Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fae084a-25bc-483a-9a0a-2dc71c247184.roa
File: 5fae084a-25bc-483a-9a0a-2dc71c247184.roa (raw, json)
Hash identifier: yTWzNMOcFfCYpHe13fswbXuOhfT9119XcEU2p2YqL8c=
Subject key identifier: DF:1B:1E:1A:9E:23:26:0F:C9:F3:58:3A:EE:09:5B:1E:24:A1:D2:6A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2DBD1C2C1A6B73265429428679D81612C660C7F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fae084a-25bc-483a-9a0a-2dc71c247184.roa
Signing time: Mon 21 Apr 2025 18:31:01 +0000
ROA not before: Mon 21 Apr 2025 18:31:01 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bd:1c:2c:1a:6b:73:26:54:29:42:86:79:d8:16:12:c6:60:c7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 21 18:31:01 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=8d035fd113124f96c5c5e94f7369867d382def873f6eb34590283e5a0dca6677, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:88:cd:f8:04:8a:1b:0e:36:f4:a7:ed:72:
c7:a1:32:ea:23:1f:99:7e:93:d9:fb:ad:3f:11:8f:
78:66:95:7f:b4:2a:89:f9:f2:9a:ff:a1:af:57:35:
d0:54:7c:13:c0:d5:00:d5:34:c9:30:9e:94:99:84:
51:df:31:f4:e0:13:a1:36:21:e7:e7:ea:5a:1f:09:
04:81:cb:e7:15:31:48:f8:a5:28:99:a2:c7:06:68:
9b:36:f1:8a:e5:d0:1d:13:4c:f4:e8:aa:1d:d5:84:
6e:c0:de:17:a6:10:62:30:21:6b:c0:d5:eb:2a:c2:
29:f2:fa:43:96:09:be:e5:99:fe:83:69:b1:ba:95:
02:86:df:98:27:79:d1:61:6e:de:3a:a8:d9:4d:68:
0d:1d:57:72:0c:f9:00:49:ea:14:a2:db:6c:dd:7c:
ba:99:6b:67:b3:01:49:c0:6c:ff:54:04:2d:6a:22:
2f:39:cd:34:f5:d7:54:8a:ea:e3:d1:9e:ed:ae:e5:
94:09:2a:76:5e:d3:63:84:15:5b:24:7d:a6:0a:6a:
44:63:37:bc:d1:8b:2a:a4:77:d7:85:96:74:db:40:
90:a3:a8:30:1b:fb:0a:62:0b:96:70:08:16:0e:10:
7c:73:67:a4:67:93:29:f7:2b:49:98:7e:42:3b:31:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:1E:1A:9E:23:26:0F:C9:F3:58:3A:EE:09:5B:1E:24:A1:D2:6A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5fae084a-25bc-483a-9a0a-2dc71c247184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:800::/40
Signature Algorithm: sha256WithRSAEncryption
a0:14:cc:14:01:cb:aa:c8:2b:98:9a:86:5e:db:29:42:d8:0a:
10:fa:07:ec:9c:f9:62:7e:de:06:cb:b8:5f:e8:c0:67:f7:34:
eb:56:f5:2b:1d:af:79:8b:10:d1:cd:f7:b9:d3:a0:75:da:f4:
17:eb:e3:e6:b4:4f:2a:23:59:46:1b:e0:d3:96:64:67:9e:f7:
a6:8e:7a:1f:38:c1:ea:5c:f6:ae:ec:ba:24:da:f2:c2:4c:cf:
cb:b4:af:b3:16:45:b0:5e:1f:a7:bc:0b:ef:48:09:68:c4:76:
0d:dd:21:6d:d8:7f:1b:ae:8a:27:5c:1a:62:90:c2:c4:1a:4b:
39:6e:ba:08:87:36:a4:5b:15:8b:32:8b:c4:a6:3a:26:8e:dd:
11:e2:f7:7a:60:0b:6a:af:d3:82:31:ee:42:55:a6:62:4b:ba:
3b:a8:51:b5:26:20:91:c0:33:ba:f8:8d:9f:1b:a8:65:bd:78:
c4:8c:a4:60:4e:88:d2:63:72:53:5f:9a:8b:7e:2c:44:f1:64:
b2:08:7f:a9:f4:78:75:03:1f:0a:5c:2d:0a:73:42:e7:24:f7:
01:06:d2:65:60:86:6b:1d:ec:cc:28:96:5e:de:e2:49:ca:54:
47:0e:99:1d:4a:e0:25:5c:8b:c3:70:74:5b:9b:d8:15:e8:bb:
89:be:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:50:12 2025 by rpki-client