Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
File: c5796c8a-c7f2-4888-9a17-c80093c07957.roa (raw, json)
Hash identifier: 4QhVLnOjNjPI5477XhMqT9dn3FMQVFTXLCesRMdmGqw=
Subject key identifier: E8:7B:36:CA:8E:2E:71:DB:12:A0:78:0E:71:80:96:F9:A9:FC:B9:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F49FD38F8B7E1268865D020A254B09CB3464C4E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
Signing time: Fri 25 Apr 2025 19:30:58 +0000
ROA not before: Fri 25 Apr 2025 19:30:58 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:80c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:49:fd:38:f8:b7:e1:26:88:65:d0:20:a2:54:b0:9c:b3:46:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:30:58 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=d63e15295783f8c9990a39924a517b2011161d66da191599fedeefe1b14e7422, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2c:60:bf:14:7f:e2:58:a7:8a:c5:04:54:c2:
f6:17:27:6f:b0:0d:cc:aa:2b:91:bb:3d:80:56:a6:
3c:d5:19:a1:37:14:9f:a2:7a:9c:d4:d1:20:18:0d:
a5:da:3c:ec:28:52:c8:e5:2c:f3:05:c9:3d:0b:03:
0e:7a:9d:55:40:30:c5:46:e6:c8:92:cd:b3:c0:8a:
bb:f4:52:7b:6b:26:04:b9:68:28:80:cf:1c:24:4e:
2e:cb:85:0d:1f:14:9b:72:ba:f3:dc:77:8b:69:4a:
7a:ce:39:fb:6d:ad:3f:84:48:8c:37:82:f6:6d:c3:
40:dc:80:70:34:67:7c:11:03:fe:93:5e:c1:08:18:
ce:4e:78:12:0b:87:d6:5f:33:14:2e:0f:5a:f2:8b:
7d:3d:06:d7:46:07:78:5c:2f:36:0d:b1:85:db:da:
78:ca:df:8f:2e:ac:9d:52:14:59:98:9e:0b:b6:6d:
e0:4d:65:39:1b:d9:e2:dd:ba:77:76:87:35:c4:d2:
b2:95:45:60:1b:cb:69:7d:c2:06:3a:51:33:6f:bc:
7c:11:f0:9a:a9:30:27:8f:ca:0c:24:f6:75:54:a1:
90:ce:a3:60:b6:e5:02:d1:ae:94:4e:ee:43:47:e8:
e0:12:02:b2:3d:54:35:ca:99:c2:13:84:71:fb:1c:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:36:CA:8E:2E:71:DB:12:A0:78:0E:71:80:96:F9:A9:FC:B9:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:80c0::/46
Signature Algorithm: sha256WithRSAEncryption
4b:02:89:a2:8d:4f:fe:61:1f:df:a8:bf:7c:ed:ef:d7:d9:68:
cf:be:21:8b:e3:12:f9:99:11:9e:e4:3d:5a:20:60:61:a7:db:
1d:64:7d:1a:fa:df:43:3d:7b:25:a5:9e:be:67:26:85:b2:11:
e3:8d:8f:17:24:78:6f:21:5d:3b:b3:26:14:78:67:1b:03:57:
89:6a:25:f9:0a:b4:7e:86:8c:5f:09:db:32:5d:96:4a:4c:de:
95:57:98:86:f7:df:67:a8:37:ef:90:51:0e:f9:69:21:32:8b:
92:f8:ed:2c:e7:47:03:f1:77:fb:27:45:43:96:ae:6e:ad:f0:
21:49:80:79:b2:69:81:71:d0:ca:72:65:ab:44:ad:aa:fb:3f:
40:22:65:83:06:7e:c7:1b:e8:4d:94:6a:78:28:7a:36:2c:12:
4d:3b:1b:d5:de:76:61:50:90:82:20:ba:a9:ce:26:9a:76:c2:
bc:38:ef:12:14:74:3a:6a:11:0c:1c:1a:9b:7c:92:98:61:55:
ab:f2:c1:ee:d1:5f:82:f6:50:16:b3:22:c5:d8:a0:8b:6a:34:
f4:f4:02:ac:52:2d:08:07:52:5b:7c:30:ac:9f:11:3a:38:c7:
e1:7f:b3:ef:b3:1f:8f:58:bb:a3:78:e9:c7:55:f1:36:8a:1d:
b8:d8:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:03 2025 by rpki-client