Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
File: 1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa (raw, json)
Hash identifier: 0NnshjHO3Xox7Lxxjumk59GQqVN6Q9XRjDYJp8ymcf4=
Subject key identifier: 5C:AF:18:66:84:E8:73:23:84:FB:DB:7E:22:41:99:E4:60:B8:A5:6B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F76862FF71DC27425D8AB1B7DA24AEA0F0F46A1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
Signing time: Mon 28 Apr 2025 15:41:08 +0000
ROA not before: Mon 28 Apr 2025 15:41:08 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:76:86:2f:f7:1d:c2:74:25:d8:ab:1b:7d:a2:4a:ea:0f:0f:46:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:41:08 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=ffb81fa49b25bc1be937757c40769f132a75990853c4dedc75443f6a448f2eb6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:37:a4:30:14:fd:6f:18:7b:c7:ad:54:86:
17:63:1d:70:be:f4:07:4e:a7:4a:0a:f9:6e:c0:36:
c7:b2:34:4b:a4:78:46:7f:0a:72:21:77:e0:85:1b:
82:36:40:1e:d1:3c:27:f5:1f:4c:0f:40:e0:17:b1:
81:b0:da:36:ee:58:1f:aa:03:5c:9a:61:8d:f1:4e:
18:0a:a1:71:46:7a:61:b0:74:f1:a3:83:f3:56:8a:
72:9b:fe:34:2f:ab:03:78:fe:f7:7c:02:2a:e7:c2:
55:a9:b0:5f:af:1f:47:be:04:ab:92:21:07:c5:a0:
73:61:54:07:9c:91:ac:78:65:1a:12:11:cb:6e:d7:
86:83:b6:df:da:10:fc:77:fa:45:5f:ca:c5:e7:5b:
9c:fc:34:1c:aa:fc:26:44:6c:f4:35:be:fd:32:55:
06:57:28:26:95:d3:a3:66:69:64:77:30:d7:9f:56:
28:20:4f:2b:41:11:b9:d0:43:1d:ea:3b:93:52:95:
62:bb:54:9b:03:66:26:d5:fd:23:23:68:59:23:98:
e5:ca:70:ae:ff:0e:98:67:89:14:f5:3f:76:67:ef:
59:77:39:c1:eb:79:f0:e1:6e:1b:2c:15:c9:36:4b:
54:5b:4b:31:21:21:ff:34:dc:2a:2f:0c:a0:5c:ed:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AF:18:66:84:E8:73:23:84:FB:DB:7E:22:41:99:E4:60:B8:A5:6B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1ccfa364-07ab-4a5e-81a9-99f9d6b3a067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:e000::/40
Signature Algorithm: sha256WithRSAEncryption
09:45:32:ef:48:0e:2e:23:71:af:cf:85:59:ab:ac:d5:d9:50:
db:e1:39:a1:01:75:ce:ad:3d:53:c6:3c:44:f0:13:d2:62:e6:
26:2a:09:65:fd:6d:61:7d:4a:4e:e6:ac:34:74:f0:be:26:83:
99:36:41:ec:31:43:3e:1f:a7:d7:af:72:07:8a:a9:27:1e:12:
4b:8f:e9:da:9f:f2:cc:82:bf:b9:06:87:10:af:62:26:06:04:
f8:8d:56:73:8e:45:c2:55:47:cf:f8:77:21:7d:ae:d5:9f:8a:
7c:a4:85:3e:a4:8d:39:e6:42:a2:c0:d2:39:a1:da:03:c1:ce:
6e:9b:84:a7:a7:ef:d0:4b:e8:b1:73:90:ea:a9:5e:22:45:14:
d7:ba:39:5a:6e:ef:a9:b7:54:e4:a7:17:a3:bc:95:91:d5:a3:
a5:fd:ab:87:28:a8:d6:e3:95:97:d7:e0:5a:36:5f:34:17:1e:
47:87:d5:0a:24:f3:4d:a6:b2:22:61:39:10:18:da:b8:16:ec:
26:3d:dc:ef:40:64:95:f9:73:3b:44:68:18:86:49:6d:dc:9f:
dc:35:78:c8:d2:d6:e6:c9:4a:4b:a9:39:84:e2:2f:9b:ef:5e:
ee:83:be:be:2f:ff:4d:06:98:f6:65:27:66:c2:70:c2:f1:8f:
fd:5c:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:33:33 2025 by rpki-client