Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8eb63ceb-3350-490c-9a1a-85b2563a8947.roa
File: 8eb63ceb-3350-490c-9a1a-85b2563a8947.roa (raw, json)
Hash identifier: 1Cy/WTbmBulVX0lf9NmMXDLYHXt0dS3gIayIS/S21t8=
Subject key identifier: EE:62:C7:B8:9B:63:87:34:38:31:DA:0C:D1:CA:25:73:8E:E5:2A:16
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6D7FDB8D0595672FB8D54E6B83EE941EFF07A29B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8eb63ceb-3350-490c-9a1a-85b2563a8947.roa
Signing time: Fri 25 Apr 2025 20:10:34 +0000
ROA not before: Fri 25 Apr 2025 20:10:34 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d071:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7f:db:8d:05:95:67:2f:b8:d5:4e:6b:83:ee:94:1e:ff:07:a2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:10:34 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=ba683c37c95ce67f4d3e509a737bb9766e922dba713ea96e619931555c1226e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:7b:d9:c8:c2:b7:2a:56:96:60:c3:47:99:
07:75:fd:44:17:df:07:4f:35:01:c5:e9:58:ff:16:
da:06:81:92:d6:33:e3:58:16:21:f1:8f:4d:8f:8b:
bb:02:8c:5e:6b:7d:88:a4:2c:03:f7:a0:57:35:a2:
1c:d5:60:b7:fd:70:fa:ed:44:1f:37:da:a2:54:d3:
3e:b4:fb:5d:df:cf:d7:ad:bc:cb:0f:81:a8:8b:9a:
0c:cd:7a:f0:59:87:fb:92:b6:49:6c:d2:25:15:bf:
99:43:01:7f:5d:da:70:e0:cf:04:8a:dd:9e:49:40:
93:d2:1e:e5:6e:de:0d:15:18:74:a0:10:70:68:1b:
3e:fc:3d:41:da:80:23:86:aa:a9:b5:26:98:87:c4:
ab:54:6b:48:f7:7e:9d:78:f8:19:12:72:af:8f:f3:
e0:71:c4:44:18:22:ab:a4:0f:1c:72:3c:55:48:72:
c9:5b:4f:40:79:14:65:a3:29:bf:ad:06:52:79:82:
c8:e5:b2:3d:d9:53:42:fa:e2:ab:97:80:15:4d:04:
a0:0e:7b:aa:ad:c6:89:98:c5:02:f7:d4:43:4d:eb:
3f:d4:dd:cd:5d:e1:c4:1c:f6:b5:eb:d8:49:8d:c9:
1e:0c:67:56:d9:c8:78:0f:36:2b:90:d2:29:cb:c3:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:62:C7:B8:9B:63:87:34:38:31:DA:0C:D1:CA:25:73:8E:E5:2A:16
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8eb63ceb-3350-490c-9a1a-85b2563a8947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d071:4000::/40
Signature Algorithm: sha256WithRSAEncryption
99:63:47:73:70:69:67:1a:55:33:b4:78:a6:2d:03:52:e0:1c:
fb:12:5b:e7:10:3c:97:c9:1a:6b:ed:ac:55:97:da:55:d6:7c:
d8:e1:ab:68:57:07:21:7f:43:16:d7:30:b3:1a:7b:e4:74:6c:
93:ee:62:1b:7e:d6:a5:9d:d9:f4:27:1d:b3:ee:ca:28:44:6d:
f8:79:1b:1e:43:65:5c:c5:60:22:92:75:c7:df:f0:34:16:e9:
5c:52:11:c8:2a:b1:69:fc:6a:ce:06:46:78:61:1d:67:62:0d:
66:60:d0:f8:2e:73:4d:fe:ab:95:a1:5f:66:31:72:af:0c:07:
82:3e:86:e6:77:cc:49:ec:db:7d:93:ea:89:47:e2:24:d5:62:
26:63:8e:8b:17:d6:40:a9:b1:8d:c7:5b:f0:46:86:9b:d7:bd:
24:41:2d:d1:fe:6f:ab:4b:67:a9:92:21:31:b5:08:1a:26:11:
e4:e8:f7:02:66:7f:64:43:97:bc:fe:96:89:99:fe:1b:d0:6b:
23:b2:49:4b:68:63:de:2a:6a:fe:00:4a:f4:62:75:47:75:c1:
ec:fc:b7:1c:54:b6:26:6c:3e:b8:43:d0:36:e0:d0:5c:0d:aa:
3a:6b:1c:63:24:d2:43:63:7d:1d:4b:c5:d4:f4:9f:5a:ee:c5:
01:97:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:10 2025 by rpki-client