Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
File: 7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa (raw, json)
Hash identifier: E5hWI5VNIPyXdBtMXQowgqEj/mOrqHxckWViaFbFR1M=
Subject key identifier: 3F:E8:DD:23:FA:25:0C:8E:89:2F:18:50:E6:AE:42:FE:DA:82:62:53
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42EFB7F368CF25410E9AF10BEA9E94886F9EDF87
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
Signing time: Fri 25 Apr 2025 19:30:55 +0000
ROA not before: Fri 25 Apr 2025 19:30:55 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:1040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ef:b7:f3:68:cf:25:41:0e:9a:f1:0b:ea:9e:94:88:6f:9e:df:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:30:55 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=ddb020c609dfa337f6e8f38b10c906b595d4aa47ad9b7a480003eacc8f4b3982, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:62:00:be:05:b7:37:15:14:d2:69:90:53:
c7:30:41:f4:6c:84:9b:54:8b:bd:f2:03:6f:d8:0f:
c4:12:42:8d:5c:74:f2:72:20:cc:6c:84:4e:c0:55:
bd:bf:9e:6a:70:fd:bd:8f:7b:7e:62:17:fb:31:b7:
31:66:68:39:bb:60:16:0a:35:63:44:56:70:4c:0e:
a7:00:96:61:45:79:1a:56:0f:d7:77:ce:4d:1e:b5:
be:81:2b:09:de:79:fb:d1:a2:41:2c:ba:32:73:7c:
e6:47:40:a6:1a:a6:1b:1f:a2:59:03:89:75:b7:cf:
5d:23:2f:6c:c1:b3:7e:3c:c7:9f:4e:68:84:d7:4c:
cf:1f:0d:41:75:df:b8:55:fb:23:a2:4d:e9:ff:8a:
a3:c9:ba:c3:88:b3:fb:19:2a:a9:8e:fd:b5:0e:61:
c2:c4:bd:45:6f:1b:5a:a5:4b:e9:ba:7d:48:e2:58:
32:53:95:93:6c:05:1e:86:f0:23:4b:44:1b:19:45:
c4:92:a4:09:15:bd:6d:a4:26:1b:b5:dc:22:6d:9a:
94:0c:ee:e7:90:46:45:92:b0:00:b9:96:89:7e:9d:
73:c1:9e:0c:5e:3c:dd:0b:8d:f7:0d:25:a5:10:0f:
24:e0:f5:1b:85:cc:5a:b2:9d:e4:78:94:e6:47:ff:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:DD:23:FA:25:0C:8E:89:2F:18:50:E6:AE:42:FE:DA:82:62:53
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7cfb4167-bb34-4b3d-8c92-bcd5cab97a46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:1040::/46
Signature Algorithm: sha256WithRSAEncryption
7e:b2:ec:18:d6:5c:6f:f8:45:30:59:65:85:26:69:dd:63:62:
0a:6e:71:9d:db:18:46:c4:64:f8:65:30:29:f6:bf:d2:52:f0:
6c:f1:b4:55:37:7c:3a:d3:24:7c:ca:6e:01:1a:cf:10:0f:5b:
7f:8f:06:8d:9f:12:d3:ac:56:12:35:79:ca:f2:e9:ea:71:6f:
87:8d:3d:7a:8d:36:17:14:3c:36:39:d6:5b:81:34:08:66:de:
ce:70:8a:64:77:95:d8:be:7c:74:ed:1f:25:19:f6:70:77:f1:
1d:22:24:7c:8d:9c:01:72:86:d9:d7:68:ce:8e:7b:f9:fd:0d:
99:f5:b8:1e:67:9d:b1:dd:69:fe:74:83:10:67:aa:ac:d9:b0:
6d:61:d6:70:ec:9c:3e:fa:2f:86:1c:c7:57:29:73:56:aa:be:
2a:4f:fe:21:b5:da:8b:89:f2:e7:f5:45:85:fd:f1:b6:f5:62:
a9:9f:08:0f:a3:61:38:f3:5c:8e:54:18:d4:d1:39:90:77:7e:
c4:d1:ac:82:22:41:f4:f4:ce:c1:b2:30:15:24:b7:10:ac:a0:
28:21:2f:17:ce:08:a2:84:cc:66:f0:87:13:ca:36:7b:01:24:
07:7d:f9:b3:7e:6e:08:a3:ba:08:5e:83:d0:ba:ff:bf:f3:03:
e1:bd:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:16 2025 by rpki-client