Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
File: 507c534d-189b-43b3-945a-dd040ee200d5.roa (raw, json)
Hash identifier: 3jYGeqIiLr5bWnvD57dz1jp8Eh64JHwi3m40dEVKwzw=
Subject key identifier: 1F:F0:3C:9B:25:1E:FA:0F:A0:7D:A2:53:97:51:23:3D:A7:39:56:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 422266B597653AF41FF070EB38226086236AB9F7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
Signing time: Fri 25 Apr 2025 19:50:54 +0000
ROA not before: Fri 25 Apr 2025 19:50:54 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:22:66:b5:97:65:3a:f4:1f:f0:70:eb:38:22:60:86:23:6a:b9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:50:54 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=063409b9d555967f93d5a35475d1f4360763194235f1ae408017da93a98bc13d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:dd:e1:7e:1d:c3:4a:8a:30:df:4c:ad:38:
ab:ec:32:a5:1e:9c:e1:40:15:0d:01:3a:52:d7:d3:
e9:41:c4:21:0f:2a:56:a1:f7:83:c6:cc:43:08:d7:
17:7d:bc:0b:b4:fd:f5:19:d1:a0:07:c4:b9:b7:bb:
f4:42:7a:97:f9:6f:30:05:d9:ec:33:7b:c3:17:a8:
41:e5:c1:c7:f6:24:56:dd:6f:d0:cf:8c:09:e3:ca:
02:f1:c0:2a:a5:4c:0a:fe:7e:50:69:33:a5:f8:70:
a0:89:e4:f3:5b:f5:e1:98:d7:01:7c:41:31:66:9d:
e4:5c:81:fc:e7:82:bc:9c:e5:15:c8:a3:da:48:8c:
8e:d7:e9:21:0a:7b:96:c3:f5:35:2a:b0:76:1b:2d:
55:7e:a4:12:c9:c8:a1:3d:8c:55:aa:6d:44:88:cb:
09:11:b3:fa:38:00:46:e0:b2:11:0c:7d:54:a3:18:
96:55:a2:92:1b:d8:ee:97:51:23:6d:3b:db:1c:44:
d6:0f:37:e7:64:a2:51:47:26:17:99:78:79:74:a1:
75:ba:7b:5d:58:f9:0f:76:70:af:d1:d6:97:22:01:
c0:79:e9:42:f6:c7:57:d5:c0:1d:1c:7d:85:6c:89:
07:75:e3:4d:e5:22:d0:90:27:72:59:d4:22:3a:71:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F0:3C:9B:25:1E:FA:0F:A0:7D:A2:53:97:51:23:3D:A7:39:56:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/507c534d-189b-43b3-945a-dd040ee200d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:9000::/40
Signature Algorithm: sha256WithRSAEncryption
48:41:0d:0e:a4:53:3e:1e:69:91:5a:49:38:0a:34:78:10:88:
55:08:6e:ef:5f:71:a7:f3:85:36:b8:ad:19:a6:ff:2f:85:62:
52:20:4b:3b:57:29:1d:1c:2d:79:48:3c:c0:d6:51:a1:e4:4a:
ed:80:36:2d:91:7b:60:04:89:39:03:2c:cc:ce:aa:42:c0:6a:
9d:07:2b:59:d6:c9:d7:6f:d6:75:8a:39:92:dd:0b:97:3f:10:
ed:5d:7f:ca:ff:96:b4:0c:dd:7a:da:74:07:1f:e5:47:17:5d:
84:cf:a3:b5:5f:ae:d9:7b:ea:59:d9:10:ba:59:d0:f8:81:40:
0f:8d:f8:3d:de:d4:c7:33:d7:76:b3:e1:d6:03:31:7a:43:4f:
03:b9:b3:98:72:ff:c7:97:50:3d:75:76:88:41:76:ca:75:5c:
9f:c6:61:d6:5b:03:8c:1b:81:91:59:b6:ba:2e:92:57:33:f8:
ec:4b:a5:97:c7:4c:0d:b3:5f:d7:70:7a:16:1c:1a:1e:57:e3:
25:b0:0e:d4:02:a8:28:6e:44:43:b0:af:0c:9e:6c:a1:91:49:
b8:a8:d0:f3:da:cf:89:d8:c6:f9:c8:02:47:61:3b:12:ec:32:
d4:6c:2a:6b:e2:df:74:5f:43:b7:9b:8b:7c:d5:57:9f:4a:8e:
e0:5a:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:11 2025 by rpki-client