Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58380c09-9a88-4034-951d-fc94a6187f3a.roa
File: 58380c09-9a88-4034-951d-fc94a6187f3a.roa (raw, json)
Hash identifier: pG0ZRr5EnS9S/W6DLaH21ao1KZYLAO/kiA8t07eR7Qc=
Subject key identifier: D9:20:23:E0:8D:C9:7B:D8:FD:03:B7:E3:EC:6C:59:74:BB:F2:B9:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D58F8A5E61DD3B532C6B6375B5CF6DDB741BB13
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58380c09-9a88-4034-951d-fc94a6187f3a.roa
Signing time: Fri 25 Apr 2025 18:30:20 +0000
ROA not before: Fri 25 Apr 2025 18:30:20 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:c0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:58:f8:a5:e6:1d:d3:b5:32:c6:b6:37:5b:5c:f6:dd:b7:41:bb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:30:20 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=b3ccc4cc1868fa7e10cd6a8d081966e24ec9e82357aa565b7c7e0c806ed8bc09, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:c5:51:33:17:a9:c1:12:47:7a:68:47:c8:
f4:9f:e9:e0:a7:8b:8a:11:aa:d8:6a:19:5c:6c:ef:
f5:21:93:ba:83:c9:52:3f:ce:55:02:79:b5:da:e0:
7a:24:4a:0e:fc:b5:0c:43:e3:09:69:69:85:14:f4:
77:92:16:46:91:e5:2b:e5:9b:ee:f8:99:ac:c8:fa:
ee:f5:f5:fc:b6:e3:25:6b:55:d1:76:ad:83:d6:9c:
b8:45:27:c4:b0:f8:b3:d6:86:1a:5d:93:b8:3f:de:
dd:c2:e0:34:ce:ce:7b:0b:af:de:c8:38:33:b9:f6:
3e:c2:91:1d:20:98:da:c3:34:44:e0:50:e6:07:0c:
e8:3a:00:77:37:c9:0f:92:7f:7a:7d:01:2d:c0:50:
a0:7b:ec:ab:e7:bc:d6:cc:49:3e:e9:83:73:99:4d:
b0:0f:db:4b:2d:b0:ce:2f:9a:af:1a:91:4d:05:90:
33:c6:66:c7:9d:42:e7:23:56:bf:e7:43:87:07:28:
15:cc:67:95:04:3b:92:13:27:bb:85:8a:ed:bf:1a:
6e:97:8f:7a:95:8b:95:5e:ea:be:c3:12:89:55:f0:
6e:d9:de:7e:cb:9d:77:8b:f4:f1:09:72:3d:92:b3:
4b:38:bc:d0:76:bd:34:41:34:7b:3f:ba:53:48:35:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:23:E0:8D:C9:7B:D8:FD:03:B7:E3:EC:6C:59:74:BB:F2:B9:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58380c09-9a88-4034-951d-fc94a6187f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c0c0::/48
Signature Algorithm: sha256WithRSAEncryption
9f:84:7f:8f:32:61:fb:b5:2f:44:15:b8:85:32:bc:2b:f1:e0:
9e:45:00:a1:6b:23:0e:ce:df:ae:c1:c5:47:6e:e9:fc:b5:fc:
70:7d:4f:50:e5:2a:be:ea:f4:94:6f:8b:33:7b:2c:e1:93:03:
79:59:d2:10:3f:62:b0:e0:71:7b:9e:e4:1f:4b:a8:10:b9:80:
0b:f6:8c:ca:7a:51:a4:d4:da:cf:05:b5:51:64:3d:9c:c6:af:
4a:b9:26:40:ec:59:d2:43:6f:ed:e4:20:37:c0:76:82:09:c7:
37:f3:4d:6f:f0:81:f7:a1:62:5f:62:8e:9e:f3:e8:9c:79:c4:
e2:9c:60:bb:09:7b:6c:3d:78:c9:74:09:2a:3f:58:2e:70:3d:
b9:e3:9a:83:5d:0f:57:1d:92:c1:98:1a:cd:60:bf:ea:71:44:
68:b4:41:94:4f:3c:22:73:2c:50:a4:48:b3:cf:63:b8:45:c4:
9c:30:c3:2c:fb:84:8f:51:7f:f3:e2:8b:23:a1:5e:27:70:6e:
f8:7c:44:d8:44:0c:41:c1:6d:51:7a:ea:cc:21:86:f8:0c:72:
14:ed:f8:bc:39:a6:6b:77:d7:95:61:54:52:44:5a:7e:11:11:
29:b7:42:9d:ac:e4:34:8b:58:a0:32:29:96:91:d6:b9:3e:f3:
21:c7:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:51:12 2025 by rpki-client