Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
File: 944adc0b-c1b8-474a-8753-f9751b6122ff.roa (raw, json)
Hash identifier: icYGF8PZmxsAQ+MHjUA+VDqQXpBSzQL/tQ8ZM2QqfFI=
Subject key identifier: F0:C0:D7:64:1D:52:34:8A:8C:46:7A:08:76:0A:E4:C7:36:C1:81:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 57D093E7E74E1105B453525246073C8A1A76D4B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
Signing time: Fri 25 Apr 2025 19:21:06 +0000
ROA not before: Fri 25 Apr 2025 19:21:06 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:8020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d0:93:e7:e7:4e:11:05:b4:53:52:52:46:07:3c:8a:1a:76:d4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:21:06 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=190ed3132a9f4db51c35e67f002e423b5ab9a60763bf78579d5e22f23f3fb300, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7b:6f:0e:5a:40:f3:45:56:d4:72:41:86:46:
10:9c:ba:bd:04:6b:52:f1:97:34:e2:d3:f8:30:c9:
8b:5a:a2:59:25:ca:84:f5:94:fe:a9:54:81:5a:cf:
06:b5:31:cf:a4:4b:5a:1d:94:f2:a4:32:09:6f:c2:
8b:cc:43:f6:b9:ae:6e:3b:08:55:87:e5:ae:90:d7:
08:71:06:58:de:25:1e:b0:94:6e:e0:3f:16:8b:71:
37:13:21:33:b5:82:1c:84:3d:f3:08:40:42:a8:14:
32:b9:d6:7a:af:05:9f:ca:47:97:39:02:af:b9:b0:
b8:1d:7e:23:63:e2:61:62:13:35:03:8a:cf:70:ea:
48:84:f3:5c:ef:83:7d:3d:36:9a:87:e1:4c:77:02:
43:b2:78:25:4a:7d:3d:62:00:e7:76:56:1c:6e:37:
0e:08:99:0a:c5:80:f7:2f:6b:1c:d8:3d:d8:1e:66:
6d:f9:1b:e5:33:20:5c:54:ff:6f:4a:c0:f7:0b:9c:
95:08:80:83:47:17:41:0e:c8:15:17:95:e1:7c:17:
85:6d:38:4f:51:2b:af:02:0c:89:d6:18:a3:db:07:
10:58:a9:4e:6e:3f:da:ee:18:a4:91:14:a5:6f:14:
67:61:33:4d:65:39:a0:4c:91:62:85:a8:42:3c:90:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:D7:64:1D:52:34:8A:8C:46:7A:08:76:0A:E4:C7:36:C1:81:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/944adc0b-c1b8-474a-8753-f9751b6122ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:8020::/46
Signature Algorithm: sha256WithRSAEncryption
99:e3:6f:03:11:f6:c9:70:7d:fa:48:7e:cf:f9:f4:5c:dc:c9:
b6:c4:7f:32:24:5c:1f:c8:4e:3d:de:fb:b7:c9:af:95:ba:6f:
be:63:16:3a:de:2b:0e:31:a9:94:71:60:93:71:c3:67:16:43:
6e:c0:56:0e:2e:54:b5:ba:e6:5d:f3:5e:02:36:db:d7:99:91:
c8:43:66:04:8e:7d:28:b5:ea:62:c5:d2:aa:b9:50:25:f4:40:
df:91:8f:37:e2:99:14:c4:7c:dd:62:93:df:ae:01:2b:ec:02:
ba:43:fe:80:19:1c:86:aa:ef:a9:3e:04:ac:d6:98:2e:0c:ea:
55:85:c1:c4:6f:7c:72:58:31:a4:19:48:11:99:87:13:8d:0a:
70:68:42:27:76:34:79:20:ed:33:02:13:ad:d3:f7:82:49:ac:
49:b1:e9:de:64:12:7d:f2:75:c2:e6:83:94:61:e5:2b:e0:35:
a2:8d:6a:8c:b2:a6:b6:79:7e:76:cd:c7:17:55:6e:b8:2d:45:
8f:99:9b:17:a7:41:20:b4:d3:6b:89:9b:26:1e:44:bf:d8:43:
cb:23:c7:5d:d6:b3:59:81:6f:5e:55:6e:a6:e2:9e:43:15:00:
a8:f5:15:6f:b7:7c:5f:ca:36:52:de:2a:35:f9:df:c7:56:0b:
4a:7b:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:31 2025 by rpki-client