Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
File: 9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa (raw, json)
Hash identifier: s6oXroezBcgnN1vSExZHbIZQLAdIsv2+iRLTDvMDdRs=
Subject key identifier: F4:B2:0E:C3:C4:19:87:57:D9:BB:32:56:D5:F6:29:CB:55:CC:29:D1
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F52C33D6C27AF8AAAC6C4C0E68D45B2510098D2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
Signing time: Fri 25 Apr 2025 19:41:17 +0000
ROA not before: Fri 25 Apr 2025 19:41:17 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:52:c3:3d:6c:27:af:8a:aa:c6:c4:c0:e6:8d:45:b2:51:00:98:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:41:17 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=67d86a248b7c59878b77ff8b7691ffdcefaf54f71b12c29c490f8b6b303f0790, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:fb:bb:5f:3d:f1:d9:ed:2a:71:7a:3f:41:
7e:e3:76:98:cd:57:3c:a7:24:49:24:aa:ba:23:ab:
cc:9b:65:7f:7d:6d:32:ef:72:4d:5f:39:cf:c8:04:
e7:29:a1:5f:cc:a6:a2:17:22:d2:87:1f:86:44:a0:
82:97:40:0c:05:89:65:cf:b1:31:ff:44:3a:59:1d:
0b:e4:31:40:51:23:73:9e:69:fa:8b:62:99:b6:11:
12:56:fa:ef:e2:2f:5f:88:67:9a:40:ec:cf:0f:37:
2e:e2:2c:92:9e:81:00:cd:ec:b9:36:a5:77:b7:03:
7e:7d:fe:99:d8:09:8f:c1:1c:41:93:09:09:10:57:
d6:8f:69:5f:1e:d1:5c:1f:0b:33:00:67:5a:7f:d1:
f5:9d:a5:18:88:19:9e:93:25:0d:22:69:ea:26:c3:
d0:b8:6c:6c:2c:fe:6f:07:b9:b1:5a:4d:3f:e6:61:
f2:fa:25:80:08:32:35:a4:bf:64:60:98:92:54:35:
0a:94:85:7a:c9:c3:cd:fc:bf:bf:06:63:7d:b1:7a:
2b:f9:79:25:3c:be:cb:52:aa:fc:f5:d5:e5:83:45:
04:72:8f:c5:91:d5:1d:8e:cd:f5:8a:af:2f:32:6c:
b9:60:0c:28:82:c4:25:87:a4:9c:0c:e5:73:7d:8d:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B2:0E:C3:C4:19:87:57:D9:BB:32:56:D5:F6:29:CB:55:CC:29:D1
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a080::/46
Signature Algorithm: sha256WithRSAEncryption
b2:02:50:a1:86:53:ec:f0:6e:68:08:95:02:1c:ce:0f:76:3d:
c6:80:1d:0c:23:12:a0:c7:4e:8b:bc:33:29:38:60:32:61:6d:
05:55:d6:a0:6c:c5:70:d3:28:2d:eb:6d:0b:a0:24:d5:0b:c0:
f1:ec:5c:8c:42:ab:98:c9:29:66:0e:13:42:74:17:08:e7:3c:
f5:9a:8b:54:bd:06:0b:e4:33:bc:94:a9:74:5c:97:cd:4a:d7:
35:d5:8d:4f:59:8e:39:05:2f:f8:73:d0:b2:3b:d0:e3:47:81:
61:e0:ea:68:98:ed:04:33:4c:5e:8f:32:ee:58:b6:93:de:ed:
e0:1b:39:6b:a9:20:19:41:b3:2c:95:1c:c7:df:81:dd:e3:af:
4d:a2:7d:95:de:e4:58:2c:01:d8:f2:d4:b3:6a:e5:aa:94:47:
4f:cd:c9:70:48:d7:e7:6b:62:bb:02:d6:25:3e:c4:57:f3:1b:
8b:b9:19:7c:da:4c:da:2b:38:2f:af:69:8a:56:9f:5b:23:49:
ae:49:2d:59:34:33:cd:64:dc:aa:10:fd:b9:8d:e1:3b:ea:7e:
12:51:ba:f1:6a:0a:34:67:a3:e6:9a:5b:d1:7a:bb:41:f3:3e:
d1:63:b0:6d:31:60:cb:17:fe:6b:03:2d:fa:5e:d4:06:36:25:
f0:9a:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:18 2025 by rpki-client