Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a64e8df1-4906-48de-bb69-c49945f68500.roa
File: a64e8df1-4906-48de-bb69-c49945f68500.roa (raw, json)
Hash identifier: Rk7acxWEtviN/Jn13ZFKmNe4hrJagqAgb0MqK2gRkms=
Subject key identifier: E5:F0:EB:A3:6E:72:23:09:33:88:9F:9D:8B:72:F7:D9:D3:DA:D0:65
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11E2C33A0E3AAC1FDDE78016477CC7386DAC621D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a64e8df1-4906-48de-bb69-c49945f68500.roa
Signing time: Fri 25 Apr 2025 18:20:54 +0000
ROA not before: Fri 25 Apr 2025 18:20:54 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:e2:c3:3a:0e:3a:ac:1f:dd:e7:80:16:47:7c:c7:38:6d:ac:62:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:20:54 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=45ea8e71aea34a278b07889e3f906d98d76635fe751b838a7756b69abe7448e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:3d:97:56:64:1c:bf:66:21:de:a4:8d:ca:
01:e5:da:d4:65:9d:4f:58:cd:5a:63:9e:8f:23:0a:
c5:29:8b:16:34:3f:ac:08:59:61:c3:38:a7:36:2b:
56:f2:5a:59:a8:3c:00:54:8b:ff:17:f2:6e:8b:9e:
da:de:4e:82:a2:95:3f:0f:82:83:2a:0f:a6:f5:85:
b0:3e:7d:b4:48:31:dc:53:ae:3a:1d:1b:df:70:a0:
94:61:90:46:79:ae:99:ae:31:4f:8b:79:aa:81:8c:
f0:c6:34:ee:4d:00:31:bf:cf:9a:5f:8c:2d:30:69:
7c:55:90:f3:92:29:a5:9f:e0:23:54:b3:e4:e0:14:
bf:d1:91:53:e2:2e:b3:93:ac:de:d4:a2:b4:ba:df:
b1:c0:16:8d:30:29:92:2a:f3:1d:55:1b:fb:1e:15:
f3:37:67:9c:ad:c7:e8:bc:a9:ea:e4:57:ff:db:fa:
bf:84:68:4a:f0:be:6f:6f:71:b2:2c:d0:37:9a:0c:
48:54:18:fd:33:ad:64:7a:4c:a7:5f:12:cf:da:25:
9c:df:b8:91:20:cd:9d:1d:b6:3d:5c:c9:e5:28:8b:
5e:6b:37:59:c1:5f:16:8e:33:d0:3b:d0:de:fd:43:
1a:8d:22:44:27:5a:df:f2:b4:a9:3a:eb:70:69:78:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F0:EB:A3:6E:72:23:09:33:88:9F:9D:8B:72:F7:D9:D3:DA:D0:65
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a64e8df1-4906-48de-bb69-c49945f68500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6080::/48
Signature Algorithm: sha256WithRSAEncryption
3a:19:3e:03:f0:66:db:df:ac:4d:8a:7d:c2:f9:d2:8b:21:f7:
e9:62:9c:2d:00:04:5a:99:5b:db:8a:dc:86:47:d4:ca:a4:c0:
ad:62:d3:e4:66:11:27:7d:05:5a:1d:d4:05:34:fb:9f:26:88:
cc:73:79:68:dd:b3:c9:ab:81:f8:96:be:12:5d:b8:5b:20:c5:
ad:fc:4b:5a:ca:ef:cd:b6:d9:c6:ae:d0:5e:aa:13:9a:d6:91:
f3:d6:92:0f:03:d0:12:a9:99:b0:ac:2b:5e:f4:bc:61:6b:3e:
8d:fb:ad:89:65:26:cc:ca:55:85:d3:60:82:74:d4:cf:2a:b6:
09:d5:91:ce:ad:f4:10:93:06:b2:2a:15:b7:d5:90:70:d7:5c:
54:83:10:a7:38:c6:f8:e8:f1:36:c7:bd:1e:0b:db:76:3f:56:
c6:2c:32:67:46:9f:5d:7e:40:83:fc:ed:8e:c3:5c:57:9f:a5:
5f:25:7a:9b:5e:24:42:44:7b:c0:88:33:10:0d:b1:80:bb:75:
65:76:77:42:d8:1d:fd:ee:aa:68:66:70:e6:cc:c4:9b:55:88:
81:c3:c1:4f:5d:b3:48:6a:b9:2a:02:76:4c:f5:e7:27:b2:7e:
3e:1d:65:43:e9:9f:b4:fe:64:1b:05:36:ff:b3:5b:ba:bc:4e:
f2:50:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:33 2025 by rpki-client