Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
File: e580dca1-bc51-4f11-b7e4-287944d98510.roa (raw, json)
Hash identifier: 0taZTxr1qNbobE2iaCSh+9R67O9i48Ix0OKhPXa9qdg=
Subject key identifier: 74:30:14:93:F4:E4:A6:AC:E9:7C:91:9A:9D:CC:82:22:90:67:23:30
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 79CB509DE6B60123FDA6F2AFA1720D412C2A9EB7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
Signing time: Fri 25 Apr 2025 18:21:15 +0000
ROA not before: Fri 25 Apr 2025 18:21:15 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cb:50:9d:e6:b6:01:23:fd:a6:f2:af:a1:72:0d:41:2c:2a:9e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:21:15 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=2f1583bbda04568d5debd82563183e4a7578c5a67d53a50e6f4e6bd6ed711a72, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:58:3e:eb:ac:55:97:18:fb:db:c3:2b:da:
f5:63:e6:3f:26:8f:15:63:c5:ab:0e:fe:d5:a4:0e:
f2:1f:1d:7a:aa:81:0e:3a:e2:36:dd:a2:d5:67:7d:
b0:25:ac:20:26:d0:6d:5e:0b:9c:35:20:ad:89:53:
c2:c4:a1:0f:87:5c:0e:58:1e:53:87:d4:62:37:38:
3d:0c:2e:f7:d2:87:4e:af:75:19:79:70:fc:0e:13:
2a:f8:52:7c:03:21:6d:5f:06:65:4b:23:ad:8d:75:
d2:b2:b0:d0:4f:99:98:b1:7b:fd:40:53:62:8a:76:
a6:ba:e4:fd:6f:82:28:35:2f:07:76:bf:9e:aa:80:
4b:d7:e7:ad:bb:b3:41:da:a6:a8:5c:63:e0:ff:70:
c3:72:2d:6a:f8:44:ca:2c:bb:d9:7b:87:c2:29:81:
74:c4:0e:fc:eb:ef:39:97:1f:9c:37:53:d5:35:c9:
8c:50:e4:e1:a5:08:f8:33:48:f9:8c:8a:15:36:b8:
f6:8e:bf:79:7c:80:f9:7e:cf:ec:a9:cf:1c:f1:8b:
a1:74:b8:c6:3d:f4:e1:86:2f:88:fc:88:9e:b9:53:
97:c0:d3:0f:df:44:91:80:ca:e8:1d:36:1c:15:00:
bb:b3:de:13:ca:9b:3c:6d:61:10:94:ad:25:4c:c1:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:30:14:93:F4:E4:A6:AC:E9:7C:91:9A:9D:CC:82:22:90:67:23:30
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e580dca1-bc51-4f11-b7e4-287944d98510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:a000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:ac:f8:30:73:5c:96:0f:5f:01:b9:66:fe:e0:45:1b:05:46:
e9:c2:76:69:1d:ac:47:5b:eb:3f:98:f5:37:f6:4a:40:c5:55:
22:97:25:ec:29:3e:93:a6:36:c9:7f:ea:35:d6:cb:4f:17:c9:
4c:65:1e:22:0d:bc:95:87:34:4a:22:3a:90:7c:eb:4e:c1:d9:
8e:61:14:26:28:6a:fc:23:c6:80:a5:d7:b1:d0:0e:46:80:f5:
c2:c2:98:3f:d9:d7:9a:b4:1b:2e:22:e2:c0:58:a2:55:7b:2e:
7f:be:53:0e:91:ce:19:dd:a4:39:f8:6b:76:d7:5a:2d:9d:fb:
3e:7d:3e:d7:23:c4:1b:ab:25:59:6a:f3:5a:d6:e6:34:72:39:
ff:92:a9:3f:db:73:7d:07:c3:13:07:54:f6:d5:70:6b:f3:b8:
4d:99:d9:d8:25:96:f1:6a:64:23:8a:ff:c8:bc:90:45:5d:d4:
bc:bf:7c:ff:e9:92:41:8c:7e:9c:11:d0:8d:d8:49:e7:cd:fe:
8b:ab:f6:47:1f:11:06:67:e6:6e:39:47:aa:de:58:3a:c1:b1:
be:ba:42:ad:43:ef:3e:47:32:84:ba:34:2c:9a:14:61:ed:ad:
17:82:32:b2:68:05:ce:69:6c:d9:72:97:34:40:79:96:65:ce:
56:0f:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:15 2025 by rpki-client