Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
File: 8cdaa55d-528e-4856-8132-c186e079b4cb.roa (raw, json)
Hash identifier: Hx66X0/2MGsuV01WN5tVedyAQ5R7r21Y/EbyKGKlmy8=
Subject key identifier: E8:F6:43:DF:02:9A:B6:95:BB:60:A8:20:E8:B2:8D:3C:D6:A4:C0:2F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7BFD05C07CE53566468A5BEF0512C88C5F6B127B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
Signing time: Fri 18 Apr 2025 18:30:23 +0000
ROA not before: Fri 18 Apr 2025 18:30:23 +0000
ROA not after: Fri 23 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:fd:05:c0:7c:e5:35:66:46:8a:5b:ef:05:12:c8:8c:5f:6b:12:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 18 18:30:23 2025 GMT
Not After : May 23 23:59:59 2025 GMT
Subject: serialNumber=1ac6ac4f9cb8d94560a897cbd5ced838680473172ca54af2a0ca6b7ffa9448ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:63:07:61:6a:88:46:1e:fc:58:7e:8b:c0:
fe:38:a1:76:e3:c0:e9:e3:f3:71:8e:c4:2d:46:76:
e4:60:ac:4b:8c:fb:fe:b9:ec:a5:fc:2f:ea:01:c9:
1d:0e:89:a6:75:74:06:e3:14:7b:34:6e:14:26:50:
eb:06:7d:48:94:77:2e:2e:49:e6:fa:e6:1c:59:91:
45:05:97:b2:b0:aa:1f:fc:ad:2f:b5:f2:e2:e3:0f:
73:b8:69:0e:ec:c1:b5:67:f0:fc:97:d7:37:95:cc:
7e:ef:09:de:73:19:43:e3:e0:87:aa:fd:a9:a6:6a:
4f:82:7b:0d:c2:72:3f:f7:ea:1d:98:25:a3:b1:a6:
20:fd:33:b0:65:50:e7:9d:65:ab:ec:08:2c:82:35:
53:1e:a6:59:54:99:a9:a6:2a:b1:7f:7f:e3:fb:7a:
f9:4e:b5:63:ba:17:6f:7e:30:8e:a3:96:6f:37:4d:
9c:a5:cd:be:2f:45:fb:9e:b9:74:8c:8d:4f:81:d9:
80:64:8e:25:0f:53:25:61:fb:98:d0:bd:90:0c:df:
aa:db:99:c8:77:5d:7c:2b:62:39:de:58:3d:95:f8:
5f:87:27:63:05:a8:52:4d:f2:7a:8b:a7:d5:0f:1b:
a6:6f:71:39:40:0b:a0:78:db:b7:2f:b2:80:ed:f0:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:43:DF:02:9A:B6:95:BB:60:A8:20:E8:B2:8D:3C:D6:A4:C0:2F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8cdaa55d-528e-4856-8132-c186e079b4cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:4000::/40
Signature Algorithm: sha256WithRSAEncryption
65:75:5b:9f:b6:5a:bd:ba:d8:45:8b:39:c1:0a:2b:ff:e9:f3:
42:31:8a:08:1b:8b:61:e4:11:a9:20:d4:a3:09:d1:b9:10:65:
e2:77:3d:1a:44:da:d7:42:16:c4:7a:55:20:16:fe:bb:29:ec:
15:22:6b:f6:fc:be:d7:ed:e2:36:2b:b8:dc:0f:e5:2e:e4:b2:
d0:76:a9:05:e3:43:e8:43:3d:d5:ec:23:f6:40:9a:1a:0e:70:
fb:31:e1:7d:bf:48:6b:7d:09:c8:90:3f:f9:9e:8e:30:22:3d:
6d:83:8f:67:35:97:9d:51:46:ce:75:96:66:00:5b:e9:11:cd:
c0:2a:c6:44:d6:c0:df:39:f9:84:d5:42:cc:8c:44:2d:22:44:
56:b8:4b:91:01:43:23:1f:46:ec:f8:51:33:d3:3e:73:e0:dc:
f4:52:c6:3d:c6:27:6e:1e:55:0f:2f:54:ee:6f:5f:4b:48:bf:
cd:de:a4:ea:d7:4f:9d:5c:ab:1d:e0:a5:d3:27:83:15:28:84:
ce:42:64:4c:7b:d0:d4:1f:87:ef:73:b4:ec:db:5b:2d:0b:59:
b8:41:cb:92:e0:3e:1a:4d:f5:a9:73:b2:d5:0a:cd:2e:50:23:
b1:01:c6:33:4a:d6:7f:08:ba:21:e2:b9:03:5e:8e:c0:69:7a:
67:48:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:21 2025 by rpki-client