Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
File: 61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa (raw, json)
Hash identifier: 81vEzcgf0Xegmymv74EncwDdtRExfceHAGRYMUPOFlM=
Subject key identifier: 26:F5:F0:D3:BB:41:4E:A7:EC:D6:EF:E6:A5:E4:74:B1:28:89:47:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2DE2F002F7135F73FA8188C537BEC647FB516E75
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
Signing time: Fri 25 Apr 2025 20:01:34 +0000
ROA not before: Fri 25 Apr 2025 20:01:34 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e2:f0:02:f7:13:5f:73:fa:81:88:c5:37:be:c6:47:fb:51:6e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:01:34 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=d7e81ddb35250c56df82c7647c261b1a7e160631f823daec001ca59eb6f89f1a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:52:24:78:14:a6:a6:5c:cd:48:c1:c9:1d:
5d:e8:fd:6c:5d:8e:f9:16:8b:69:82:34:17:71:e7:
12:16:9a:90:de:fc:cb:7f:ba:62:c3:f5:74:48:26:
c8:56:d5:8c:90:52:6f:6a:1d:be:84:30:51:1a:5e:
1f:53:9c:93:a0:a1:5f:e9:49:06:71:44:e8:fd:c0:
a5:45:3d:54:1e:01:8d:9b:b5:0d:93:d1:41:94:ed:
0f:8d:6a:17:27:6e:18:cc:4a:0d:25:72:0c:68:1c:
5f:7b:7a:2e:b5:4d:4b:56:8a:33:db:44:58:f9:99:
92:41:ec:9b:97:ad:b6:28:2f:50:74:1c:b5:3a:e6:
a2:f1:f4:07:d8:ef:83:69:bd:99:c2:5c:58:37:e8:
70:65:eb:77:6c:d1:b8:13:e5:69:26:66:74:77:47:
56:c3:60:36:7a:e4:69:54:30:28:e3:a3:11:50:10:
14:28:b5:df:41:a5:b7:d2:83:b6:30:ae:3a:ff:7e:
53:4e:a8:65:90:78:01:31:f9:fa:b0:86:8c:3f:63:
71:29:cd:ff:4b:53:80:73:54:8a:f3:21:fe:a2:e1:
73:79:7a:4b:b8:5d:0d:ea:f5:5c:09:65:17:57:48:
06:66:b1:ff:56:4f:4e:a4:a9:48:36:aa:db:5c:28:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:F0:D3:BB:41:4E:A7:EC:D6:EF:E6:A5:E4:74:B1:28:89:47:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:a000::/40
Signature Algorithm: sha256WithRSAEncryption
95:61:a3:d0:ca:fa:2c:0e:9c:6b:99:5f:b5:c8:39:d6:32:9a:
52:b3:d6:98:f4:73:bc:a1:59:f6:65:7c:a1:74:cf:ad:b5:31:
16:1c:06:6e:79:71:48:39:61:eb:40:75:e2:eb:e0:14:00:91:
ae:8f:2a:fa:90:f5:40:ec:69:9d:37:d5:46:df:28:80:66:3a:
7b:b8:9b:b6:4d:7b:b8:86:f9:36:e7:c3:6d:ab:00:43:37:80:
73:47:2e:57:ee:d4:cb:19:8e:99:71:ec:32:ff:51:24:d8:4d:
31:01:15:a2:86:9f:8f:61:a1:b3:6c:ef:ea:30:35:a3:4a:71:
cc:c8:e2:27:cd:05:13:eb:98:0d:22:9d:81:66:a3:bc:c9:27:
8b:21:ef:3c:41:a2:0f:ea:59:24:01:92:28:22:95:db:47:e8:
e3:3e:7f:cc:94:09:1e:af:8b:63:90:bc:d5:dc:5e:bb:9c:ac:
2d:c0:e9:2a:de:05:9e:55:d2:e9:13:4f:f4:d9:1a:44:29:b5:
1a:32:c2:50:ef:6d:2b:8a:41:4b:de:ea:34:84:cf:5d:2c:a2:
8a:3e:4d:ae:cb:3c:03:99:e5:68:60:99:4f:cf:1b:08:8b:24:
6a:9f:74:61:0b:ff:c9:bb:ee:f3:f9:30:93:88:ba:b1:b1:36:
43:af:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:17 2025 by rpki-client