Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
File: a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa (raw, json)
Hash identifier: T4wdkP6RV9dBIQeRSg1ZlDDWugV7LqUI98ltLfSklmI=
Subject key identifier: 02:61:2C:9A:5A:D0:AF:96:D5:1D:33:4D:ED:9E:3A:10:A8:B9:F6:B3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2758EE394DBCF6CB80D6BB2845C79E91A7672A63
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
Signing time: Fri 25 Apr 2025 19:50:11 +0000
ROA not before: Fri 25 Apr 2025 19:50:11 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:58:ee:39:4d:bc:f6:cb:80:d6:bb:28:45:c7:9e:91:a7:67:2a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:50:11 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=cc1304445c0988945c70a3aa83139c56ceaeace9363c0658d30ec40a3a0505b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:9a:f1:6d:26:5e:91:45:05:95:36:98:ee:
79:bf:b5:0f:97:96:ed:4f:67:83:92:f7:60:21:ce:
d2:30:9f:33:ec:b5:73:04:f1:18:18:23:37:b4:cd:
e9:03:67:4f:f8:f7:93:92:bc:53:ae:8c:c4:08:aa:
ef:7b:d1:db:53:b9:05:60:8c:0f:ec:49:1e:1c:26:
08:1a:c3:43:44:be:92:df:52:7c:83:f4:18:13:cd:
16:03:52:93:b3:7e:35:f3:7c:4c:03:2b:d7:cb:d0:
24:0a:a4:b3:4f:26:92:72:9a:ec:77:86:16:31:1a:
c8:b1:c9:cd:48:bf:61:77:e1:8f:a1:2c:e4:38:fb:
54:31:cc:ea:6e:a3:af:be:0c:f4:0d:e0:c7:20:b3:
8c:29:59:ca:da:c5:31:61:19:be:81:2a:c8:26:16:
3a:61:15:c3:3e:02:24:ff:70:60:2b:4e:cf:f7:cc:
6b:56:52:13:79:1f:af:d5:49:82:b6:ac:94:d9:7c:
ab:f5:df:e4:2b:42:05:ce:e6:3a:ca:09:fe:4e:58:
15:f7:c3:ea:6f:4b:6d:d7:d6:cc:be:a5:76:a9:78:
98:e1:8c:60:71:5c:2f:6c:02:f5:0a:f7:29:fa:af:
d3:95:5b:87:64:e2:24:87:8e:b4:5e:23:e7:ec:a8:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:2C:9A:5A:D0:AF:96:D5:1D:33:4D:ED:9E:3A:10:A8:B9:F6:B3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a2c4c28c-0df9-40d4-bf4d-926104b691f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:4000::/40
Signature Algorithm: sha256WithRSAEncryption
33:37:53:a7:b9:ae:8a:1e:14:16:31:ca:fc:67:3f:07:76:71:
66:48:b6:9c:d5:c4:10:3b:95:a7:a1:7d:93:74:60:73:9c:7b:
49:6a:5b:3d:d5:c1:e6:b4:f5:5a:41:ac:e6:e4:65:e0:6c:cd:
03:5f:d6:32:01:75:a8:74:77:a4:ef:49:d4:90:3c:7a:6d:61:
28:6d:53:1e:a9:2b:d2:fe:e5:a6:b7:39:96:21:d3:45:db:1d:
a8:d4:77:fe:6d:c9:4f:db:e5:7f:bf:14:43:8a:e5:ca:07:64:
61:a5:01:53:b0:22:17:db:64:1b:0a:dc:b4:70:15:1d:d1:40:
6c:36:f9:ad:a5:b0:25:43:a8:be:b0:a5:65:b3:b2:cf:2c:ab:
e4:78:58:1e:7a:78:84:26:76:a6:67:59:f2:b7:23:77:c1:14:
7b:7d:94:a1:a7:cb:06:ba:59:1a:c0:62:bb:ef:4c:10:34:71:
25:56:56:ff:64:6b:b8:3e:fe:79:69:f0:89:82:ae:30:3d:93:
58:97:fa:85:86:0a:47:81:97:72:e4:2a:05:76:3f:46:e6:1a:
d2:6b:8b:06:a7:89:ac:9e:c7:38:c7:e3:c5:f5:59:17:02:ec:
c1:13:c7:94:e7:0b:95:45:d3:1a:4b:4a:59:42:f9:04:9b:fa:
ed:09:2e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:37 2025 by rpki-client