Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78494449-3e47-40f2-978c-5903f9d1303d.roa
File: 78494449-3e47-40f2-978c-5903f9d1303d.roa (raw, json)
Hash identifier: kpJkIKQ/qmlwpfXJ18TMtUYnteWw8ogycnfSUQC+vAk=
Subject key identifier: BE:97:9D:15:04:A2:C4:E5:0C:70:33:36:F3:F2:70:2A:AF:93:48:14
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3AD3160A99AF9F3BE342F989F925840C2D77C087
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78494449-3e47-40f2-978c-5903f9d1303d.roa
Signing time: Fri 25 Apr 2025 19:00:15 +0000
ROA not before: Fri 25 Apr 2025 19:00:15 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:60c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d3:16:0a:99:af:9f:3b:e3:42:f9:89:f9:25:84:0c:2d:77:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:00:15 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=260df0c3685f314c055fd236a6e0fc57b02669b5fb88dfab07b1423125f8c6f9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:b3:6e:8f:9d:e9:87:0a:77:52:38:76:a4:
b5:61:81:49:87:10:2f:83:b2:9b:d2:01:6d:4b:be:
f6:dd:66:b0:18:1a:84:0f:40:df:8b:6b:8c:89:84:
6a:a7:11:2b:55:82:73:fd:cd:d8:2f:4d:55:82:fe:
72:d7:9d:c6:c8:28:6d:e5:10:0c:42:c3:6e:af:39:
d6:0b:04:64:f0:af:56:0d:4c:e1:c1:57:91:2a:ac:
ba:25:5c:a7:db:2c:f5:04:99:37:a5:82:9b:05:db:
52:54:97:38:c2:01:64:06:e7:2b:2d:10:c0:02:d5:
f1:09:0a:40:e1:b3:1d:a2:09:2b:5f:6b:72:c6:65:
c4:f8:ba:5b:0d:6a:b5:5c:1c:9d:97:7f:4c:bb:4d:
86:0d:79:93:8e:ee:e9:b5:5a:5d:9b:69:73:33:e8:
86:0c:49:18:c3:33:ad:2c:a8:23:c5:cc:e8:be:49:
3f:d1:ac:b4:9c:f1:cb:c4:bf:b5:b7:ed:d7:df:d2:
2a:66:d3:23:ff:df:f2:4a:c0:13:19:2d:8d:7b:38:
d2:3e:65:f9:32:af:b2:7e:bf:f4:24:e4:20:77:f7:
1b:da:2f:58:c5:5f:93:82:3a:7b:29:22:cf:58:9e:
5d:47:2e:2d:fe:65:83:74:2b:f3:9f:13:5b:47:2e:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:9D:15:04:A2:C4:E5:0C:70:33:36:F3:F2:70:2A:AF:93:48:14
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78494449-3e47-40f2-978c-5903f9d1303d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:60c0::/48
Signature Algorithm: sha256WithRSAEncryption
45:4a:34:c6:76:38:ec:36:35:03:0b:36:5b:72:5f:41:71:11:
dc:1d:27:9c:c1:16:29:d4:71:c5:63:7f:ba:08:0a:39:73:42:
de:bd:30:0e:2e:fc:49:2b:fc:7f:45:60:d8:19:7d:04:86:f0:
b7:41:1a:6d:5a:5c:0c:cd:f2:79:de:4a:23:a1:fd:e3:54:87:
01:7f:2f:97:59:3d:19:c2:61:cf:eb:7d:27:60:86:92:f9:27:
d6:67:1b:c4:b3:10:2a:41:6f:44:de:e0:e9:9c:d2:bc:10:c6:
22:3a:a4:d9:5e:a2:ba:76:ce:35:5d:bd:20:01:55:56:e1:1c:
ef:cb:15:9d:07:1e:f1:83:42:6d:c6:d5:06:02:97:2f:72:44:
fa:b2:fa:61:bb:4e:d6:6e:02:65:47:64:c0:89:1e:fe:37:2b:
8b:91:65:37:04:dc:db:e2:f1:45:f0:36:0a:98:f3:fe:c3:c9:
33:b7:bd:1a:7c:92:90:80:61:f4:7c:fb:0e:ed:df:f9:83:87:
97:f4:93:12:a9:2a:de:00:f3:51:ca:94:98:4d:4b:b2:05:2b:
6d:e6:cc:97:57:6a:d3:de:98:0d:d9:94:73:b8:7e:f7:5b:d4:
ac:a2:57:23:be:8d:04:d3:cb:e1:c1:a4:3e:49:2e:17:17:0a:
06:a3:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:24 2025 by rpki-client