:93:90:f6:87:18:d6:4e:38:
3c:29:1f:f3:dc:99:9f:7e:43:88:4d:7d:21:a8:b5:
ff:fa:96:30:9d:4d:83:27:ed:ea:18:b7:82:ad:31:
06:9b:f3:5a:41:fc:c0:22:05:6b:f4:a2:0e:5b:6c:
cd:fb:28:ee:93:44:7d:b3:e6:0b:35:28:c1:1c:c4:
d4:40:cd:1f:3b:db:fd:ba:59:3a:fa:d6:ea:02:82:
de:ee:ce:c0:6d:cd:99:90:24:92:90:40:10:66:f4:
2c:2f:1e:ba:8f:fc:cc:fe:8f:1b:d9:73:f6:99:b7:
da:54:56:c6:19:fc:6b:15:c8:cf:24:50:09:0d:24:
04:0b:9b:30:1f:b2:43:aa:58:c6:ea:b8:27:4c:99:
c3:f7:d2:4f:7e:05:cc:d5:7f:40:ab:93:f6:87:d4:
a9:12:f2:ab:cb:15:d2:b7:d7:4f:13:f0:d3:eb:3f:
94:4a:60:d6:f3:ec:d1:ce:e6:f3:16:60:e4:f1:bf:
64:a0:61:2f:d7:1f:ba:6a:0e:c1:bd:ad:0f:ed:93:
b3:1c:02:a5:bd:f2:c2:fe:9d:e2:1c:ca:25:9b:86:
78:64:42:1f:cf:b3:ec:16:81:ab:47:d6:23:2c:cb:
cb:a9:75:84:d2:3a:2f:3c:32:82:53:52:be:dd:fa:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:74:8E:B3:3D:BF:B5:6E:57:2D:5E:0D:E4:7B:E8:1A:B2:56:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/42ef7d89-b9bf-460f-b906-7443d96f4a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8090::/48
Signature Algorithm: sha256WithRSAEncryption
78:58:94:aa:a6:6b:f3:f9:9b:e6:b3:f2:f5:ae:4c:23:44:e7:
f9:20:46:b4:f1:b8:7b:d4:88:5f:c5:0c:82:c0:a0:d2:a9:1e:
c3:14:2b:b1:c4:1c:f4:e4:35:80:c2:f9:80:20:66:b1:22:45:
a9:15:b4:e0:79:1e:a6:3b:fa:f0:1e:14:2a:04:05:2e:dc:4c:
30:f5:6a:5e:c1:13:13:9e:0d:27:83:27:cb:aa:8b:0a:72:aa:
d0:0e:62:6a:36:10:bb:35:d3:f4:79:bd:08:7b:85:eb:4b:9b:
27:20:8a:b6:5d:d8:39:20:aa:52:50:5e:9b:1a:fe:db:9e:b9:
9b:a5:cb:ef:7b:1d:ae:ea:24:ec:90:17:8e:82:f8:8b:08:49:
a6:d2:7a:e4:44:f1:ba:4a:24:dd:3e:dc:06:cb:fc:ff:0c:3c:
3d:a7:d2:25:e1:09:60:d8:4f:99:70:e5:d2:f7:e4:2a:13:1d:
fc:fe:81:1b:be:21:48:32:be:df:2e:06:5c:88:eb:e4:61:c8:
f1:7d:b7:1b:b8:30:bd:b4:4f:d2:fc:4b:f4:11:f6:71:ff:69:
a6:78:46:ea:82:c0:f1:a7:54:8e:e2:48:07:f6:9d:2e:36:05:
e5:d6:32:9f:88:35:70:65:ec:7a:bf:98:3a:f1:e7:22:8a:bf:
a6:4c:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:19 2025 by rpki-client