Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
File: 7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa (raw, json)
Hash identifier: FS/NxmjpkBTImgiKvks10Y7LHo0QyUS9sAyt5/fZ9cU=
Subject key identifier: B0:36:C3:B3:6C:D4:BA:C2:77:8C:DB:2B:FF:58:6A:FF:A7:BE:70:9F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 41DA0FF528ED7FC953D42F2ABE00BA0AB86D9ED8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
Signing time: Fri 25 Apr 2025 18:11:20 +0000
ROA not before: Fri 25 Apr 2025 18:11:20 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:da:0f:f5:28:ed:7f:c9:53:d4:2f:2a:be:00:ba:0a:b8:6d:9e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:11:20 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=fa8e04291f0f9e19b0c27dc7341b4f8bb809022f672dd32c7089dcce6447915e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:10:e0:d4:41:f7:5a:72:20:07:16:5a:a8:
60:f7:4d:cc:5d:6e:5c:70:27:20:ba:95:22:30:5e:
85:fe:ad:17:c0:51:f6:4f:54:af:d0:3a:c0:ec:20:
31:0d:e4:95:9e:6f:a5:19:06:2f:9f:fa:03:37:be:
e0:50:93:6b:e5:94:05:ac:d9:f5:30:ce:78:99:8f:
b8:b3:a5:57:1d:86:b0:66:c6:b7:11:25:46:79:c1:
df:7b:e7:b9:3f:a3:18:b7:cb:92:cd:3f:39:db:48:
e2:98:0f:80:e0:cd:1a:ac:79:28:c0:69:79:0e:ab:
4a:e3:db:72:74:0b:f7:ac:7b:d1:29:84:e2:f4:2c:
72:9c:bb:fd:31:c6:2c:24:2c:f2:10:2b:1b:6e:3a:
e7:29:9e:df:3b:ef:b6:af:db:a8:d2:bf:c1:c0:2b:
1e:de:e2:e5:50:d1:24:14:5b:1b:1d:4d:1d:7f:49:
32:15:9a:45:51:eb:f0:8f:ea:28:66:4b:28:ec:0c:
5d:04:a1:8a:f2:b8:71:8a:fb:db:bd:44:44:ad:8b:
93:ce:2b:7c:e9:dc:7d:d8:8c:05:a0:b1:de:a6:66:
63:ee:3a:cc:a7:00:ab:f4:c1:54:98:41:5d:72:48:
72:b9:f6:39:67:20:fa:b2:d3:d4:41:73:c9:66:e9:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:C3:B3:6C:D4:BA:C2:77:8C:DB:2B:FF:58:6A:FF:A7:BE:70:9F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7b5f45a2-ab79-4ad3-a09e-87b355f76732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:e080::/48
Signature Algorithm: sha256WithRSAEncryption
bf:d2:6b:65:16:7c:21:12:f4:ba:21:f2:a5:9b:70:23:54:cb:
de:52:d6:12:fb:20:bd:ad:26:17:e0:7c:82:99:74:3d:2b:0b:
1f:c7:6a:cc:b2:d5:36:ed:82:1e:e2:98:68:cc:87:e9:1e:91:
25:b0:2b:4f:61:ba:5d:fa:0d:fe:cf:70:30:3b:57:27:c5:ef:
4f:00:a0:7d:5f:d1:65:ce:93:77:6a:b1:75:06:a4:df:10:e1:
0b:4d:76:21:b3:35:ae:87:0e:79:f9:fe:96:8a:25:88:ca:37:
5a:8e:4d:db:24:8d:9c:f3:11:41:a2:66:bb:85:d8:f5:2e:da:
db:38:cc:a8:39:03:d2:6a:b8:09:a3:e0:a3:6e:a9:db:65:61:
bf:73:e9:4f:a1:b4:e3:fb:27:f7:0c:50:0e:4d:2f:0a:43:f3:
2c:dd:02:dc:f7:77:f5:d0:06:fe:30:2e:7f:12:6d:50:97:3b:
12:ea:b7:7d:a5:4e:28:37:bb:86:79:45:3b:6d:6c:32:df:be:
7a:cf:ad:03:79:96:9f:e2:2e:57:5f:dc:a1:a4:9c:b5:07:dd:
7b:b1:d0:41:ed:39:ab:a2:00:68:61:e3:32:44:61:18:9d:4c:
67:77:ae:18:29:41:15:c0:2f:dd:df:df:b1:fa:c4:12:ed:d6:
3b:4c:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:30 2025 by rpki-client