Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
File: b92d2073-fe74-4c3d-87a9-37106f766cba.roa (raw, json)
Hash identifier: 2e7bu1b17tmbb7KIFbBxuciWgQjd4l5eVqzb6FwkJ6c=
Subject key identifier: 07:40:55:4E:59:7A:3A:DC:99:C4:2D:5A:38:C7:47:03:9A:0A:B3:E6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45C6A65C9680D8E9EC66B8A6E49013C96A4912FC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
Signing time: Fri 25 Apr 2025 18:40:43 +0000
ROA not before: Fri 25 Apr 2025 18:40:43 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c6:a6:5c:96:80:d8:e9:ec:66:b8:a6:e4:90:13:c9:6a:49:12:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:40:43 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=9ac4f7c8ca30a5427bacbb4b9dadbc2bcb7b1bb2bb8ace8ef5065dc33ac31dd5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ab:d4:de:58:15:98:5a:09:63:66:11:48:a0:
dc:08:8b:90:6f:26:fb:d0:79:d8:5b:c2:00:e1:46:
24:22:7c:5f:77:cf:aa:7c:ea:58:a1:49:13:f4:a9:
58:31:52:d0:67:01:8f:3f:87:84:db:6e:26:0c:9f:
59:e0:52:37:86:05:c8:84:e0:e5:cc:56:ce:b4:bc:
e3:ab:2d:90:8c:9b:c7:38:a7:18:3c:37:16:3b:ac:
66:b1:c6:f4:ab:a2:23:c4:88:a9:f2:db:eb:07:7f:
e1:96:65:6a:b9:79:b4:6e:ba:0e:c5:fd:2a:9f:46:
90:42:d4:c6:52:7c:b0:95:da:32:71:d0:ef:b7:f1:
3a:80:d2:e5:f7:e3:ba:63:ce:f7:20:6c:5f:93:24:
7b:5f:47:62:3a:2a:f4:49:bc:95:54:6d:ee:52:cd:
df:73:a6:77:11:0a:39:b0:e8:eb:cf:cb:44:ad:88:
f5:9f:c8:e5:c9:55:1a:c1:f5:52:ed:53:2f:2c:05:
3b:a2:aa:4e:8a:02:16:9d:03:16:c7:1c:99:d6:3a:
2c:38:b3:1d:f8:72:76:c5:a8:47:46:f3:20:80:01:
2e:ca:83:24:28:28:bc:94:5f:8c:08:60:5a:c8:e0:
0f:55:ed:a6:04:1c:d3:a2:02:07:61:a0:7c:58:62:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:55:4E:59:7A:3A:DC:99:C4:2D:5A:38:C7:47:03:9A:0A:B3:E6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b92d2073-fe74-4c3d-87a9-37106f766cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:8060::/48
Signature Algorithm: sha256WithRSAEncryption
5f:a6:6f:0d:e3:0e:88:18:e6:81:04:12:75:3c:c7:b8:a2:e3:
18:53:ef:ce:a9:cb:17:03:39:a5:12:3e:4e:03:2e:8e:b0:ab:
37:5e:c2:31:08:18:04:8c:81:e2:79:cf:b0:4b:1b:d8:d5:84:
2f:5d:03:9b:c4:2d:62:1e:f3:cc:b0:b7:03:0b:f6:a8:75:da:
88:80:17:74:c6:0a:9e:4f:78:a3:07:f4:ff:5f:65:29:54:c9:
e1:2a:2e:da:eb:4b:b9:97:8c:04:45:39:83:2e:49:c5:cf:4b:
be:3a:79:73:3f:5a:c5:ee:91:62:a3:e6:ae:b8:1d:55:63:47:
f9:55:c8:c2:ad:07:fc:30:6b:df:83:cf:03:a3:ff:9c:6b:aa:
c9:d2:d5:d4:d6:d9:f1:1e:7c:91:05:a2:bd:7b:00:49:35:6f:
e8:80:b6:84:d4:9c:05:a4:be:06:48:df:95:4e:af:81:26:85:
97:48:a9:25:18:cd:fa:f0:06:2a:62:0f:21:17:82:66:ce:bf:
02:77:cc:df:28:f4:30:c7:3f:55:e2:49:e6:2e:73:3c:c5:49:
a2:da:e5:4c:40:cb:3b:a8:93:80:72:1c:24:8d:4a:f4:08:3f:
d3:c2:35:4e:9c:e1:27:8b:f2:9c:aa:15:fe:8f:29:11:bd:d9:
0f:76:84:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:39 2025 by rpki-client