Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a262add8-250a-40a5-8860-3eaca9d7cd0b.roa
File: a262add8-250a-40a5-8860-3eaca9d7cd0b.roa (raw, json)
Hash identifier: +ZH228GEHDvM0woFf+ieqKt9vRVG35cg3RWdAUpc1iU=
Subject key identifier: 53:AF:22:57:9A:59:81:52:DF:A6:7C:97:58:1B:00:BD:28:40:4B:B7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0CCF7EE9F7D4F5D2F9D2E8BB9CDEEDAAC8325E0A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a262add8-250a-40a5-8860-3eaca9d7cd0b.roa
Signing time: Thu 17 Apr 2025 20:36:54 +0000
ROA not before: Thu 17 Apr 2025 20:36:54 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cf:7e:e9:f7:d4:f5:d2:f9:d2:e8:bb:9c:de:ed:aa:c8:32:5e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 20:36:54 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=6ad9f0669d00785f40daf42ec1e43ebf0f57dd5e8e116eabb7fac538cab4d58b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:48:1a:b6:c7:8e:e5:ee:32:c3:4a:ef:7b:70:
66:23:d3:b8:2d:f7:29:f3:78:bd:3b:d9:bf:71:73:
84:5b:75:55:03:1e:1c:97:a8:95:11:e1:27:30:a2:
86:6d:af:49:01:75:87:b7:13:72:2b:64:73:2e:0f:
39:24:36:76:84:5d:88:20:72:77:b0:12:5d:ac:ce:
e5:ab:d5:c9:8f:5d:1a:1e:78:a7:72:6e:bc:17:5b:
de:36:4c:34:96:b7:0c:fa:2a:a2:a6:32:cc:22:37:
50:04:9b:21:f9:49:89:17:01:85:1d:e8:49:41:77:
8d:03:00:05:7b:df:88:8d:49:0c:ec:2b:52:08:13:
6c:36:93:96:60:c8:58:4e:9d:93:ab:80:ab:56:79:
8f:cc:39:96:91:48:e6:7e:29:88:7b:55:a1:fc:3d:
c3:61:df:58:28:7a:4a:b0:5a:ca:e5:28:24:33:6c:
a8:57:d5:c0:fd:9e:81:20:e6:08:26:74:84:33:40:
00:8a:36:b7:fc:4d:3a:0d:40:9f:e1:19:3c:64:31:
80:3d:1d:4c:cf:e8:cf:4a:16:19:a6:9b:dc:1c:18:
e7:a3:6e:9e:60:d5:4a:37:42:1e:53:51:13:46:ea:
fb:a5:c0:90:1f:86:91:32:66:2d:39:5f:10:4b:c6:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:22:57:9A:59:81:52:DF:A6:7C:97:58:1B:00:BD:28:40:4B:B7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a262add8-250a-40a5-8860-3eaca9d7cd0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:1000::/40
Signature Algorithm: sha256WithRSAEncryption
6b:0b:a8:b6:12:2e:c2:9b:d4:f8:dc:c3:c9:02:f4:c7:f2:93:
56:89:9f:35:ae:92:6c:c2:e2:d8:55:9c:5d:d0:ec:56:9d:ec:
25:cf:bc:64:cb:c4:a5:07:4f:b5:49:d7:33:79:82:c1:4b:cb:
b0:f9:3d:2a:42:d2:21:50:52:40:86:73:5f:6d:d2:b9:db:38:
59:e7:73:c1:e7:fd:2e:74:83:7e:11:eb:a7:5f:e6:9c:86:5e:
ca:87:69:3b:9a:80:ed:75:1c:eb:65:13:89:8a:f7:70:5d:40:
96:dc:5c:5b:99:f4:c5:65:06:4a:fd:7b:53:91:73:f5:0e:0b:
80:b8:4a:9a:fb:56:76:da:d2:bd:58:56:d2:30:1d:9f:5e:d7:
c3:4f:bd:54:46:e2:d0:47:2d:be:eb:a3:23:76:75:02:c5:b6:
a0:5f:46:29:19:55:51:58:d3:a1:56:84:15:b8:a3:99:1d:ae:
ca:df:93:b7:5c:e4:79:37:b8:3f:52:f0:99:fa:b4:5b:5c:b6:
92:b6:25:6a:b5:4d:be:de:70:72:dc:27:cb:f8:a7:28:34:e2:
74:e3:1f:e8:8c:31:76:01:9d:99:ab:cd:48:fb:a0:29:28:51:
0c:eb:4b:9f:93:a2:b4:aa:ea:32:69:ce:3d:5b:44:9a:e9:2e:
2a:f3:44:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:36 2025 by rpki-client