Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
File: 67233a4e-590e-4497-a72c-fe940d42b798.roa (raw, json)
Hash identifier: AqPW/w1agAuhQEjhsyBiJDHNFVvIjYG3p4CaKk7/gcI=
Subject key identifier: 21:09:27:C7:93:89:5E:AD:39:4A:1D:55:50:BB:00:EA:45:64:3B:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CFEE879175898FA91DA70C1E3ED0F88E964D4EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
Signing time: Fri 25 Apr 2025 20:30:18 +0000
ROA not before: Fri 25 Apr 2025 20:30:18 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fe:e8:79:17:58:98:fa:91:da:70:c1:e3:ed:0f:88:e9:64:d4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:30:18 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=3312eccd847977a4f05544ebfdc151f877b9bc12018d215fb0059ba79daac72f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:4f:b5:47:77:b5:c1:91:e5:6a:41:86:d3:03:
78:5f:39:68:66:58:be:48:8a:a2:23:67:ed:a2:f7:
fa:94:f4:ce:42:cc:e0:a3:d4:79:83:8f:7a:14:96:
b6:e9:26:84:91:9c:b5:34:08:b8:af:d1:f6:42:a2:
04:38:a8:43:5f:5a:5f:04:22:01:61:3d:a6:e8:8d:
59:28:b9:44:11:d9:60:5a:1a:7b:2b:b5:8f:9c:64:
76:90:7b:25:a6:91:30:d3:1c:ae:a2:25:d4:f4:fd:
05:c5:cd:01:64:a4:97:fe:0f:1d:1e:b2:ff:f7:3d:
fc:df:c0:dd:29:8b:69:2b:eb:1f:35:d4:c9:de:98:
f7:e5:0f:21:1c:06:ad:7a:41:e9:d6:9b:f4:80:ab:
96:78:f1:26:34:7f:a0:cf:12:f5:f6:07:bc:86:16:
28:bb:1e:b6:00:75:1d:fd:13:3b:e0:a4:8d:5d:a7:
29:4e:9a:c3:74:2a:76:6f:d6:10:70:a6:8f:5d:40:
eb:0f:3a:fe:8f:2b:43:a8:25:5c:3f:df:d0:4e:bc:
e1:51:ca:ff:6c:37:cc:46:eb:80:f9:ea:b4:7c:9a:
fe:6e:2a:ce:df:27:2c:4c:fb:09:a6:21:94:70:f2:
7c:c5:71:cd:05:57:0c:35:2d:96:12:6f:0d:eb:d0:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:27:C7:93:89:5E:AD:39:4A:1D:55:50:BB:00:EA:45:64:3B:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67233a4e-590e-4497-a72c-fe940d42b798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c::/32
Signature Algorithm: sha256WithRSAEncryption
86:43:03:f7:f4:fd:a1:3f:8e:6d:ee:58:fb:cb:18:b6:d6:5d:
1e:60:ec:40:16:8a:e7:23:12:d4:cd:72:d4:6c:e7:89:9c:42:
f3:5e:ae:73:8f:b2:85:0c:f1:75:18:fc:71:96:72:c9:4d:c4:
ea:da:59:34:de:c2:d9:1b:9f:7c:97:fc:4a:12:0f:14:2d:b2:
29:23:be:8d:cb:b3:95:9b:42:a6:c7:ef:8a:8e:5b:67:2f:f6:
f2:c6:7a:08:27:82:38:14:40:af:c1:0d:70:02:37:63:b1:e4:
37:ac:91:13:c4:50:c7:20:9a:5c:d3:9d:8b:e9:57:fa:b7:0e:
b0:c4:21:78:c7:82:b6:44:25:fb:61:73:1a:9a:6f:29:02:95:
07:76:a9:c3:01:1e:42:5f:14:0c:1a:1d:88:98:19:da:97:36:
ae:b7:35:70:23:c4:42:52:d9:6c:02:a5:4e:d5:51:f6:89:ed:
5e:cd:fb:4f:4e:41:fb:31:a3:e1:c3:81:4d:98:1e:fb:7d:a3:
12:33:6f:64:f8:c7:d9:8f:c1:30:e7:ab:a6:34:61:05:eb:3a:
29:b4:60:bd:61:9b:72:3d:79:e7:8c:36:be:25:2d:9a:c4:3e:
3b:7c:89:8c:21:64:6f:62:56:ff:49:6a:23:38:07:12:41:e6:
94:b2:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:21 2025 by rpki-client