Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
File: edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa (raw, json)
Hash identifier: di/oOZRHR1OoGcrzvFZpzpY1jrNwO6Gts3pLjd9rrEo=
Subject key identifier: 0E:DB:1B:38:4A:1E:F4:92:18:E0:CB:6D:80:EF:92:8C:83:06:4E:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 01B622C7643D2B123E184522D4736BAC4220954B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
Signing time: Mon 21 Apr 2025 18:30:57 +0000
ROA not before: Mon 21 Apr 2025 18:30:57 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b6:22:c7:64:3d:2b:12:3e:18:45:22:d4:73:6b:ac:42:20:95:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 21 18:30:57 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=b3590dd2692f5d944dc25d68ad275ee554b99fad2f95f8e275436eae8510e340, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:e5:d8:58:37:83:64:33:ea:90:0f:3f:e1:
71:36:4d:ef:e8:29:77:92:de:34:2d:68:8a:2f:9f:
af:ef:0b:04:ec:e7:f6:c7:2b:63:d6:65:48:0b:a1:
c1:e1:62:51:b0:61:63:f5:40:64:f4:a0:08:81:2d:
74:06:04:6b:30:ce:b2:5a:2a:b1:eb:4c:0d:b6:ad:
4e:15:8b:f3:04:19:28:39:45:aa:da:66:a0:ed:21:
88:7e:ae:d3:b4:bd:cc:de:12:9d:04:c7:e4:e9:60:
d0:ec:3d:83:72:fe:ad:22:e0:d0:92:e9:e7:8d:a0:
df:25:6d:aa:45:37:fd:9e:ca:c4:0a:61:a0:08:d1:
64:73:e5:d6:ee:44:d6:f4:58:4c:f8:7d:6e:98:07:
3e:ce:12:a9:9a:b0:ef:0f:37:24:d2:0a:42:9f:22:
a1:e4:87:a9:54:77:40:7f:ea:45:ca:cf:43:de:15:
66:05:9a:e6:dc:53:a6:0d:62:64:7d:83:49:97:c9:
f3:45:08:81:62:91:e8:8f:71:c5:e2:18:15:e1:b6:
1b:fd:9c:77:ad:ad:66:72:26:3c:59:21:ba:e7:89:
46:28:a0:5e:1e:20:84:3b:17:8e:8f:6a:38:69:c6:
78:e3:8f:65:f9:3d:7a:ac:ae:bb:6c:a3:7c:82:39:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DB:1B:38:4A:1E:F4:92:18:E0:CB:6D:80:EF:92:8C:83:06:4E:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/edf7f775-4d15-46aa-a77e-d8dd11f7f3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:880::/48
Signature Algorithm: sha256WithRSAEncryption
63:2c:02:f8:f2:1c:5a:0d:82:24:f5:d7:78:75:ab:d7:b5:2b:
80:a9:29:f1:58:42:58:aa:82:d8:2f:d7:e5:bd:bb:1b:bc:f3:
27:72:67:bf:9f:e0:43:ea:0d:55:85:d4:e3:90:c4:93:33:ed:
43:ad:f4:05:5a:a9:01:fd:82:22:94:a9:a4:42:0f:57:44:6f:
9e:9c:15:ef:fa:bd:e0:3f:65:e2:ca:8e:c8:b1:f8:f1:5b:13:
c0:71:2e:1a:f7:fb:6f:24:81:c8:1c:5c:24:8d:8c:7a:ca:de:
d2:8d:78:ce:64:8f:a8:cb:ac:c4:11:83:04:7d:34:85:50:79:
be:ea:ec:32:b2:c5:91:09:94:50:76:0e:25:68:20:7f:da:17:
c2:64:e0:be:3d:81:a7:49:fc:03:75:64:cc:d2:b9:ee:81:48:
55:34:3c:d1:b0:3b:41:6e:e8:b2:f1:c4:70:d5:04:b0:2c:aa:
81:3d:f6:f7:4c:0e:52:07:ac:a0:cb:92:33:21:5e:5a:c0:cc:
6b:ae:41:1b:15:74:72:81:a1:89:25:f0:c9:72:40:62:04:82:
9d:c9:49:bf:5a:f0:92:25:fa:6a:b4:55:13:06:ab:5a:4e:9b:
f5:22:f8:40:bb:e7:8d:b5:69:07:5f:11:51:9f:a5:86:6a:7b:
d3:28:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:26:25 2025 by rpki-client