Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
File: ac551e9a-50f2-4eff-9247-e71429bd9c80.roa (raw, json)
Hash identifier: 3bcSCV4xvgVRss/PGZHTRfSDhngj9fvbaerjDS+2Rzw=
Subject key identifier: 8B:E8:42:2A:DB:50:AF:73:85:3D:AB:0B:38:72:AF:FB:43:BD:16:C0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5BBD437879D0C88CB85291E6FA7532DE7AA0F579
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
Signing time: Fri 25 Apr 2025 18:51:27 +0000
ROA not before: Fri 25 Apr 2025 18:51:27 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:b080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bd:43:78:79:d0:c8:8c:b8:52:91:e6:fa:75:32:de:7a:a0:f5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:51:27 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=4cb78045ca6e93ed615576656b969ff792ca46ed394d809e23c2c6b3acd8b760, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:37:71:4c:e8:bd:8e:87:01:23:8a:dd:da:9d:
02:b0:3a:a7:54:8b:38:51:16:66:4e:db:79:1e:0b:
55:6d:c0:a5:96:ff:97:09:e5:c3:e9:36:ab:6d:b4:
08:9a:c6:82:cd:a0:54:ee:a4:40:43:01:ef:1c:47:
67:6f:71:ca:83:17:9f:5d:46:15:58:d7:2a:a2:0a:
c6:a6:cc:97:99:bf:e1:79:62:d9:a1:87:42:37:9b:
24:04:03:91:e5:7c:92:91:48:0b:56:c3:70:d4:a4:
b7:1d:0c:e3:f7:a7:d8:eb:d8:c0:35:19:e1:58:23:
5f:0f:f5:30:bf:61:06:e5:a9:c8:ce:71:18:72:a7:
6d:fb:8c:2f:9a:6a:b4:cc:23:f5:ee:43:7c:b6:42:
dc:d6:98:31:87:8b:4c:92:5a:1e:d1:d9:9d:b8:6e:
79:8c:2f:7b:21:fb:ae:4c:db:7e:90:69:95:8e:b9:
8c:e5:01:d7:bd:94:f6:98:3d:0f:5c:f2:95:48:0b:
f0:ba:4f:ad:2f:e2:71:ad:4e:2a:a7:7a:7d:c5:be:
66:12:ff:a2:a5:9d:d1:86:dc:1b:0a:d9:df:0b:ea:
9c:06:e8:ae:94:d3:d2:fb:fb:65:49:83:22:31:c6:
15:42:b3:26:9c:b2:d3:e5:23:76:f8:8b:e0:9b:c3:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E8:42:2A:DB:50:AF:73:85:3D:AB:0B:38:72:AF:FB:43:BD:16:C0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ac551e9a-50f2-4eff-9247-e71429bd9c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:b080::/48
Signature Algorithm: sha256WithRSAEncryption
92:fe:51:94:cc:12:69:ea:81:45:00:10:ec:eb:99:6b:b7:d9:
3f:b7:1a:1f:85:70:d1:48:b9:5b:82:04:b2:6c:bd:ae:a2:6b:
e0:29:30:43:3e:44:a7:60:dc:41:26:43:19:2b:35:17:e2:d0:
47:1e:87:74:01:00:5a:cb:3f:8c:5d:64:a3:9a:e5:ff:23:cf:
9a:ac:0e:02:07:9f:e3:2d:70:b5:bb:d2:31:26:99:3f:e6:67:
75:35:09:d1:1c:8f:3d:22:8d:f6:09:98:e0:ca:ad:78:e6:c0:
0a:e8:29:e0:c9:28:b8:5f:30:e0:97:c5:70:86:be:ca:de:aa:
76:97:12:d3:28:e7:5d:db:fd:ba:e1:c7:05:83:26:09:d2:c3:
d3:48:5b:4f:30:fd:dd:32:79:72:f8:95:4d:dc:7e:88:20:ca:
8a:34:a7:e1:56:67:1c:85:57:1a:8d:7b:78:cc:9f:49:fa:fb:
24:f0:5c:4f:d4:2a:22:14:7c:b1:3c:b1:6f:b1:90:93:d8:f3:
00:ef:e1:fb:bb:bf:39:04:2e:3c:fc:45:bd:a0:46:b5:d5:d0:
c5:d8:e9:7b:3c:c8:10:26:14:c8:48:3e:7c:09:02:15:90:52:
93:51:02:31:3a:59:60:df:02:05:11:63:06:4c:a9:ce:48:92:
16:1d:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:13 2025 by rpki-client