Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
File: f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa (raw, json)
Hash identifier: BUfGEUN8aw1KhGsGV5Updisa1VDDTqEsTbEnnmg/Rd4=
Subject key identifier: B7:A5:8C:87:99:C5:97:26:6D:CC:70:E1:86:89:04:5A:B7:B6:22:90
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 68854A450E508FF796BC547E2829CC86CC8F7C87
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
Signing time: Fri 25 Apr 2025 18:41:35 +0000
ROA not before: Fri 25 Apr 2025 18:41:35 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:85:4a:45:0e:50:8f:f7:96:bc:54:7e:28:29:cc:86:cc:8f:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:41:35 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=2abd5338b1b7d90295b94a9adf83d80428c2bba787e928f33a3462c9f967434f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:42:7c:9a:c3:48:77:68:05:39:da:a7:ab:
97:5d:ff:16:0f:dd:5d:5e:0d:0e:22:cb:7a:73:a1:
88:22:f9:f3:80:79:75:43:5c:7e:4c:39:41:31:7f:
97:7b:c9:04:83:a6:ee:10:62:4d:dd:38:40:31:49:
05:1c:f1:aa:7d:4e:14:67:a8:ce:ae:4a:89:e9:2f:
cc:7e:35:25:a2:25:20:ad:a4:3b:0d:c3:2b:92:f4:
d2:99:f4:4c:9a:91:7a:5f:79:0b:70:7c:f1:a9:09:
9c:09:43:c8:62:88:a6:b3:1a:b5:15:be:43:be:fb:
89:48:86:ca:a8:8a:cb:8e:20:51:b5:bc:44:a7:04:
1c:fb:3c:15:ca:dd:7b:0b:fa:3e:7f:0b:57:1b:7f:
9a:30:86:d4:3f:62:7d:2b:57:ff:7e:8c:0d:70:eb:
fd:17:98:d3:1e:3b:21:00:1c:4b:6b:47:de:9c:e1:
39:42:39:01:d8:03:d1:c1:d7:d1:24:19:9b:51:e7:
10:29:7c:cf:b9:85:fc:03:48:e4:cf:15:77:b1:d6:
24:b0:b4:da:1f:89:df:a3:e4:40:04:fd:67:85:07:
ec:3d:32:bb:8e:72:60:1f:7f:fc:7a:48:ab:68:19:
f8:65:2b:20:95:ba:75:57:00:fd:bd:60:6c:c5:b3:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A5:8C:87:99:C5:97:26:6D:CC:70:E1:86:89:04:5A:B7:B6:22:90
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f1951bda-59cd-4b11-b7a1-19b1f5d32116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:5080::/48
Signature Algorithm: sha256WithRSAEncryption
01:27:dd:2e:3a:62:79:3b:b5:5a:4d:6e:37:51:1a:86:f2:1f:
41:a0:85:67:b1:de:84:cd:4b:b2:63:93:fd:6d:59:0d:fa:39:
3f:2c:ae:d7:00:ef:1a:29:23:e0:d2:9a:cc:bd:09:21:2f:01:
53:6f:e0:af:3f:cf:77:09:b2:a4:c0:6c:00:12:98:89:84:25:
8e:f2:35:60:d4:fd:f2:ae:2a:7c:d5:99:c3:ad:17:a7:f8:63:
6c:70:e7:e9:48:4d:33:2d:c7:aa:7c:a8:db:62:31:4a:b1:dc:
a0:dd:47:72:ec:b2:85:63:db:c2:f6:57:c0:2d:fb:9a:71:17:
c5:bb:24:0c:25:f2:a3:89:cf:ec:a9:b3:d8:a0:f6:08:92:85:
dd:e6:e9:c5:33:89:57:2d:40:8f:77:d7:60:22:a3:5d:f7:7e:
fa:30:ec:21:bb:8b:0a:5a:63:96:f0:53:30:39:7c:e7:16:ae:
ae:71:a7:98:81:d5:bb:58:ff:2a:ad:e1:ac:58:80:13:54:d0:
94:06:f3:01:0a:f8:6f:43:e5:fe:01:41:80:f3:52:57:b4:6f:
26:d0:5a:cb:45:93:1b:6d:d9:e4:31:2c:b2:c1:26:2e:ad:e3:
c8:2b:88:72:33:6d:c8:f8:5c:e5:b9:e5:68:c5:26:b6:95:38:
6a:1e:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:44:08 2025 by rpki-client