Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
File: e9508335-e447-4b74-99f5-98b04a3a6b2f.roa (raw, json)
Hash identifier: uV9i4xz+DWysObCCv/4qkwAH59Xmy6xZkbrreLrCI2s=
Subject key identifier: 17:A4:D6:DA:66:76:86:14:D8:6E:B3:DD:FC:10:36:36:3D:AA:92:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 63BCAA4257B8DA0BE05758B7765FFDA4CE207FA0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
Signing time: Fri 25 Apr 2025 19:11:06 +0000
ROA not before: Fri 25 Apr 2025 19:11:06 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:40c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bc:aa:42:57:b8:da:0b:e0:57:58:b7:76:5f:fd:a4:ce:20:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:11:06 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=af930d0d0973faab681093adf9af406a0aa8eb6f6425a580a147655818b6f341, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:6b:17:0a:0e:58:7a:0b:a7:7a:94:83:0c:
66:9d:2d:66:ee:ef:a2:4d:24:84:73:5c:3a:f3:e3:
77:07:16:2f:4c:1b:db:da:d8:fe:11:e7:78:c0:83:
d1:57:05:ac:d0:e4:35:0a:ea:46:91:e8:c1:74:00:
bc:eb:51:10:e1:87:d7:73:ba:9a:e1:c2:8b:2c:48:
78:4b:54:e1:9a:2c:92:72:23:6a:56:fe:fd:55:d0:
1b:21:53:d5:ac:ab:22:6b:6e:be:bd:97:b8:79:44:
e7:f6:41:b2:38:62:84:dd:2e:1e:9d:d9:25:fa:b3:
14:55:ba:05:ed:b4:66:67:2c:e0:4f:59:e8:fb:ae:
fd:6f:65:78:9a:ac:4e:51:9e:96:60:6c:6e:bd:54:
32:ea:65:57:5e:3e:3f:96:07:0e:38:70:0f:e2:87:
13:38:81:0b:0d:fd:50:a4:71:87:01:29:ee:0a:18:
0e:5a:75:c4:ae:e9:fa:c9:d8:84:27:a4:31:8b:a0:
8f:8d:09:b1:bc:e8:c8:08:86:9d:4f:68:1f:cf:d6:
90:33:c4:7e:08:c1:52:bc:f9:39:b7:e1:55:d2:21:
ba:0f:50:e4:11:04:fb:84:82:07:4f:0f:9d:de:5a:
ff:67:24:4c:aa:86:d5:1a:56:1e:32:ed:21:7f:46:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:D6:DA:66:76:86:14:D8:6E:B3:DD:FC:10:36:36:3D:AA:92:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:40c0::/46
Signature Algorithm: sha256WithRSAEncryption
9b:a5:46:a6:56:ad:12:02:b8:5f:55:8f:d0:1b:ae:f5:d2:c9:
c3:b4:df:6d:41:75:f3:01:f2:b7:78:a3:b2:2d:5e:b3:04:cb:
cd:35:e0:c8:c1:de:89:56:e8:83:16:23:20:bb:0b:dd:50:b3:
69:c0:5c:cb:fe:f5:95:7e:01:a1:56:60:3c:bd:79:31:83:a0:
40:95:3a:c8:b9:cb:8c:d6:ab:12:38:35:f9:1c:79:db:75:ca:
a9:5f:6d:0f:5d:de:44:bb:65:17:cc:85:e7:cc:dd:b1:6d:be:
17:80:82:45:04:10:54:39:a4:22:98:21:ab:c5:c8:86:0f:e4:
b0:f0:28:85:da:c1:45:44:81:a0:82:c4:b4:79:6d:5f:c1:06:
84:e6:8c:66:27:88:0f:93:2f:f4:2f:4d:ef:9e:35:48:a3:84:
82:8f:24:ca:e6:27:0d:51:0f:f4:83:0e:f6:c0:83:95:eb:cf:
7a:c6:c6:89:47:ab:65:5f:47:fe:d9:d9:ea:26:3f:9e:1d:79:
9c:c3:a1:6a:31:7d:89:c3:2d:f7:4c:4a:e2:d8:0a:51:85:b7:
70:61:5f:18:ff:4d:f6:90:cb:40:1e:4f:03:8d:cc:60:67:da:
0d:33:22:dd:cb:d3:2a:10:3b:d0:c3:cc:67:79:aa:c1:89:8b:
52:45:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:46:09 2025 by rpki-client