Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
File: 9ee0a48b-ba88-465e-9e42-d0732351f46e.roa (raw, json)
Hash identifier: vFSe1lCmtr31dg4yRR7mve72Qg//NOmTSNpqelPkKLk=
Subject key identifier: 3D:DC:0B:CC:01:A9:17:0B:24:56:B1:19:64:6B:66:32:9E:F3:72:96
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47951E28759A0B4D4736584A9CCBCBBD59927D5B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
Signing time: Fri 23 May 2025 00:50:08 +0000
ROA not before: Fri 23 May 2025 00:50:08 +0000
ROA not after: Fri 27 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:95:1e:28:75:9a:0b:4d:47:36:58:4a:9c:cb:cb:bd:59:92:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 23 00:50:08 2025 GMT
Not After : Jun 27 23:59:59 2025 GMT
Subject: serialNumber=3cf11ff7ee8ee7e4552b43d389bc57a2b6447964e3241f55d71efe01e7d94118, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:26:2e:6c:b9:ba:9b:37:52:f7:25:64:83:
ce:01:72:3d:c0:cd:a5:af:f0:c2:16:b7:5d:a8:50:
0d:8a:53:e5:16:7f:84:b7:d9:e9:09:11:69:e8:ba:
20:20:49:6e:fd:ba:fc:0b:10:9d:8e:dd:e0:75:5e:
a5:fd:31:a9:2a:f8:b5:1f:88:28:a4:ac:5f:e5:e3:
90:55:d8:9c:cf:7c:f7:35:4e:a9:4a:10:64:ab:4a:
9a:da:ab:c5:3a:40:f2:97:2f:20:1e:b2:61:74:28:
ac:bf:91:46:1e:cf:3e:e9:36:99:54:bf:c2:a4:69:
7a:c9:59:52:bd:7d:b8:a7:af:bb:a1:71:d4:8f:1f:
f3:52:b5:8e:fd:7c:fc:12:10:3f:48:2d:30:b2:d5:
d3:41:bd:ef:8b:c0:7d:c9:90:fe:54:00:71:f1:1b:
98:52:47:f9:b4:81:0b:3c:b2:68:c6:9a:db:96:dc:
5b:6d:40:eb:02:e2:bd:a3:00:83:18:0d:7f:b1:a1:
92:db:e6:88:73:1f:79:b0:b4:00:7e:ec:67:3a:62:
a9:2c:f4:6b:f9:00:94:73:39:fe:40:12:2f:42:15:
6f:d2:00:39:4d:1c:5d:97:6b:c7:15:ce:79:e8:f5:
fb:b2:fb:57:30:47:18:61:6b:f2:dd:5b:e7:07:1f:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:0B:CC:01:A9:17:0B:24:56:B1:19:64:6B:66:32:9E:F3:72:96
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ee0a48b-ba88-465e-9e42-d0732351f46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.112.0/20
Signature Algorithm: sha256WithRSAEncryption
40:40:b3:e7:f6:10:5b:b0:f1:8f:e8:ed:3f:e7:8a:85:58:96:
14:80:57:15:19:67:ef:e5:6a:32:6c:53:fd:f1:3d:2e:d1:b3:
a2:76:18:b7:8f:ee:07:35:ff:f8:5c:98:12:55:b7:7a:20:dc:
88:48:d7:65:07:b0:d8:a9:39:a8:71:12:29:ea:72:7b:7f:bd:
68:91:4d:2b:22:18:ff:1b:a1:1f:04:1b:b6:3b:af:6f:6a:e9:
11:b2:b1:cf:ab:82:50:9b:a3:db:ea:1a:6e:d8:45:bc:3e:64:
7b:88:4a:a6:f1:27:cc:0c:22:98:13:2f:74:c4:b8:7a:d3:ca:
14:28:95:e6:2a:0e:bf:37:54:75:01:74:90:80:62:03:0e:12:
08:9a:ef:3b:a8:92:d8:ca:68:75:ba:c5:f8:15:d1:12:dc:76:
63:64:fc:de:a6:57:c8:e6:1b:31:a1:5d:2e:44:83:8b:4f:4b:
f2:72:2c:1b:e3:6c:fd:22:df:19:18:f4:93:24:4a:7f:02:f0:
17:81:d7:60:11:a5:26:f9:5f:e9:c8:a9:44:b8:2f:78:9f:c0:
69:d8:80:6b:f5:bb:e1:23:5f:b5:33:d5:87:99:a8:1e:62:db:
fa:8a:12:79:c8:4e:b0:5c:b4:e6:df:30:77:66:25:51:2e:50:
81:13:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:51:43 2025 by rpki-client