Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
File: 8615f258-46a8-450c-972c-84b27581bb43.roa (raw, json)
Hash identifier: h+QDll2Kc14BHMkf0qbIAlpqibpn3h1o6AgLNRnXHMg=
Subject key identifier: 78:16:A6:D8:A9:3B:8F:2A:C4:DF:B9:CE:A8:8A:7C:80:A5:E3:6B:0D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2D42A4AD0116B23D0F2BF8592F01323313D0F4CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
Signing time: Fri 25 Apr 2025 20:21:22 +0000
ROA not before: Fri 25 Apr 2025 20:21:22 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d018::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:42:a4:ad:01:16:b2:3d:0f:2b:f8:59:2f:01:32:33:13:d0:f4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:21:22 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=9ddd0988a40896486d6804acefaf18e3001fc2944fbc8020d6a5d44e1293ab00, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:02:b1:6f:72:5d:24:ac:6c:6c:05:4e:5f:
99:16:b1:94:bb:c5:e6:f2:78:19:af:f0:32:63:20:
86:b8:b2:2b:7f:e7:05:9e:e9:9d:61:b0:ac:44:9f:
e5:d0:65:47:f2:8e:80:8e:47:d5:7e:73:6f:bf:16:
f0:76:51:84:cb:82:2d:59:f0:b9:e7:cf:ec:6f:98:
04:75:6b:51:65:0e:18:e8:ad:04:3e:69:78:28:78:
6b:e6:b1:33:d4:83:34:f8:d3:3d:29:3e:b8:dc:83:
69:74:43:50:e9:a4:34:cf:cc:f0:f9:1c:a5:9e:14:
64:1d:3c:ac:95:c8:e6:69:4c:68:81:64:25:d5:bc:
d0:dc:24:8b:67:80:74:df:41:44:35:fe:bd:a9:75:
46:7c:c1:11:5f:03:4a:ca:f1:28:e3:be:c0:8c:45:
a6:d7:31:ac:19:2f:af:fd:28:99:96:97:8b:f5:fd:
f4:c4:82:9f:4f:a2:37:34:02:ec:c4:17:66:26:9d:
1c:27:9e:e9:28:ca:5f:23:ed:15:6d:25:15:24:c7:
57:d3:28:31:82:4d:7b:99:33:98:8e:92:15:04:81:
8a:6b:22:6e:b8:0d:cb:db:8d:c4:bd:cd:3b:d3:21:
c1:0a:f6:2f:fb:c3:2c:ca:1e:67:3b:a4:a6:53:9a:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:16:A6:D8:A9:3B:8F:2A:C4:DF:B9:CE:A8:8A:7C:80:A5:E3:6B:0D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8615f258-46a8-450c-972c-84b27581bb43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d018::/36
Signature Algorithm: sha256WithRSAEncryption
c9:f0:07:f9:b0:79:2e:98:90:88:49:be:4d:4a:e2:5c:ed:a3:
36:b8:39:f4:05:c5:fc:65:12:36:e3:1a:9d:5a:a5:a4:2c:f9:
d8:b3:44:c7:79:0c:78:43:9f:b9:42:29:02:f2:79:66:2e:4c:
03:bc:ec:1e:6f:62:36:50:29:17:76:25:21:6d:47:ab:23:0f:
24:97:2a:e4:60:20:d5:3e:ff:44:14:98:2e:ef:d8:03:6d:94:
de:fd:05:24:3b:62:77:9f:c6:b5:0b:b4:97:8c:af:e0:24:ef:
75:9f:f7:0b:37:d0:1e:db:f4:0b:fd:cd:86:31:3c:58:97:d6:
a6:7d:7e:fa:f7:34:e5:03:a6:bd:94:4d:83:ee:cc:d2:5f:4c:
29:c3:8e:e2:f2:2a:59:9c:0c:ec:9e:23:7d:6e:b1:e7:d0:c9:
bf:77:65:f9:19:68:70:06:25:0c:65:51:47:a3:58:59:aa:65:
ca:41:73:bd:61:2d:38:8b:d1:65:02:02:e0:d6:0c:ea:e3:2a:
5e:36:26:c7:b1:94:c0:dc:26:de:75:bb:ec:17:a0:07:10:6a:
c8:ff:7c:87:af:c8:c3:d4:09:6d:0d:63:03:98:90:39:22:ca:
b7:e2:59:70:ce:e2:05:f6:6b:5a:b3:25:c6:3d:f0:f9:3f:49:
3f:be:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:27 2025 by rpki-client