Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6931f13-0c44-4edc-b1b7-89dc8e035321.roa
File: d6931f13-0c44-4edc-b1b7-89dc8e035321.roa (raw, json)
Hash identifier: 81N9aaOtxmVrojPJTIEdvto3KMVUTDeL+rEzljAZrp0=
Subject key identifier: A3:5F:D0:13:54:96:81:CD:A2:22:C4:B0:F4:0E:CE:BA:B4:24:C6:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 085B106B5C4EB1953E144332EA6D2C8F6740A45B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6931f13-0c44-4edc-b1b7-89dc8e035321.roa
Signing time: Fri 25 Apr 2025 20:01:28 +0000
ROA not before: Fri 25 Apr 2025 20:01:28 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5b:10:6b:5c:4e:b1:95:3e:14:43:32:ea:6d:2c:8f:67:40:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:01:28 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=1f5e50333cfa55ef37506a0500cdd717369fd2264e25ecf7a834201b8bdca73e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:7f:93:1d:45:b6:a2:fa:81:4c:a6:81:97:
62:eb:85:bf:0b:c1:d7:39:a9:43:16:e3:0e:4d:41:
d7:b1:6d:6b:94:f3:77:a8:54:4e:b0:15:0b:54:82:
04:b9:67:91:52:fb:77:ab:7e:cc:1a:0d:a1:9a:0e:
6f:8b:8e:70:24:fa:b3:ed:e0:05:30:6f:c7:0b:e0:
68:23:54:bb:f2:fe:19:6a:e5:51:db:28:8d:8f:d5:
f6:a2:c2:83:40:f7:61:53:e9:bb:29:9f:52:4a:6d:
2d:50:05:cd:4d:5a:b6:61:ac:06:99:d1:cd:a5:08:
39:81:24:a6:77:1c:d5:80:6f:33:3a:4e:d9:06:84:
cc:97:02:60:78:b0:dc:03:f5:08:2e:f9:5c:c5:06:
42:a1:d5:23:7a:f1:34:58:2f:a4:a3:09:8d:b0:e7:
76:2f:1c:69:a5:47:4e:de:7d:87:df:44:c3:4f:c8:
ee:b0:60:73:14:f8:93:83:ab:e0:87:2b:38:4b:7a:
52:35:0e:8f:39:5c:6d:74:1d:4a:46:2c:08:07:42:
f6:0f:90:f2:bf:9e:69:cd:ad:c0:2b:26:a5:a7:82:
44:03:00:9f:32:6b:19:b8:d2:11:ce:44:7c:44:e7:
ab:e9:65:ab:d9:47:c4:f9:60:44:38:a2:15:56:ef:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5F:D0:13:54:96:81:CD:A2:22:C4:B0:F4:0E:CE:BA:B4:24:C6:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6931f13-0c44-4edc-b1b7-89dc8e035321.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058::/32
Signature Algorithm: sha256WithRSAEncryption
bd:4c:50:40:e7:1c:c2:d3:02:8c:64:56:7e:8b:fb:87:0a:7a:
99:cf:24:58:f5:31:19:ed:4c:30:11:8f:b7:26:3b:b9:90:f8:
88:9a:d6:4f:41:42:55:8b:18:14:17:ef:09:d8:8e:1a:db:94:
6a:a9:ae:47:ad:53:8e:8e:26:24:c8:fc:f5:0a:c4:44:0d:00:
ea:22:51:98:52:a9:83:16:4c:6c:9a:e8:9c:af:1f:23:42:38:
1d:15:4c:2f:99:ba:8f:cc:2c:6f:14:c9:2c:cc:01:03:ca:b7:
fe:3a:a4:63:25:57:8e:68:e0:81:d4:0c:16:d9:34:27:3f:cf:
0d:bd:ee:ca:76:85:ca:f8:e6:68:c2:77:fa:17:7e:ae:8e:3f:
05:dd:a3:7b:66:b8:16:b4:17:75:8c:be:c0:41:be:df:aa:a5:
1f:7e:ef:9a:60:1f:7a:c5:4c:d4:a9:65:d4:4a:22:73:f0:37:
49:0c:18:9c:fa:7e:be:2b:57:de:0b:bd:be:4a:f0:63:98:1b:
81:96:29:2e:bb:f5:78:d4:78:ba:f1:65:da:91:07:3c:49:74:
1f:cf:72:63:a3:6c:de:34:ea:9a:e0:fc:db:85:9e:9c:d3:55:
05:d5:de:53:c3:92:0a:fb:f6:05:b2:0b:59:9f:de:e9:77:8e:
1f:87:0a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:55 2025 by rpki-client