Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
File: ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa (raw, json)
Hash identifier: F97REdCdUjsY4fx7lXNbCFSN4qRKtOIV9PjyxY3p/E4=
Subject key identifier: 65:E0:89:F4:0E:7A:F0:8D:56:BF:5A:49:7D:78:32:39:CB:63:FD:3B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63ACC6E8C85371CE2349299DC7CD33F5DE1F0019
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
Signing time: Fri 25 Apr 2025 19:20:59 +0000
ROA not before: Fri 25 Apr 2025 19:20:59 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ac:c6:e8:c8:53:71:ce:23:49:29:9d:c7:cd:33:f5:de:1f:00:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:20:59 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=f274dce6c63df7083615fa03926f0d7660e9c72d4ed077afd1d7b7138d1a22b1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:1c:79:9c:91:dc:5f:55:24:b1:38:fb:06:
73:e1:0c:5f:29:4f:98:f0:a9:d5:33:81:e2:74:a0:
fa:ff:0e:4a:e9:c8:6b:e2:ed:ad:8a:72:be:62:b6:
92:04:46:f9:1c:65:68:5d:38:fd:b7:81:47:01:55:
ca:81:3b:af:83:2b:14:50:85:d1:72:1d:c4:7a:ab:
6c:4b:87:e3:2c:f2:29:a5:92:8f:a6:03:06:13:c3:
d3:ed:b1:70:16:fc:dd:63:e5:0d:e9:aa:90:8b:ba:
de:0f:c7:f6:0a:6e:7e:d2:8c:2d:57:a1:94:77:ee:
08:10:b8:97:14:c2:d4:19:e8:b4:43:30:6d:33:56:
0c:35:c2:89:a6:28:91:cd:1e:ae:24:5b:f0:13:e2:
20:ed:93:ae:f8:59:72:70:df:a3:84:f5:72:f0:0b:
b4:91:e0:b0:7e:e9:85:ac:88:0f:7d:6c:d5:44:84:
d3:d2:d6:d3:60:56:cf:fe:ec:f5:3b:c4:95:c5:65:
54:49:02:97:f6:55:87:43:82:a1:67:26:b7:fc:7a:
5f:47:47:e6:1b:57:0c:ca:3e:d3:de:35:19:c1:5e:
37:68:0e:b6:ff:38:af:ac:fe:53:9b:99:a2:df:92:
72:b4:f0:46:04:ef:58:79:3f:00:e0:52:c7:36:3a:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:89:F4:0E:7A:F0:8D:56:BF:5A:49:7D:78:32:39:CB:63:FD:3B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ddcd2931-1cb6-49c5-af5a-01999a3cff3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:4080::/46
Signature Algorithm: sha256WithRSAEncryption
30:f1:d5:f5:18:09:b6:07:a1:ff:bf:63:56:ec:0f:4c:18:ef:
11:05:1c:79:ae:d9:3a:da:ac:43:29:26:2d:df:f1:47:b1:aa:
35:b5:3c:b0:47:f6:f4:a1:4b:4d:4f:74:21:cb:0a:5b:b3:2d:
eb:ac:b3:d8:10:3e:30:71:8b:5d:f0:55:b0:70:4e:09:0a:32:
5b:b8:71:f0:88:5a:ab:37:b5:54:33:cd:75:29:cd:69:c2:2a:
ec:15:5a:84:f1:00:50:d8:8e:a3:8b:fb:11:c3:01:9f:62:34:
68:43:a5:b8:15:5f:11:93:bd:65:a5:4a:57:b9:58:86:8e:c4:
b4:61:1b:32:03:db:41:03:ea:83:a7:61:29:a1:6f:d3:9c:18:
2a:ae:e8:b5:90:b5:bc:55:d7:f5:b5:19:31:f8:32:69:0e:77:
1b:24:4d:f1:5a:96:41:77:df:46:4d:f0:52:58:c9:2e:ba:5f:
79:5b:3b:0a:f3:a9:77:48:f7:ff:b0:65:ea:9e:9b:21:c3:c3:
24:fc:ba:c9:87:3b:35:9b:ff:5c:45:9e:ec:49:3a:dc:a9:71:
41:04:66:8f:35:96:01:a2:a4:b6:58:9c:86:84:34:54:59:60:
b3:3b:13:ec:40:07:56:18:55:25:c5:63:4c:fb:36:01:9f:e2:
3d:ac:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:21 2025 by rpki-client