Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
File: 5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa (raw, json)
Hash identifier: qDgA1AB5ozsUq5zYzMKEHZFoq5wO2K2t71H2ygDMuXw=
Subject key identifier: 91:29:4C:57:50:07:08:C8:1E:A7:31:EC:7B:CA:6F:EC:BE:E7:A8:5A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AC16BA35B69DEB436B84A0D9ED970BC3BD3A1CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
Signing time: Fri 25 Apr 2025 19:31:27 +0000
ROA not before: Fri 25 Apr 2025 19:31:27 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c1:6b:a3:5b:69:de:b4:36:b8:4a:0d:9e:d9:70:bc:3b:d3:a1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:31:27 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=beb109ad06ff82c0283aec2042939cf51484c21c4c0e374425d7a380b062f0a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:05:34:0d:e9:16:a2:6e:16:d0:7b:27:a2:
34:01:78:f0:c7:e1:27:5e:23:09:88:48:e0:a8:ad:
d3:81:32:98:57:60:13:a4:dd:89:a5:49:ea:ab:f8:
7d:fd:36:4c:3a:3e:2a:d9:25:17:1a:f3:94:cf:99:
1c:34:92:8e:c5:77:e9:0a:22:63:74:dc:38:63:c7:
e0:05:e6:92:f5:d6:14:a1:f5:7f:71:5d:ca:4a:1a:
86:09:cc:ac:d8:26:e5:e6:bc:f0:c7:76:ca:73:f7:
37:7e:74:18:d2:2d:f2:46:a3:c7:75:54:3b:a9:3c:
85:65:e1:24:d7:a0:21:54:ad:0b:c5:8f:d0:7f:59:
41:de:f9:87:27:61:64:1e:a2:d7:06:3d:37:eb:9f:
4a:b6:ea:91:94:52:d3:34:a4:d8:fb:59:bd:1d:d7:
86:3b:ce:5d:47:c3:a7:d6:50:db:91:46:11:4d:5e:
4f:33:67:12:eb:af:e3:b2:84:62:0b:7f:56:eb:16:
e6:d0:e2:1f:e9:1b:fa:d0:fa:4b:da:ef:23:0e:33:
3b:3d:5b:7d:f2:74:fe:55:05:d3:3d:cd:3e:b3:9f:
4d:f6:b0:8c:c3:91:05:6d:06:f2:48:f9:9f:18:69:
9c:fb:32:31:a3:82:f4:28:25:56:aa:a1:e1:3d:d7:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:4C:57:50:07:08:C8:1E:A7:31:EC:7B:CA:6F:EC:BE:E7:A8:5A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a56b250-ea3b-4b36-bc05-9e25e6cabb2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:9000::/40
Signature Algorithm: sha256WithRSAEncryption
54:41:c1:40:88:91:12:42:75:10:17:25:25:18:d6:4d:03:33:
4d:95:75:66:5e:d4:30:c5:b3:ae:4c:fe:b5:f3:70:c3:a3:1e:
b7:67:15:28:44:f2:5e:bf:cc:80:08:17:68:b8:6c:83:88:69:
9a:e5:5b:75:52:f8:05:02:02:e5:1b:4d:86:37:9e:44:54:a9:
b5:e4:f7:0c:3b:9b:59:1d:88:67:6c:01:fa:7c:2e:62:d8:21:
44:9f:31:38:07:a1:e0:0a:06:5c:e5:ad:05:da:ba:e4:ee:87:
d9:32:98:ac:2b:6f:31:d2:f4:4d:5d:75:09:11:92:00:48:04:
a9:dd:d6:56:b9:c8:04:2c:ce:53:40:ef:9e:0d:df:63:27:c8:
15:68:b4:0d:0c:42:54:cf:19:2b:2b:ee:a5:17:db:0c:df:f9:
4f:35:1f:9a:33:29:e5:d1:f9:0f:c8:38:14:35:22:53:2d:97:
d7:d1:bf:e4:5b:a0:9a:df:ea:74:23:e3:c0:6f:2e:e7:26:3a:
b2:56:42:b9:66:b6:b8:f4:d1:7d:73:05:fe:17:71:01:20:bc:
00:66:0a:69:de:19:dc:dc:b1:cf:7a:80:23:7f:c7:76:19:0a:
98:75:dd:59:04:17:85:08:1d:49:9e:0a:ff:3e:87:3a:bb:b1:
78:73:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:15 2025 by rpki-client