Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
File: 4cb86308-98a0-48e5-8825-d398c0ce8099.roa (raw, json)
Hash identifier: WWJnbn32QIuayjIYqhQSSYVIIB+CI1VBfYY2d8KzTfI=
Subject key identifier: 4E:D0:D8:30:2D:3A:18:C7:0C:F3:D0:52:9B:43:FC:33:BB:05:CA:69
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70F80A9B974C7F0EA6B576103515008A69C3C4E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
Signing time: Fri 25 Apr 2025 19:00:55 +0000
ROA not before: Fri 25 Apr 2025 19:00:55 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f8:0a:9b:97:4c:7f:0e:a6:b5:76:10:35:15:00:8a:69:c3:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:00:55 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=5c8cc01d7f3a7a9e95e0f467c369450960f5a570dc1f05690962c40f297746c7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:2a:85:1d:82:f6:e7:8d:8f:f9:a3:0b:a9:
63:8e:15:73:cb:44:b3:37:6f:61:74:c7:03:42:ad:
8f:b6:c4:39:d5:e2:00:bf:ef:dd:e8:b1:b7:f4:58:
6e:d9:5b:fb:21:e0:5b:6a:03:6e:6e:d1:82:64:5b:
bc:8c:fc:a9:31:73:da:d8:d4:6f:81:fa:04:a5:fb:
a1:23:ab:df:8e:76:3f:3a:4c:8f:3f:be:f2:bf:5a:
7b:7c:cd:bf:4d:35:72:12:6f:62:46:00:90:26:b4:
36:c0:1f:9e:f6:0d:d4:ab:8c:df:5a:7d:40:95:21:
8e:a9:66:19:b3:6d:ed:77:6a:b2:55:f2:db:e4:8c:
af:f4:d6:7b:e4:19:d1:c6:86:b0:8c:27:33:20:f4:
55:59:32:30:20:ac:7d:22:ed:51:e4:13:07:35:12:
e1:b0:9d:df:3f:3c:03:1a:6e:29:11:cc:5c:ae:e5:
fd:97:c4:6c:7e:f2:1c:5f:e9:aa:f6:e0:a9:5a:48:
34:53:45:d9:02:20:b9:b5:c3:29:71:04:44:24:80:
c3:68:82:bb:de:bc:38:0b:dc:12:e1:aa:30:a5:b7:
13:ec:2e:0b:e6:18:58:96:6d:c3:bb:87:bb:14:7a:
64:39:35:aa:d7:d4:ac:30:41:12:8c:68:ad:c1:06:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:D8:30:2D:3A:18:C7:0C:F3:D0:52:9B:43:FC:33:BB:05:CA:69
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4cb86308-98a0-48e5-8825-d398c0ce8099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:5080::/48
Signature Algorithm: sha256WithRSAEncryption
14:93:f7:f1:83:8d:c1:e2:8a:9a:b8:f4:43:fc:df:95:ba:83:
af:8f:35:c7:6d:74:3e:99:d9:6b:df:9b:22:68:25:3a:7c:00:
a4:47:60:a9:07:f6:59:95:c1:7d:01:16:e7:91:f1:d8:cc:39:
63:70:50:c4:00:eb:8e:d2:17:0e:df:71:d5:96:3b:93:0d:09:
be:af:8c:27:b1:3f:2b:0f:e0:a9:64:86:12:60:b5:22:d1:a0:
0f:66:c6:3a:0b:88:ad:6e:de:0a:05:2c:7e:bf:7a:26:5f:98:
7f:6b:d4:1c:d9:5c:65:04:e9:61:79:4d:21:19:ea:31:86:87:
2b:9d:de:b9:c7:fe:17:07:70:74:ca:5c:82:11:0a:bc:91:64:
b0:3a:47:d4:c4:00:7a:25:ff:f2:ea:4c:6b:b5:10:f3:ae:8d:
76:50:e1:98:bf:86:d6:7f:e4:ba:2f:13:86:17:88:f0:65:dc:
b4:fd:64:ff:63:81:98:83:6c:d7:1a:74:41:0a:ab:3d:d3:cf:
03:62:a8:6c:13:14:f9:76:76:61:a5:15:d0:de:10:41:4a:43:
a7:cd:dd:56:9d:f7:7a:d2:70:2f:6d:ed:fc:e4:17:17:39:d4:
d8:a0:b6:8a:88:6c:71:2a:29:1c:9c:c4:ee:05:30:29:62:34:
3e:b7:3a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:09 2025 by rpki-client