Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa
File: 730c632c-0510-4eef-8649-b29c7a1d089b.roa (raw, json)
Hash identifier: bB+a/u3pq7mRqNV/9+CigZmPL0jQFX3456f/AYuuwfQ=
Subject key identifier: 72:C8:6E:24:EA:1C:04:DC:06:3B:AE:4E:AD:2E:CC:30:2E:64:45:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D7D4E4568F259B0BCE2F586E7E124E5CF74176F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa
Signing time: Fri 25 Apr 2025 18:10:17 +0000
ROA not before: Fri 25 Apr 2025 18:10:17 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7d:4e:45:68:f2:59:b0:bc:e2:f5:86:e7:e1:24:e5:cf:74:17:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:10:17 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=1cc76eaa739716eb514570fe167a61cb06183f1cf6ebf080045f9e06c539f090, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:9d:6d:44:9a:1e:69:d4:5e:59:f0:b6:25:
d4:72:f6:42:a1:38:1d:8b:d4:18:a9:db:ec:26:bc:
58:2f:91:6b:9b:c7:84:af:d1:ff:22:53:07:8c:96:
7d:d4:a8:08:7d:58:e5:f2:3c:85:c2:4b:4f:51:f9:
6c:c2:7e:a1:c0:b7:f9:c1:41:9e:cf:5a:ce:26:d5:
e8:d8:22:01:c5:21:e5:a0:12:1b:f2:09:c2:1f:b7:
9c:3e:2a:12:43:94:47:f9:63:d6:d3:fa:63:f9:ca:
75:04:46:33:aa:03:62:0f:b1:cc:f6:ee:29:c1:1e:
dd:fd:be:05:af:d9:ba:ae:83:66:0d:6c:1c:a1:6b:
93:e5:d8:5f:d5:2c:54:96:6c:22:5a:72:a9:4d:7d:
72:73:6e:9b:f1:bd:e4:24:71:39:64:93:ee:aa:7c:
08:6c:be:cd:78:e8:e2:bd:7a:6f:e2:5e:ad:71:f1:
da:1f:ac:29:73:a4:db:14:b8:f0:90:ac:f5:e1:fc:
9a:f4:7e:1a:2c:df:6f:7a:f1:4d:3a:7a:0d:ca:ef:
40:54:21:85:7b:ac:25:b6:ef:97:68:7d:2c:8d:95:
e8:d8:7a:95:9c:0f:76:8c:32:90:ec:17:51:3b:8a:
47:16:d2:d0:17:a8:4b:0a:43:12:38:59:b3:ab:4d:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:6E:24:EA:1C:04:DC:06:3B:AE:4E:AD:2E:CC:30:2E:64:45:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/730c632c-0510-4eef-8649-b29c7a1d089b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:2040::/48
Signature Algorithm: sha256WithRSAEncryption
44:e9:b5:38:b8:9f:ad:35:c0:3f:1b:84:44:97:d3:2d:7c:05:
a6:df:aa:3e:60:35:a8:24:7e:0e:da:b5:17:05:29:18:f1:3e:
b2:cc:67:f8:d3:0a:06:40:c5:27:db:89:44:b4:1b:93:67:9c:
32:c7:c4:59:aa:85:19:f7:7f:8b:7b:a1:66:b2:d2:dc:29:85:
09:ab:c9:f3:1a:0a:27:02:24:a8:b8:9a:0d:17:6c:bb:c9:68:
18:53:3d:34:d8:ac:57:ba:1f:fe:61:be:c2:81:85:63:9a:9d:
53:cf:5c:da:f4:c7:1c:5a:a7:50:0c:5c:d3:fa:50:ff:ee:26:
4b:18:98:df:10:ea:59:00:55:c6:30:db:f9:64:55:85:94:98:
b5:d2:04:3c:f9:0c:82:aa:50:c5:95:cd:aa:e0:ee:cb:c6:44:
da:e9:b0:01:f2:9e:fe:ec:29:d1:60:15:e6:34:a2:97:1b:55:
42:af:82:3a:78:93:97:29:e8:9f:5c:d2:88:7f:50:c6:51:ee:
5c:80:4b:59:90:81:fe:7b:d7:73:4e:41:d2:39:83:28:e5:fe:
61:28:4c:8a:6f:f7:f0:38:83:a5:5a:46:ae:aa:f5:a9:ee:f1:
51:0f:a7:99:ff:20:c8:23:ef:ab:e6:04:52:65:84:de:fc:88:
13:94:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:05 2025 by rpki-client