Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
File: 4b43f183-cd0a-4862-a7f0-bf7122100edb.roa (raw, json)
Hash identifier: 5B7J3FVULKzfGuWtagbPgn4lDhv7c25zfjW0lbUtppU=
Subject key identifier: F4:84:39:53:98:7B:42:84:C6:E7:2C:F6:3B:20:F7:19:A6:4F:6F:C2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 241F4F932474C23A90ADE5A458CEC72F821D3E0E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
Signing time: Fri 25 Apr 2025 20:21:26 +0000
ROA not before: Fri 25 Apr 2025 20:21:26 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d014:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1f:4f:93:24:74:c2:3a:90:ad:e5:a4:58:ce:c7:2f:82:1d:3e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:21:26 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=19521193679504a3ac8a7b2081d62c6cc593816e74b5ff065e3a892e1d222135, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:eb:99:cc:87:40:f0:29:0c:4c:c4:72:ee:
9b:03:6a:ed:a7:e6:0e:b5:5e:20:18:69:10:fa:56:
d9:d7:93:34:ab:c3:21:7e:f9:00:ef:03:ef:73:6b:
94:39:f3:37:8f:66:a9:1e:05:78:68:d7:64:86:05:
47:38:14:61:45:f6:4a:10:a7:76:bf:66:f3:1d:51:
6a:6f:62:48:2d:e7:c9:02:66:9d:cc:96:dd:e1:b8:
1b:77:02:a0:a4:d8:9d:fe:b9:e8:18:ec:3a:0f:ae:
ee:53:b8:e9:35:e0:5d:40:c2:3e:6c:08:dd:2e:1f:
39:fd:11:c3:f8:61:6c:b8:41:de:77:af:3c:59:e1:
0b:99:50:d4:a9:e7:95:3e:7a:e8:c4:c8:f9:c0:b8:
18:e1:01:0f:c4:a6:14:e4:e6:1d:55:7d:51:96:39:
2b:5e:f2:38:96:63:87:26:25:24:a2:ee:c8:df:ca:
17:ae:98:d6:2f:c0:df:ca:88:ec:71:76:bc:38:c6:
f2:95:59:da:95:4a:64:48:57:83:25:2c:e9:22:0e:
9d:d9:af:da:35:92:7c:08:40:77:2f:6d:28:ce:67:
99:bf:ef:7d:c4:85:3e:5e:67:1f:f5:77:da:e9:8d:
74:21:f5:c8:35:52:dd:7d:47:f6:69:13:2f:0d:c5:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:84:39:53:98:7B:42:84:C6:E7:2C:F6:3B:20:F7:19:A6:4F:6F:C2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4b43f183-cd0a-4862-a7f0-bf7122100edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d014:c00::/38
Signature Algorithm: sha256WithRSAEncryption
55:4f:15:2a:6f:02:de:bc:42:06:f0:4d:cc:9b:24:5f:cf:31:
45:3b:79:0f:c1:a1:c7:6d:df:e6:9b:c2:96:7c:bb:38:f8:74:
eb:38:45:be:e1:47:35:92:0f:f8:14:fb:ac:07:70:71:6f:ba:
19:2e:7d:de:2f:7a:97:f3:1d:e1:3f:29:ad:0b:05:6a:d0:af:
37:ee:f3:fe:a4:da:d3:1e:b2:06:31:6f:88:04:da:17:03:5e:
dc:43:2d:4f:8a:24:99:67:48:ed:7d:2b:62:ec:f7:d2:d0:d8:
96:cd:31:97:6b:b1:1a:28:49:30:bb:80:1d:ec:47:37:81:3f:
55:7e:7d:8f:14:a7:8e:fe:54:a6:c3:c3:5d:7b:5c:22:10:c2:
c6:64:5e:ab:b9:39:b6:89:d4:d5:fb:72:0a:0a:54:d4:8a:5b:
1b:37:55:bb:45:f1:2c:49:95:c2:55:49:11:a8:5c:d7:b6:a1:
31:88:56:8a:d3:54:9b:db:1d:d3:ba:5c:e3:0d:53:12:59:91:
d6:eb:4f:2c:d6:84:33:a6:c4:d7:44:cc:44:35:ff:1b:99:2a:
91:6a:fb:65:f1:3b:46:d4:ee:3d:fe:f9:e2:88:4d:f8:0d:d1:
9c:3e:36:f5:59:56:05:53:c5:25:16:b8:26:ac:40:66:1c:36:
51:2d:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:16 2025 by rpki-client