Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa
File: 9ff479c7-35c9-43ea-ab99-712ce7537beb.roa (raw, json)
Hash identifier: MKEBuL2lyBvsk7IrVajHoF+VSv1MY6a8y49yK8DA45g=
Subject key identifier: C9:3F:61:7C:D9:ED:38:1D:F8:9A:32:4F:53:91:3F:B8:5D:27:F6:DB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 309BC96A7F9F6F4887B3ACF84FB7C57640DA9FDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa
Signing time: Tue 15 Apr 2025 15:00:16 +0000
ROA not before: Tue 15 Apr 2025 15:00:16 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d030:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9b:c9:6a:7f:9f:6f:48:87:b3:ac:f8:4f:b7:c5:76:40:da:9f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 15 15:00:16 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=7533fb59836b2d1aadf0bba299bc5d358cc6b481cbefc12eeebe00430d3acdda, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:28:79:48:4a:db:75:82:53:88:5b:d8:69:
80:33:23:ad:9b:14:23:4f:67:ce:da:48:c3:d8:d9:
fe:f7:31:8c:25:41:d6:60:e3:48:b1:1d:18:e9:1c:
93:57:fc:e5:5b:6f:9e:b4:5a:a4:d9:c8:64:8d:4f:
7e:37:3c:28:ab:23:1f:0e:81:d1:6a:4d:d9:27:ae:
1a:89:cc:70:5e:21:04:85:07:a8:e6:9f:21:20:87:
f3:08:ae:96:93:1d:d2:65:22:57:a8:8a:6f:a7:a1:
f3:09:f7:63:ac:fc:be:17:ad:c8:51:74:ff:32:43:
27:56:49:8a:b4:1d:e6:3e:71:e8:68:88:c0:0f:7b:
dd:fd:ed:74:c1:75:23:7e:83:d7:f8:3a:d0:31:b9:
4c:10:11:74:12:b3:57:30:18:64:09:33:22:80:1d:
7a:39:03:63:e6:09:72:98:58:d9:32:a6:f5:db:2a:
26:47:24:a2:ec:db:60:c1:80:b3:ff:6a:04:53:64:
a6:67:4a:ca:b0:31:7f:49:a6:33:b1:5d:54:3b:d1:
21:b3:76:1c:b0:81:b7:16:50:7b:5c:63:60:54:78:
89:ec:53:eb:88:bc:1b:30:32:27:a0:83:78:7b:5d:
17:71:2b:49:6d:0c:4a:76:0c:61:2e:fc:c9:90:56:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:61:7C:D9:ED:38:1D:F8:9A:32:4F:53:91:3F:B8:5D:27:F6:DB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9ff479c7-35c9-43ea-ab99-712ce7537beb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:2000::/40
Signature Algorithm: sha256WithRSAEncryption
c1:bc:1b:64:56:88:ad:49:5d:d5:ac:1d:84:2e:86:22:c3:e8:
3f:75:4f:83:b9:16:c3:ea:65:7a:0c:28:3e:90:c7:44:bf:94:
87:b2:b7:e0:85:bf:16:04:54:77:9b:4d:84:8c:6f:f7:d9:b3:
15:7e:80:9a:e3:1f:b8:d5:9f:39:b6:2d:73:cc:ac:dd:7b:c6:
59:82:ad:5d:48:36:1e:7b:f0:72:bb:ab:63:e8:e2:5d:b5:d5:
79:f8:7f:51:88:30:b5:7e:c6:cb:02:2f:b1:fb:6f:68:89:bd:
dc:f2:c2:dd:bf:d9:64:fd:3e:77:6d:c2:bd:46:da:53:34:1d:
b6:ac:a3:67:07:6f:ef:5b:12:c6:15:20:c0:3e:2d:9d:c8:56:
fc:4d:24:a9:f5:cc:64:d7:c5:72:5b:06:90:4a:9c:b4:4f:3b:
18:2e:5f:b8:22:22:21:2a:97:2c:43:fe:36:38:a9:d0:8e:35:
fb:7b:63:f7:44:23:81:f4:ba:aa:c6:37:41:7c:5c:8f:99:41:
91:db:17:9f:f8:ae:3d:3a:00:5c:6b:5b:70:3c:4d:14:33:6e:
75:5a:ec:a2:cc:7a:2c:1a:7e:3b:ac:db:b1:f3:23:66:82:36:
ac:9d:c7:28:3f:4c:94:d8:57:de:f2:17:20:a5:9d:e4:bf:c1:
a0:2f:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:34 2025 by rpki-client