Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
File: d93d911b-44fc-4994-8910-e2c5ecc33624.roa (raw, json)
Hash identifier: gLzQxZWXSJjZhdafVrcx09wyRKlkyXukwm5nWQxUBzo=
Subject key identifier: B3:4C:9D:EE:05:7B:4F:16:81:CE:64:E3:AF:C4:04:D6:C1:3D:55:E4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 20677A9A0F74F568932B3124E0AAB253416F02AE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
Signing time: Fri 25 Apr 2025 19:21:36 +0000
ROA not before: Fri 25 Apr 2025 19:21:36 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:6080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:67:7a:9a:0f:74:f5:68:93:2b:31:24:e0:aa:b2:53:41:6f:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:21:36 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=cd5d3b0c3cca68e60f09a1594be4bb3ad589c3b6e0b2dd49cf97d1152e05d1e5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:d4:b2:50:88:7b:83:20:20:f1:9c:e1:3c:
a0:99:b4:65:dc:23:c4:a4:75:93:63:d1:81:71:41:
05:38:d5:14:84:70:1b:27:6b:b2:a2:2b:7f:8c:b8:
a0:ce:6f:a3:11:16:a5:2e:7e:9e:0e:db:e9:af:aa:
bb:a8:56:56:8b:6e:a7:e9:d7:9a:e6:0b:43:59:b6:
58:d9:d7:6b:aa:83:3f:b0:37:30:dd:2d:ce:62:f0:
69:23:f6:8e:7b:e1:5d:df:22:e4:4e:3c:42:23:1c:
c1:f9:21:45:85:95:8d:e7:9e:38:37:a2:cc:fa:d3:
6f:80:17:fe:cb:db:ee:87:81:4d:5e:70:97:a8:d8:
63:2c:bf:e5:4f:a9:22:4b:63:08:bd:e1:34:4d:77:
c1:bf:1a:16:b7:25:5d:c8:c6:a2:4c:cc:45:76:1a:
15:d1:41:2e:10:6b:ee:93:0b:af:2d:36:bf:dd:5f:
94:57:15:0c:61:27:56:29:ff:ec:e1:fb:ce:bc:b9:
e3:ec:26:7e:3e:1e:bf:8c:ff:e1:79:f4:85:db:48:
55:48:7d:5a:44:82:32:e5:ee:aa:03:c2:fb:ed:f4:
d1:a5:1c:ff:c9:17:4b:1c:4d:bf:2c:52:ef:60:96:
e8:ac:0a:86:d8:37:6c:f2:c1:39:99:36:8e:32:7e:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4C:9D:EE:05:7B:4F:16:81:CE:64:E3:AF:C4:04:D6:C1:3D:55:E4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d93d911b-44fc-4994-8910-e2c5ecc33624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:6080::/46
Signature Algorithm: sha256WithRSAEncryption
94:22:67:5c:50:de:74:9a:92:43:af:76:e6:a1:bd:f5:8d:b8:
8e:17:66:00:95:27:da:5c:31:c5:bd:2b:90:e5:d4:b3:7b:d9:
16:7d:b9:66:1c:29:4b:d0:5f:cf:d7:f8:7d:be:1f:fa:a6:5a:
e8:23:fe:b8:c0:9b:44:9f:b5:6d:2c:6a:4d:51:3c:50:75:c8:
04:5f:c9:e5:90:de:bf:22:7e:8d:ba:45:92:2d:c4:20:a5:af:
8a:e0:43:0f:a1:21:4c:f3:8f:e5:ef:41:1f:f5:96:dd:65:73:
fd:ee:00:1f:53:f1:28:1e:85:0b:82:b6:97:36:67:c7:4e:d4:
cd:23:ed:80:9d:ff:79:f1:09:45:e7:cf:ee:61:7d:84:fe:c4:
f2:24:69:ed:1b:78:5b:40:d7:d8:75:49:96:9c:a6:f0:d3:af:
f9:2a:a5:a4:ad:57:c7:33:e6:23:b6:41:e0:ff:1c:ee:04:38:
87:9e:81:dc:87:83:99:18:43:6a:98:3e:51:05:80:2f:53:db:
77:cb:74:f6:bb:b0:71:59:11:16:66:fa:31:b6:64:3a:8c:ee:
38:79:90:a5:dc:7b:22:72:bc:e1:a3:0e:81:73:75:3d:16:7a:
15:bf:f0:49:ba:8b:90:5e:f1:85:ce:f2:6b:62:25:9f:11:f5:
66:1c:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:26 2025 by rpki-client