Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
File: 5836d090-8999-43ab-a38c-f63a0e829c0b.roa (raw, json)
Hash identifier: ZL2VrMScS9sm9PM0nOmIUcNt2AfbYSpjSSi8jwt69IU=
Subject key identifier: 72:F5:70:07:DD:4A:6E:F5:D7:37:B0:7D:A7:BA:0D:CF:F7:9F:AB:DF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 554E3C909C578AFFF94F1AC10B0EEB501A4E4FA7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
Signing time: Fri 25 Apr 2025 18:30:50 +0000
ROA not before: Fri 25 Apr 2025 18:30:50 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4e:3c:90:9c:57:8a:ff:f9:4f:1a:c1:0b:0e:eb:50:1a:4e:4f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:30:50 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=59c518e05745640268ff2a866f56adb4a83f4ce1d07fe36b1808b13b1df315d6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:2a:5e:cf:7b:cb:d1:d1:20:c1:79:9e:2b:
a2:3f:87:55:05:48:73:bb:34:a5:a9:ec:65:55:44:
c5:e7:e4:27:eb:41:be:7e:6e:af:f1:81:a6:12:96:
fa:64:7c:be:31:7e:0b:53:5e:26:ee:8b:1d:80:2b:
33:64:54:d8:ea:ef:df:0a:80:74:dc:87:9f:0a:e2:
39:7c:35:b0:00:bd:06:37:6c:e1:02:13:5e:2a:c8:
38:72:df:bb:76:84:38:7e:51:f9:f7:a9:bb:52:c6:
63:ba:99:85:0d:3c:2f:bb:7c:3f:80:c7:19:8a:cd:
f8:25:7f:01:c6:f7:c0:55:d2:4a:b1:53:1c:6d:0d:
a6:60:11:23:e7:c2:24:cb:1f:e3:98:85:91:39:ae:
35:07:29:ae:de:7d:91:de:f5:83:1e:1e:d1:2b:6f:
dc:b0:fb:a6:bc:55:c9:c7:6a:5e:7c:b5:b8:3d:74:
2b:4a:99:37:05:94:f8:1c:1d:1d:cb:90:e0:ff:e7:
97:f2:11:6c:ee:e7:38:31:bf:b3:90:96:fb:25:84:
70:76:48:e6:dd:b5:b5:6a:55:fe:2d:b7:98:ed:2f:
df:ef:7f:82:89:ed:68:87:f5:b5:b7:c0:c0:9d:60:
31:a3:47:40:f2:df:f7:29:13:66:b6:14:89:20:13:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F5:70:07:DD:4A:6E:F5:D7:37:B0:7D:A7:BA:0D:CF:F7:9F:AB:DF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5836d090-8999-43ab-a38c-f63a0e829c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
4f:ce:b2:40:e5:71:ed:7a:d9:5d:ee:e7:28:26:e7:01:cb:be:
78:ba:9e:46:a6:39:b3:ad:f6:ba:d1:bd:61:be:36:f3:c0:28:
71:60:24:29:39:fa:11:f4:3b:85:41:12:bc:19:4b:71:7a:be:
f4:85:48:b1:73:e7:5c:bf:30:db:30:41:de:27:bf:06:68:d8:
8c:c0:05:f4:41:87:d5:67:08:31:c0:60:01:81:2e:2a:5d:fc:
b2:f5:05:a5:7c:99:ae:fd:05:a8:3a:63:68:1f:48:b9:fe:c4:
b3:81:0b:b9:d8:8f:f2:2c:2b:36:ec:c2:92:bc:23:f2:92:e0:
bf:54:06:27:16:9e:fb:6f:f3:5a:00:fe:85:00:30:a5:da:48:
a4:aa:52:db:a3:6f:0f:4b:71:f8:21:16:41:c2:c4:4e:17:21:
00:9e:f6:6c:11:73:f5:68:2b:3f:f7:4c:80:c6:a8:43:12:93:
eb:48:7b:69:ec:55:76:fb:e4:dd:90:6b:c6:17:8d:3e:1d:3c:
14:95:8b:96:82:09:ee:20:d0:48:f9:a1:09:64:b1:c2:38:07:
1e:e9:c5:64:9e:29:66:d3:65:56:ac:a3:41:f1:cf:9c:1c:33:
ff:d2:69:af:4f:83:16:59:9d:94:85:e4:65:18:26:fc:e8:af:
f1:a0:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:07 2025 by rpki-client