Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
File: 5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa (raw, json)
Hash identifier: DQ+KlD600XrQ6hUocDT+3oRuVyiIOC3R+z4gOOQjo9U=
Subject key identifier: 3C:76:DE:02:87:95:44:04:85:C4:1A:19:8C:46:5B:E5:1D:0E:D1:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 62ADABB64C7BDDCE366B4365C3812132CB6FD3BB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
Signing time: Sat 05 Apr 2025 00:10:11 +0000
ROA not before: Sat 05 Apr 2025 00:10:11 +0000
ROA not after: Sat 10 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d02f:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ad:ab:b6:4c:7b:dd:ce:36:6b:43:65:c3:81:21:32:cb:6f:d3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 5 00:10:11 2025 GMT
Not After : May 10 23:59:59 2025 GMT
Subject: serialNumber=92aa120ffd34f76533ed20ae88408c90a325637d044cba9ea416861e3f013af7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:40:5a:af:ba:51:7f:74:28:9b:7a:45:83:
33:28:36:2d:f1:84:04:c8:48:44:8d:09:fe:c1:c4:
94:ca:f4:75:63:fc:a3:c6:13:ff:d2:30:55:70:90:
98:e1:5f:cc:10:9c:19:64:48:62:2a:ed:92:b4:fd:
16:db:10:68:82:9b:17:ea:dc:53:45:a8:14:33:18:
35:20:e8:ee:57:1e:ca:04:6c:bb:b0:da:53:56:1e:
e3:a4:af:47:a6:47:7a:b4:bd:9a:ba:21:64:fa:92:
df:41:c1:2a:63:aa:74:6d:ca:7a:f7:76:c8:04:5d:
75:c6:13:9b:71:d0:09:a3:bf:ea:48:ab:de:ac:02:
01:03:cd:95:7d:2e:5f:2a:cf:a9:20:25:d8:b5:c1:
9e:42:5e:10:68:77:21:8a:7f:1b:9a:74:6e:f7:f7:
1f:ac:57:c8:f4:64:a0:f0:94:60:fc:c1:5c:6d:4d:
f0:08:94:25:38:cb:c6:a5:ca:18:35:4d:97:69:5b:
56:9f:ee:13:f7:20:c6:d8:d2:2c:d4:a3:01:51:16:
a9:64:e7:8a:58:0f:5a:bc:72:25:7b:91:cb:7d:4e:
6a:4e:34:2a:97:0a:da:26:ab:62:09:cb:32:85:00:
62:74:d5:c5:a3:69:35:ee:16:e7:5a:c5:14:ab:ea:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:76:DE:02:87:95:44:04:85:C4:1A:19:8C:46:5B:E5:1D:0E:D1:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5238c13f-b2a5-43d9-9624-d2e714a9bf53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d02f:800::/37
Signature Algorithm: sha256WithRSAEncryption
74:fc:d4:49:1a:c3:e5:b0:5d:78:09:84:3a:d6:18:01:95:50:
2f:ca:b0:3d:5d:78:ff:18:1f:e5:ef:b9:90:ca:7e:0e:4b:1a:
b7:6b:50:02:90:a2:db:31:05:06:14:53:a6:43:83:ae:a9:60:
c6:b7:e7:53:2d:d7:55:8c:3e:a4:b8:5e:11:a0:be:b5:2f:85:
aa:d0:79:3f:bb:3c:4c:59:0f:cd:db:43:e8:4b:ba:c7:09:d7:
db:ac:43:97:f2:f8:a0:60:9b:5a:13:49:0d:c7:86:1b:eb:50:
38:bb:87:8a:7f:e7:dd:74:60:de:62:44:68:b8:0d:fd:10:02:
4b:5e:ee:d6:74:58:23:96:9d:ce:0a:bc:52:6a:8c:0a:47:aa:
c2:97:03:a0:34:12:52:dc:73:08:02:e7:bf:a7:26:09:a2:8c:
d8:e9:e9:80:e1:99:72:3f:69:1c:d0:f7:2a:ca:f3:3c:25:63:
2d:53:09:48:68:01:f1:d5:ef:f5:07:20:70:0e:90:5e:bd:c1:
4d:bf:d9:9b:46:39:e9:6e:22:1b:85:60:82:83:f0:15:68:a5:
13:f7:70:9f:47:2e:4a:eb:93:5d:c7:99:2d:a1:24:f2:03:63:
93:70:6a:a2:36:86:b0:cb:99:66:8d:83:87:a0:67:96:f4:88:
de:0f:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:21 2025 by rpki-client