Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
File: 2331f846-3447-4dea-ac7a-63323853ebb9.roa (raw, json)
Hash identifier: O+HrSE0X9gGb5MHWlvrrTPM2mRsEho+TMV3niC4Jgxk=
Subject key identifier: 70:AE:C5:5A:C0:59:FA:1F:A9:29:19:9E:0D:56:79:66:D2:6F:B8:42
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 348C36F3749DA48C7D387E2914F3C7D2FE23B34F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
Signing time: Mon 28 Apr 2025 15:40:03 +0000
ROA not before: Mon 28 Apr 2025 15:40:03 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8c:36:f3:74:9d:a4:8c:7d:38:7e:29:14:f3:c7:d2:fe:23:b3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:40:03 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=3f37e9429d3dc73aee9ac3b09ecd815240fe3841673b256729b94dc6aeddac08, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:66:7c:03:83:56:de:34:83:53:4f:ef:af:
d1:92:17:30:56:9f:1a:ce:a8:11:64:cd:37:42:fc:
75:84:75:7b:85:c4:12:99:65:63:a5:8d:d8:7d:48:
b7:95:ab:cc:d8:6b:e5:8d:ab:b3:b8:82:ad:9e:55:
dd:70:21:d7:c4:cc:90:d4:e4:e7:ef:67:34:93:e2:
96:9e:8a:68:95:b8:a6:10:63:64:31:a1:f9:0f:40:
4b:86:6a:94:2c:a6:d3:5b:62:18:fb:93:c9:57:68:
50:b9:87:62:50:41:59:69:e6:b6:06:66:1d:7d:1c:
62:a7:66:85:a9:3e:7c:e7:f6:4f:82:da:ee:a5:16:
48:a5:9f:eb:92:3a:97:e0:01:13:34:65:59:60:6c:
05:d4:18:ab:6a:e0:5b:44:b5:df:b5:0c:11:b3:ff:
cb:77:10:74:99:6b:bc:bd:af:06:ce:24:41:e2:0f:
8b:e2:5c:41:cd:0d:db:fe:d0:49:bd:8b:f3:da:59:
44:63:ff:1f:90:68:8c:e8:80:22:90:83:5d:b4:d5:
5f:d6:f0:12:ff:36:b3:00:47:22:d9:c1:72:a7:b0:
d2:05:27:2d:31:fb:25:62:d8:c9:17:85:43:cf:1c:
c4:63:94:e0:74:7f:e1:71:24:6e:ef:93:1e:25:90:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AE:C5:5A:C0:59:FA:1F:A9:29:19:9E:0D:56:79:66:D2:6F:B8:42
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2331f846-3447-4dea-ac7a-63323853ebb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:2000::/40
Signature Algorithm: sha256WithRSAEncryption
09:9d:fe:db:05:4c:f7:14:29:e9:38:71:d0:c3:4f:0b:cc:85:
9f:07:cc:5b:76:b3:27:b2:f4:1f:28:b3:a7:b8:41:d8:3e:c4:
f3:46:9e:40:5c:1b:d5:23:06:53:a6:7a:e0:02:44:ea:21:6e:
ba:01:5e:47:f2:27:fb:51:e4:aa:e0:d9:66:d1:dc:e8:63:44:
fc:ed:70:04:78:a9:76:d9:51:b1:be:cb:4b:4b:f8:2e:86:a4:
48:95:4f:58:f5:a5:af:20:9d:f3:1c:4b:43:ad:4c:18:68:24:
c4:32:ce:33:67:20:8a:40:07:56:31:67:00:52:7e:95:b7:54:
5f:d6:ef:7e:36:b4:c1:f0:2a:13:b9:57:28:d7:41:6a:c2:ac:
5c:35:d5:a5:a0:9d:0e:33:af:05:28:35:8f:dc:cf:6c:be:87:
bd:6f:db:a2:f0:35:b7:7f:0a:c8:16:05:23:a8:10:fb:e4:e7:
3e:f2:14:7e:a7:dc:3f:2f:6b:cd:7c:31:cf:dc:df:59:68:fb:
40:a8:e8:a2:ce:c0:17:32:5e:ab:e5:c8:3b:eb:e7:48:cf:c5:
c3:54:b9:70:5a:3a:79:ff:81:c6:49:f4:74:3d:7f:1d:6b:3a:
fc:06:fb:a6:7d:af:0b:25:48:2f:cd:f0:19:a2:16:5f:4c:5c:
bb:b3:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:31:52 2025 by rpki-client