Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be80d575-a5bd-4774-a8ce-a1b1655827e4.roa
File: be80d575-a5bd-4774-a8ce-a1b1655827e4.roa (raw, json)
Hash identifier: 6GehUSG2aFoO46K+SdF/CK4PdMs0U0GhamLDXn+XNwE=
Subject key identifier: A5:B7:D1:A0:2E:55:F2:C5:FE:3B:57:B9:2C:74:E5:39:23:66:B1:54
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 03FC3EBDC590D1322E114CE44017F80F51B435B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be80d575-a5bd-4774-a8ce-a1b1655827e4.roa
Signing time: Mon 21 Apr 2025 18:40:29 +0000
ROA not before: Mon 21 Apr 2025 18:40:29 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fc:3e:bd:c5:90:d1:32:2e:11:4c:e4:40:17:f8:0f:51:b4:35:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 21 18:40:29 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=ec6be01f879de5919e29d2d37cc5e5690deb14fb484e6a6f61b857ee51a6ae76, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:95:d5:8e:78:98:a4:7d:bc:5a:09:cf:ee:3a:
76:49:5e:83:14:1d:07:2b:16:12:17:9f:08:f1:e0:
e7:c2:f7:2f:f9:8f:2e:57:ea:ad:39:69:4b:33:d2:
87:59:17:95:4e:21:a7:ad:1c:61:8e:63:ab:c4:b7:
2c:20:6e:6d:03:8d:cc:63:a0:55:ff:52:ed:ad:7e:
1c:9c:1e:8a:1b:d0:cf:a1:18:f6:be:9a:c7:3e:f9:
ed:a9:0d:a0:4e:4e:57:25:26:d7:24:d2:35:5b:2b:
ef:7f:fb:57:d7:c1:15:91:23:7b:b6:58:7f:51:4f:
fb:e3:86:6a:d3:7b:d7:ad:4b:83:74:7e:6d:85:3c:
4c:bf:98:81:cb:72:8d:33:28:af:b3:98:b5:ca:3a:
fb:3b:28:c7:5a:8f:83:1b:c5:59:4c:fa:87:b8:d6:
11:b4:d0:1f:e4:2d:53:d0:19:6b:37:0c:bb:2a:6b:
b7:8c:a4:fe:35:4c:34:c1:70:5c:ec:76:07:cc:71:
4b:9d:0b:70:a7:37:c2:ad:11:22:53:39:47:69:37:
91:23:dd:03:f7:53:e3:c4:e1:34:96:69:00:50:d6:
cc:ee:4f:64:e3:c3:93:ca:0e:c7:65:f7:fb:23:8f:
86:6c:6a:ef:0e:7f:5d:a3:46:b1:af:20:63:9f:a4:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B7:D1:A0:2E:55:F2:C5:FE:3B:57:B9:2C:74:E5:39:23:66:B1:54
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be80d575-a5bd-4774-a8ce-a1b1655827e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:800::/40
Signature Algorithm: sha256WithRSAEncryption
3d:db:b4:dd:32:15:09:2a:b9:7c:68:bb:18:63:62:a8:1e:45:
b9:65:a1:2d:60:54:ff:54:09:91:67:c8:1b:06:7b:20:7c:ea:
39:39:b5:5f:d6:c1:38:c6:82:b8:a7:b5:68:58:26:b7:d6:53:
f9:25:38:fa:c5:48:32:13:61:af:a0:7a:f8:d3:66:c3:3c:7e:
79:5e:6e:6b:a2:99:85:ff:02:7a:25:ef:b8:19:d7:fa:41:e7:
05:78:d0:74:28:b0:25:f4:55:c1:a9:6c:1d:00:eb:ba:b4:1f:
08:3d:55:5e:03:69:6a:eb:03:d6:af:68:a8:10:88:74:67:f9:
75:a6:0e:66:ea:2e:f5:3a:8e:2d:4b:60:04:60:34:1a:b4:fc:
7e:37:f5:f2:48:57:d2:58:8b:67:65:65:c2:e1:a3:0f:fb:d5:
2d:5c:a3:3d:e6:3a:e3:9d:6d:d8:4b:06:cf:90:9a:5c:f0:29:
cf:7a:4b:5e:d1:8c:f4:0e:9a:9a:11:6f:1a:9c:6b:21:ea:aa:
90:15:86:73:99:d5:37:3f:3e:fc:2f:82:73:91:c8:32:52:7b:
e1:69:d4:56:30:ec:d8:55:ad:8c:bc:ee:14:38:ef:21:ed:d2:
a2:17:73:d0:fd:eb:9e:6e:9a:9d:1c:67:a4:09:fe:ec:65:52:
bb:51:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:41 2025 by rpki-client