Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
File: 8b578938-3dca-4d72-8385-f8a93e508377.roa (raw, json)
Hash identifier: e3pNzU0Jy3e1mK4cd2cdVt+0/K5uVaQoItwHXmwL4vs=
Subject key identifier: C1:54:2F:7A:F2:6E:60:2C:6B:71:45:84:D0:09:10:9B:8C:A3:F5:85
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 307CEA3324E2EFA558FA16F76BBFBEE4D26B1DFA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
Signing time: Fri 25 Apr 2025 20:21:17 +0000
ROA not before: Fri 25 Apr 2025 20:21:17 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:7c:ea:33:24:e2:ef:a5:58:fa:16:f7:6b:bf:be:e4:d2:6b:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:21:17 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=b3a65f3b646203a5de6ae66c7b64b0280516b02c4ac4eadfb49b7038efabbfab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:08:d5:d8:2d:07:45:50:4e:e8:09:79:fd:
1f:13:54:9c:e3:61:47:bb:05:43:96:79:59:ba:31:
19:8b:dd:35:59:3f:2f:dc:80:f3:b8:bd:8c:9f:85:
75:30:a2:08:f1:bb:00:a7:35:44:25:46:63:be:78:
df:e2:e3:d6:b1:35:b5:24:79:eb:13:e8:f5:a3:4e:
d7:2d:37:2d:b5:cf:ab:69:4e:bb:9e:04:23:4a:76:
89:ec:e8:e5:db:10:15:75:8e:3c:b1:00:67:64:d5:
22:01:0e:9b:2f:f5:a1:cd:05:27:e6:d2:9d:78:ca:
43:1f:de:fd:b6:09:3f:34:74:5f:69:ac:e4:9a:e1:
26:25:24:0b:27:bd:50:37:b3:24:42:bf:16:ee:c4:
62:4b:fc:b8:0a:7a:4e:c0:37:9c:a7:21:c7:3a:41:
28:97:2f:c4:e4:57:ff:24:a0:2d:ff:5e:c9:67:9b:
9d:93:8c:54:21:e4:46:27:ec:cd:2c:1f:b1:41:82:
ea:e7:1a:21:3d:ab:2d:98:d5:df:f1:cf:06:5b:77:
74:ff:78:11:9e:a6:be:48:47:e3:07:dd:70:81:74:
ec:4f:a7:87:f5:9b:68:df:11:98:09:08:b6:e1:d4:
a0:af:7f:be:cf:72:66:3a:e5:8d:a6:37:30:cf:85:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:2F:7A:F2:6E:60:2C:6B:71:45:84:D0:09:10:9B:8C:A3:F5:85
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b578938-3dca-4d72-8385-f8a93e508377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019:400::/38
Signature Algorithm: sha256WithRSAEncryption
c2:69:2c:60:9d:fe:d5:06:b2:dc:da:3e:fa:84:bd:53:0b:bb:
3b:50:30:d5:4b:26:f9:67:6f:3c:20:78:8d:1b:ee:1e:ed:fa:
51:fa:bb:ec:fe:e4:ea:3d:4a:29:52:d0:18:e4:d0:ee:3a:6a:
f4:73:29:60:a1:f6:8f:e1:1c:ba:60:70:a5:0a:95:cc:a9:03:
c3:56:5c:79:cf:0a:bf:84:dc:b8:2f:8d:b8:e9:36:a4:c8:9e:
7b:23:10:38:60:64:d2:c4:78:1d:c1:a2:57:ea:cd:ef:fe:8d:
0a:73:4e:93:97:e8:1f:30:a0:09:49:7e:52:e5:59:76:03:b6:
08:b0:1a:a2:7c:df:a2:ab:17:88:73:79:7c:5c:ee:87:97:9e:
9e:3e:83:e9:f9:f1:3d:81:b3:5f:fb:87:a4:97:13:15:d9:94:
4d:7c:ae:a1:92:65:84:68:e6:55:8b:a7:25:07:3f:8a:81:62:
ec:41:11:78:09:15:69:21:1a:dd:5d:17:cb:60:72:88:48:97:
a9:8e:20:2d:58:17:7f:a7:33:a6:da:e1:6e:f1:5f:cf:60:e8:
bd:5c:93:e0:f7:a3:40:0d:1a:26:86:4c:2e:bc:97:ab:79:bb:
76:47:9d:8a:7e:18:79:fe:5b:20:ed:b9:11:ea:d1:45:b9:86:
88:7e:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:33 2025 by rpki-client