Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
File: b8a24699-2493-4e45-8227-bd2ec32f88ab.roa (raw, json)
Hash identifier: CV71XcdA6HVOd8rnq2PPpWGsIYFtbzw5AOV1V1qTxbc=
Subject key identifier: 79:C7:D9:F8:3A:A2:93:7B:51:B4:EF:4B:8F:36:7F:30:69:0B:2A:16
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A3A03CAE2929E223DE0E14CB577AAF3C5108237
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
Signing time: Fri 25 Apr 2025 19:00:52 +0000
ROA not before: Fri 25 Apr 2025 19:00:52 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07f:10c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3a:03:ca:e2:92:9e:22:3d:e0:e1:4c:b5:77:aa:f3:c5:10:82:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:00:52 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=5f06bedc45867a444497488caa35435a2a4396796ae43636b0259d2153db5ceb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:c0:a0:52:e9:83:20:de:93:1e:d2:12:f1:
12:45:d1:1f:a0:f1:0f:da:38:10:25:15:83:9e:38:
04:d7:6b:a0:25:7f:13:bb:11:17:71:c9:7c:5c:d3:
96:c8:95:9e:af:e8:55:c3:28:17:2b:35:ef:ac:26:
a5:81:75:f4:3e:c1:60:0a:69:92:f2:a2:8b:3b:06:
f4:11:a7:60:0f:5f:1d:01:a1:58:73:b8:00:be:b9:
d5:e4:35:66:2a:f0:f7:3a:77:de:4e:3f:25:ad:72:
e0:13:4f:a1:6f:4e:fe:12:e7:f7:cf:58:e7:bd:fc:
a2:ef:c4:c8:d6:a0:c5:37:d6:2d:5e:58:1b:dd:df:
61:f8:f3:a9:7a:b5:6b:6b:61:d3:53:6b:72:07:6b:
3b:75:48:cc:c9:f5:ab:b8:65:9a:ad:79:b0:49:86:
6f:18:e3:e8:40:82:c7:2f:0a:78:69:70:3e:9e:f2:
08:63:0a:ad:8b:db:74:13:b4:94:29:4b:4e:ed:39:
53:1b:61:a4:aa:06:69:71:d4:93:94:97:4c:1a:27:
42:97:f5:83:cc:bf:82:a2:55:69:a0:a7:b2:d9:d2:
a0:b8:24:6b:37:de:a0:2a:ef:8c:1c:5e:fb:49:2f:
1a:f5:49:04:54:98:a1:46:b2:5d:38:7e:84:be:d3:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:D9:F8:3A:A2:93:7B:51:B4:EF:4B:8F:36:7F:30:69:0B:2A:16
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07f:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
39:e9:32:8b:80:31:5b:ef:5f:e0:15:d5:e4:1b:0d:3d:85:49:
ab:55:8a:89:d3:89:8b:76:83:50:5b:9b:19:c6:66:6d:23:2b:
3c:6b:a4:9d:0c:eb:c9:87:05:7c:9d:0c:a6:c5:7a:0d:7c:47:
63:9b:f8:49:38:a5:c5:bc:8f:d7:93:87:dc:a9:f6:b9:35:d6:
91:67:dd:e9:f2:d9:aa:be:7e:e1:8c:2a:41:d3:b7:a5:95:ab:
c8:47:30:fd:f9:1c:04:84:0a:71:19:64:1b:4d:50:31:b1:d9:
b8:d9:a6:2a:30:89:a8:52:5c:7a:27:79:bd:b2:d1:71:f1:01:
dc:4c:74:e5:c0:c6:ff:f6:cb:5d:ad:b8:33:05:cd:c6:33:dd:
eb:ae:1f:cf:44:65:38:f7:fe:1b:1b:b9:ac:2f:42:e1:11:8c:
e4:a8:09:34:52:27:f8:54:83:01:7f:3f:b2:1a:8f:19:63:d9:
83:08:6f:75:f9:fc:b6:ce:33:a3:36:75:80:79:ea:a6:57:c5:
0d:e8:b7:e0:99:0d:26:bf:b6:2a:2b:00:5c:7d:8d:0e:a7:37:
44:61:47:1f:6e:74:c3:c5:23:07:22:93:55:10:93:55:84:fc:
92:d1:ad:98:6d:97:00:61:f3:20:4b:6b:00:69:66:24:68:90:
33:4d:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:33 2025 by rpki-client