Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
File: b2048b1c-363b-4b59-9d56-dc72187194a3.roa (raw, json)
Hash identifier: UP6t9XwcOYA/CPuZ94cGEJQuaEf+sYPekIyHGAMWtOc=
Subject key identifier: 77:A8:AA:4C:7B:30:85:F1:A2:49:46:9E:5C:1A:57:99:52:C6:8F:49
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 510D74F74B58A7546CFDBBF680A9D6AB3F964212
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
Signing time: Tue 15 Apr 2025 15:01:31 +0000
ROA not before: Tue 15 Apr 2025 15:01:31 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 176.34.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:0d:74:f7:4b:58:a7:54:6c:fd:bb:f6:80:a9:d6:ab:3f:96:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 15 15:01:31 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=29e6799bf96a0dee06d8f0ffc9e33f9528bb453502699a8bfcbd2fc8f5540d42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:8d:a9:a9:b8:76:6c:16:32:56:25:a1:1f:
dc:3f:54:e3:53:07:27:64:80:0b:93:8f:23:fb:65:
04:90:3f:5a:4b:5f:47:3a:f2:d6:14:69:ff:e8:a7:
22:ef:95:ce:3b:b7:aa:5f:c3:b8:42:8e:e6:27:ba:
9b:35:2e:da:be:1c:1f:72:ec:b4:df:7b:b1:48:6a:
88:e1:c2:9a:7e:c1:04:69:42:53:9f:a0:07:4a:99:
83:f2:67:f0:cf:bc:b2:e0:03:4f:03:f8:5e:b9:5d:
88:96:f3:ad:40:5b:3a:9f:14:47:f7:87:19:32:44:
c1:ca:e3:38:7c:47:85:19:ee:50:5f:52:68:da:b6:
97:c6:bb:cc:c7:c4:87:b6:74:0d:08:a9:a5:49:69:
82:db:b2:45:0f:b9:16:b0:c6:a4:4c:07:b8:02:7f:
9c:ea:17:cb:d0:5f:f9:be:e6:21:37:9f:9f:d1:5f:
e4:1c:89:84:13:37:31:8e:f1:0e:c8:9e:5d:4e:ff:
b1:19:14:6d:a4:83:7b:7e:0b:cb:de:8d:03:1c:12:
ab:43:67:3f:f1:89:2a:80:30:3b:5c:a6:a2:51:bc:
cd:ca:3e:ad:29:10:3d:29:8b:8d:64:e9:0a:0d:f1:
89:68:ef:00:62:4a:98:6e:2a:c0:69:29:aa:fe:23:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A8:AA:4C:7B:30:85:F1:A2:49:46:9E:5C:1A:57:99:52:C6:8F:49
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b2048b1c-363b-4b59-9d56-dc72187194a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:01:9a:5b:9f:07:30:f1:16:c9:3c:07:af:ce:90:fb:77:7d:
d9:ed:a6:df:82:7f:06:f6:22:f1:d2:7c:74:0a:2c:e0:45:3e:
32:3e:ed:81:ec:1d:73:80:c4:1a:42:95:f4:56:22:94:87:04:
ae:2a:93:d8:fd:10:c5:94:ec:45:7e:f3:cf:30:5d:d4:f3:20:
2e:ee:e0:df:b2:40:28:2d:9f:31:a7:b6:fd:8b:6f:fc:20:cf:
fd:40:1f:72:1d:bd:6d:91:74:a7:55:0a:90:ce:ba:71:ac:b6:
1b:ec:af:f3:d2:d2:15:5f:18:d2:db:80:2d:a7:77:92:7b:94:
54:12:a8:25:ab:48:16:8a:ea:44:d8:77:08:0b:23:22:86:e4:
5b:e6:5e:44:75:ab:05:2d:ad:3f:5d:34:c9:d0:2b:42:14:42:
f2:98:d1:ba:a4:b7:29:f2:e1:82:df:41:7e:b0:8f:9f:44:12:
0a:88:f1:f1:74:0f:06:62:56:47:b3:ac:9c:78:1c:be:99:25:
ff:f1:9d:04:c8:3e:fd:26:76:c2:8e:60:1f:00:ee:2e:12:8e:
d9:67:6b:88:c8:28:b6:8a:95:21:d2:78:2b:dc:a7:0a:cc:93:
f1:eb:39:cb:33:14:9b:13:b4:09:56:d1:90:3b:b5:d7:f4:e2:
e5:1a:1d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:05 2025 by rpki-client