Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
File: e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa (raw, json)
Hash identifier: hbXIOAoZ94pxTEJetXyFAuh+L+SxBQ7tMoXZNG2zSYA=
Subject key identifier: E4:0A:C8:55:45:ED:67:26:F4:4D:47:1E:C3:69:8F:75:EF:F1:85:8F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 69A2BEEACE1089CA38CA6767F2FE0AB2EBD51B1A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
Signing time: Fri 25 Apr 2025 19:10:41 +0000
ROA not before: Fri 25 Apr 2025 19:10:41 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a2:be:ea:ce:10:89:ca:38:ca:67:67:f2:fe:0a:b2:eb:d5:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:10:41 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=8128cf50235ca3cedd8ced2e72aca1c60f12c76a41e98a81f85dfb6ab3ca967f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:d1:bb:fd:96:1f:e2:57:73:ad:bb:e3:25:
6e:88:c5:d7:e8:ae:50:c5:90:8f:9c:e9:4f:5d:42:
58:af:34:2f:b4:3b:04:ad:82:87:2e:87:b6:31:2a:
65:ba:fe:c6:66:e4:d0:f2:4e:18:8f:a9:8b:4a:2b:
9d:12:88:7a:6f:12:ad:a9:ef:e9:53:d6:58:8a:3b:
95:fb:88:8b:95:78:9a:d5:6c:3e:94:41:d5:66:2f:
54:26:be:e8:00:be:6a:0e:a6:e2:81:5f:ad:e3:ca:
66:a3:fd:d5:b3:b4:2a:8a:9d:60:5f:84:16:94:c9:
d1:76:4d:2a:59:7d:cc:f6:a3:b0:d2:ac:92:61:6a:
2a:fa:1d:2f:a1:34:8c:34:8c:cd:33:7e:01:dd:b6:
8d:4d:e5:97:78:33:03:97:88:3b:48:ea:f5:94:a6:
ac:bf:a2:6f:bc:18:9f:d3:74:1c:dd:a8:2f:6f:32:
db:7e:27:9f:0b:4d:70:98:01:2f:7a:bb:a5:0d:39:
07:11:f6:d6:bb:95:36:83:ea:98:a4:9c:19:4c:65:
33:7f:05:88:20:e8:e9:ed:18:05:d4:48:8f:4b:2e:
70:e6:ad:34:bf:6c:8b:df:b1:92:38:08:f9:e1:6f:
60:1a:95:d4:18:98:8e:7e:d3:6b:74:3d:8f:d2:af:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:C8:55:45:ED:67:26:F4:4D:47:1E:C3:69:8F:75:EF:F1:85:8F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e931caa9-ca4e-428a-aa3c-3af36efafc8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:c040::/48
Signature Algorithm: sha256WithRSAEncryption
91:97:54:1e:e7:30:12:4e:0f:ee:0b:04:73:56:86:31:d7:90:
70:ed:10:5f:c8:86:c7:c7:22:49:89:8d:44:41:9e:ad:df:47:
9d:93:6c:60:e6:e1:b4:7f:e4:38:3b:a4:03:2f:4e:90:88:ff:
57:cb:cc:2a:5c:9e:9f:3a:22:04:55:2c:9d:64:bb:27:cb:db:
0c:b2:cc:ff:e7:44:b7:79:c5:8e:80:2d:71:75:ed:7a:b9:55:
58:00:8b:02:89:61:73:5e:66:41:23:93:70:5a:a4:c6:e2:47:
20:79:44:8a:72:f8:f2:dc:58:d3:a8:f3:f8:cc:79:e7:f6:bc:
0e:19:cd:17:4e:2f:10:7b:f9:15:e3:c8:05:ad:7f:74:d5:1a:
c1:5a:7a:53:14:f7:44:b6:06:6d:38:99:8a:e4:b2:33:f6:a3:
d3:a0:c1:2b:74:c2:57:d1:85:fd:14:cf:47:0a:e5:e5:cb:d2:
8c:a8:1b:5e:51:58:a3:b3:15:a9:ff:65:aa:da:f6:66:dc:7c:
44:63:cc:27:27:0d:05:bd:a7:f9:54:cf:30:72:a2:bf:3f:08:
04:ce:ee:20:57:69:6d:39:0e:60:ef:75:de:2e:09:e4:4f:fc:
00:bc:35:fd:fa:a6:a5:94:55:8b:d1:1c:7b:86:23:06:39:03:
fb:a3:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:50:05 2025 by rpki-client