Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c850bbe8-9ff4-4e13-ae90-de5774a81d86.roa
File: c850bbe8-9ff4-4e13-ae90-de5774a81d86.roa (raw, json)
Hash identifier: 8ugGc7sfPwuTnPtyPXfjoNCfaVr2XDah2GFIbANohJg=
Subject key identifier: 11:37:64:80:29:57:48:FD:13:E0:82:9C:14:37:34:19:60:2D:06:CF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BEED3C7697F35F814D348D91CBE5E9DA3A7A1F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c850bbe8-9ff4-4e13-ae90-de5774a81d86.roa
Signing time: Fri 25 Apr 2025 19:21:25 +0000
ROA not before: Fri 25 Apr 2025 19:21:25 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ee:d3:c7:69:7f:35:f8:14:d3:48:d9:1c:be:5e:9d:a3:a7:a1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:21:25 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=a871475cb08e44f10986f43908a2791ea332686bd3c9e7c1110fa283fdf382a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:b5:6a:b1:a6:b1:f3:72:b8:6b:53:1c:71:
b2:5f:1a:d9:2c:7a:9f:85:6f:c4:5a:8a:47:05:f0:
67:1d:aa:c7:67:ed:90:f7:e7:f0:73:9c:37:b9:e5:
9c:05:ac:ea:4f:5e:0c:e5:fe:1e:3a:53:f6:2f:ce:
ac:65:05:a1:1c:5b:0b:3a:4c:03:7c:37:ea:07:3d:
ae:e8:74:1f:4b:1b:e3:dd:d9:2f:3f:1c:0c:d0:01:
1e:d4:f2:3f:09:cd:6f:63:14:14:bc:9d:f4:14:12:
e2:b3:2a:43:70:6c:98:c4:7a:0c:2c:82:36:44:55:
09:5f:cb:57:aa:43:29:01:11:53:a2:31:6d:b9:7c:
81:f1:86:f4:df:41:60:42:5e:44:bc:73:4a:e5:b1:
02:58:57:a5:25:2b:21:34:6c:07:dd:9f:d3:c2:67:
29:23:38:f8:99:ac:db:c5:bc:49:10:ff:a5:fc:c7:
6e:e4:87:ed:9a:62:31:c0:95:b2:e9:25:c0:38:bf:
05:a5:93:fd:6f:ad:15:3e:40:40:32:3f:7e:8e:73:
26:79:91:a1:a8:9a:de:ff:2f:2b:4d:4c:42:b6:ec:
f1:6e:d2:78:2e:25:24:26:4a:60:8e:d7:85:73:c8:
83:8e:4b:3d:af:4c:be:8a:7b:a3:51:bf:21:42:b3:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:37:64:80:29:57:48:FD:13:E0:82:9C:14:37:34:19:60:2D:06:CF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c850bbe8-9ff4-4e13-ae90-de5774a81d86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:c000::/40
Signature Algorithm: sha256WithRSAEncryption
09:df:83:d4:d4:95:d1:87:6c:3a:57:3f:51:86:10:cb:d2:02:
32:0e:99:23:aa:c2:fd:f2:8b:21:65:1c:2a:46:6c:ff:9e:6e:
71:08:81:44:16:f1:c9:d6:fd:0b:2e:c0:92:3e:3a:9b:63:e4:
90:d9:a0:e5:df:a4:f1:5f:73:6b:7a:0b:1e:be:e2:64:53:51:
29:51:54:2f:62:82:db:c2:b7:fa:58:77:fc:32:d1:84:5a:75:
02:a1:88:bc:08:cc:37:ae:3e:48:cf:1a:4b:af:b6:ee:a4:8e:
d9:d6:60:17:5a:7f:5a:f0:db:12:f2:b5:cd:af:d8:de:f1:8f:
10:ba:a3:af:f3:51:71:9a:d3:16:38:5a:c3:e0:b3:1d:87:df:
ae:f1:fb:95:08:f7:6b:dd:a7:ff:ec:cb:ed:41:9b:85:68:77:
a3:a6:fa:2a:97:f7:cd:87:f7:a0:1d:b9:30:cf:69:4a:18:7d:
b9:90:4f:63:ed:4f:96:bb:2e:78:37:de:17:e4:5b:0d:3d:af:
75:3c:99:19:b1:e0:86:6e:13:17:1b:43:39:e4:7c:7f:1b:8a:
15:f7:a2:32:b7:93:0e:a6:96:f1:c1:c2:d4:1d:91:1e:97:f6:
cb:23:f3:e0:82:cc:bd:c1:62:62:df:26:e6:95:f0:9a:ce:77:
21:8c:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:04 2025 by rpki-client