Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
File: 470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa (raw, json)
Hash identifier: H/ob7ied8E4ogAkVFpAUtuDA9tv5paULH3kHfStpHIU=
Subject key identifier: BC:E6:21:25:30:F2:AA:13:8C:E8:1A:95:F7:55:3A:9C:48:D4:39:75
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20CCD34B41F2D175674930443F9AB4F215038F9E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
Signing time: Fri 25 Apr 2025 19:10:47 +0000
ROA not before: Fri 25 Apr 2025 19:10:47 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:cc:d3:4b:41:f2:d1:75:67:49:30:44:3f:9a:b4:f2:15:03:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:10:47 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=473c5bdddface0b7a01766acb4663f58e0ff6d035dd6caa5bcc8c8ecad3e1098, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:09:0d:7b:9f:2b:21:66:f7:36:a3:65:d1:
d4:86:eb:ec:68:1e:92:10:65:c4:59:41:58:b1:59:
b3:dd:ab:4d:61:23:64:0a:8e:81:28:98:2a:cb:2c:
5c:92:a6:9f:93:51:6d:33:ad:84:23:f6:2f:5d:f5:
7f:f5:f5:66:1f:61:04:d8:b4:f5:42:fa:2d:65:73:
26:bb:55:c1:9c:07:f4:66:d5:8f:40:99:91:db:0b:
42:e3:fe:cc:6b:04:80:20:f9:27:ff:f5:ef:e3:37:
e1:ae:9d:f0:0e:8d:dd:4a:a5:5c:0d:8a:85:0e:b3:
50:33:3c:02:41:b5:3a:07:eb:7f:b0:18:1d:49:91:
5d:12:69:a5:16:7c:f9:40:57:14:01:63:85:cf:bd:
6c:ff:b0:39:7a:3e:7f:77:63:37:70:72:01:99:5d:
a0:af:4b:b0:6c:c6:8a:32:f8:57:22:df:1a:5a:30:
4c:b5:be:7d:7a:13:4d:b2:f8:1f:a6:34:75:2c:60:
94:d4:3b:f5:1a:44:8d:5f:27:08:e8:cc:0a:34:db:
2c:40:bf:a7:76:2f:f1:b3:d3:21:c8:d9:a6:0d:2d:
ec:45:5d:3b:f7:2c:38:8d:09:1d:04:81:1d:4d:d4:
9d:ee:4a:b6:04:24:b7:97:68:80:d6:70:0d:9e:08:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E6:21:25:30:F2:AA:13:8C:E8:1A:95:F7:55:3A:9C:48:D4:39:75
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/470b6c76-cd1a-4db4-baf5-1c6d8654a52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:1000::/40
Signature Algorithm: sha256WithRSAEncryption
66:d4:84:16:fb:28:54:2d:7d:4a:2f:4e:a7:11:be:2b:90:34:
e3:9f:37:ce:8e:9d:a3:a6:87:14:fb:25:f0:e4:3e:27:00:12:
52:35:4f:38:28:96:c7:c2:c3:62:99:81:af:a5:01:00:0a:de:
3e:bb:28:70:1d:c4:1a:e3:83:b9:13:5f:79:e0:a1:57:2a:62:
39:5f:8a:38:71:ec:11:73:46:ce:9f:b4:5a:b2:d3:99:ad:2b:
27:ea:ab:9f:54:f3:b0:76:61:d2:ac:cc:f6:53:fd:ad:e6:03:
35:fb:2a:42:d4:cb:db:0c:36:f0:df:94:6d:ea:e8:de:04:7f:
e7:2f:f4:7d:20:c2:87:3e:07:14:36:e8:a5:25:f4:55:56:36:
19:8a:96:44:c2:c3:16:23:0c:30:cb:fe:f1:11:9a:30:6e:c9:
a5:87:f6:9c:4c:5b:79:65:e5:0d:41:eb:5e:d0:d1:48:f6:38:
a0:c2:e1:54:73:c2:f4:91:b3:06:fb:0e:55:7c:79:47:f4:db:
b3:78:ed:88:13:c1:3f:ff:99:41:cf:f4:a9:57:7d:72:7b:f7:
c6:6c:38:53:5c:0b:df:c6:74:79:b5:f6:e4:0b:11:26:84:af:
51:e3:7e:dc:00:60:5a:0c:c6:4c:47:d5:92:51:9b:37:f7:ad:
a2:ee:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:23 2025 by rpki-client