Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
File: 4408cd10-0fa6-407f-adbc-3a7a668523d6.roa (raw, json)
Hash identifier: oa3+lE1HdtTFgEDsdqeWvvA8Mx4IurGNsT5Ey3QR03Y=
Subject key identifier: 67:F2:DB:C0:F3:D3:36:48:63:1B:47:80:4F:5F:55:43:2B:29:A5:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 181A6BEF1167DC22E66AAD63D797EF2D63BAC383
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
Signing time: Fri 25 Apr 2025 18:11:22 +0000
ROA not before: Fri 25 Apr 2025 18:11:22 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1a:6b:ef:11:67:dc:22:e6:6a:ad:63:d7:97:ef:2d:63:ba:c3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:11:22 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=829bd3b608675fd1e8fc3597613767670572957ce31d8f6b4ff9765bf76d6f55, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:28:2c:e9:95:a2:0f:5f:32:57:ef:d9:12:
f1:99:4a:c4:97:90:48:66:ca:62:c9:98:39:a5:ec:
61:50:53:d0:1e:f8:91:c1:6a:7c:55:f2:18:94:f8:
e1:b8:fa:2f:79:68:02:6e:9e:12:bb:c6:dd:0e:fa:
9f:d1:b5:b4:7a:c5:a9:56:d8:19:04:d2:a3:ca:b2:
e1:98:11:ca:66:46:d5:1c:fa:2a:aa:a5:63:00:87:
d0:e3:5c:be:52:32:00:3b:e5:43:1e:98:53:32:28:
72:65:a0:30:2e:c3:ac:40:65:6e:e8:b6:c1:d6:7d:
ce:7b:79:4c:22:93:cb:22:12:c9:38:a2:2b:38:a3:
3e:38:a6:af:91:2e:fc:ab:70:55:aa:20:73:35:54:
60:3d:82:15:32:0e:12:06:c5:c4:8e:15:10:15:7c:
87:5d:80:59:45:a5:0c:5c:37:d1:fa:a9:38:44:3e:
c0:ab:e7:79:ef:00:24:34:de:b4:64:a2:19:36:8c:
74:4d:a9:bf:91:fc:d8:e0:99:f5:60:0f:65:42:28:
90:a8:d8:f2:c5:8c:4c:bb:06:de:ff:55:27:68:19:
2c:1e:01:ad:c4:d8:6f:e4:81:ca:5e:29:45:6c:93:
9a:b9:3b:99:b1:b4:75:0d:b1:7d:94:7b:90:90:8e:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:DB:C0:F3:D3:36:48:63:1B:47:80:4F:5F:55:43:2B:29:A5:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4408cd10-0fa6-407f-adbc-3a7a668523d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:1040::/48
Signature Algorithm: sha256WithRSAEncryption
2e:37:f0:88:4a:2c:5b:71:c6:45:6b:13:4d:5d:05:8a:5c:a0:
00:9b:fa:91:0a:60:f7:05:3b:18:b4:39:3b:cc:d9:f1:32:f7:
96:35:93:e7:c2:37:fc:13:74:8a:15:86:f3:11:1c:48:b4:9b:
61:2d:52:e6:bc:1e:bc:38:79:8c:e0:66:4e:30:af:79:af:3b:
d3:77:e8:26:0b:4a:c0:7d:e5:2f:99:2f:05:ab:f9:e3:a0:5f:
6e:df:b6:43:9f:74:31:05:10:0f:bf:ae:91:17:3a:48:30:9c:
84:56:75:7c:2a:91:2c:a6:78:a5:ac:97:0c:86:43:2a:d9:b8:
30:df:2b:d0:ae:6c:97:e7:ea:36:8d:85:cc:09:a6:a4:4f:b2:
00:c2:f2:2b:56:c8:39:0e:32:a8:86:93:40:0e:c9:2a:d8:b8:
cc:4d:34:0e:c9:ac:f9:72:c9:04:56:5a:7d:a3:fd:9b:74:e8:
ce:42:45:0e:48:fc:8b:82:33:68:60:c7:64:4a:86:66:d7:d8:
ac:f4:fd:0a:bf:62:6c:db:01:1e:ee:f0:ed:e9:02:06:bb:ca:
c6:45:27:07:9c:09:bd:b9:70:30:6a:29:27:f7:c8:4f:4d:4a:
1f:26:54:de:15:5a:19:7f:06:21:24:0e:5b:1a:7f:b7:16:8d:
61:a2:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:47:19 2025 by rpki-client