Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e8369e3-7a1d-4e37-8db7-c71339526d79.roa
File: 2e8369e3-7a1d-4e37-8db7-c71339526d79.roa (raw, json)
Hash identifier: 2C/G1zCb6Qv11SK7XBtw+nvQctRBciuXUnUx6FcbwrQ=
Subject key identifier: 13:29:BB:69:8B:38:B3:0F:A5:BD:6D:44:15:40:D4:20:BE:76:8A:41
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3EA95AB962C5B2BB4E50BB36CD7BF72C4F7A6C44
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e8369e3-7a1d-4e37-8db7-c71339526d79.roa
Signing time: Fri 25 Apr 2025 19:01:28 +0000
ROA not before: Fri 25 Apr 2025 19:01:28 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a9:5a:b9:62:c5:b2:bb:4e:50:bb:36:cd:7b:f7:2c:4f:7a:6c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 19:01:28 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=da8f7a4483e27285fcfbbc740a8acef12725daa6454eac2f1ab2856ef7d4abc5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:a5:22:8c:61:e6:34:76:8e:a2:f3:1b:c9:
dd:43:11:0f:85:7a:55:cc:94:31:ff:01:e8:e8:55:
1b:82:47:af:e6:45:bc:a3:cb:19:81:ef:e0:6f:b8:
a9:f1:16:df:ef:c7:65:b2:bd:42:59:8b:29:a7:c4:
e7:84:86:d1:4e:13:9a:82:d0:32:3e:de:13:90:16:
e7:9d:16:ac:40:80:16:78:73:d5:45:57:8d:e3:05:
66:a9:31:23:79:4e:e8:83:14:69:8b:58:e5:04:8c:
d2:07:b8:3d:fa:41:43:9f:79:ba:be:8b:77:02:40:
10:69:79:5d:bd:fc:14:80:12:58:3e:f8:00:00:b5:
21:d4:a7:b3:56:89:5e:ad:c4:00:9a:cc:92:b9:bc:
1f:1f:2f:3b:9f:5a:e1:04:43:fc:5e:40:56:83:f0:
ee:af:10:20:73:d1:f1:9b:1e:0f:33:c0:e6:53:04:
e2:19:7c:1a:ce:7b:80:2e:56:b4:06:a7:05:48:c4:
87:a7:e9:95:c2:c0:b7:99:14:23:f3:11:86:e2:ee:
55:9e:f6:a2:aa:ec:21:f1:d5:75:dc:fe:c1:f5:30:
94:a2:15:aa:65:7a:5d:af:6b:58:a0:90:e3:17:ee:
c6:ba:b0:c2:2c:1f:ee:7e:57:4b:5d:30:c8:29:16:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:BB:69:8B:38:B3:0F:A5:BD:6D:44:15:40:D4:20:BE:76:8A:41
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2e8369e3-7a1d-4e37-8db7-c71339526d79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:6000::/40
Signature Algorithm: sha256WithRSAEncryption
60:b8:c7:23:30:26:11:b4:3f:1c:de:fe:95:83:55:40:d6:57:
88:da:c0:7b:af:cb:21:fa:c3:ac:9e:b6:d6:86:f3:eb:6f:fa:
57:42:1a:5c:56:ce:fc:0d:47:ed:b3:47:7c:bc:93:39:e0:67:
29:d4:69:46:27:2c:05:59:ce:e3:6d:7e:1d:e7:34:95:41:5a:
8c:f0:0d:5e:be:70:83:cb:5e:b4:95:bd:42:03:d8:c2:1a:34:
d0:88:c7:a8:b0:9a:a1:46:e5:d1:a5:71:69:25:38:0e:51:d5:
e0:06:40:49:53:8a:76:a0:8d:7c:93:38:2b:1f:92:43:07:cf:
1c:bc:95:a0:6d:08:7d:f2:6a:f0:87:d9:5a:17:33:50:2a:80:
cc:20:46:e5:dc:c5:d3:80:13:5f:8c:27:c6:25:31:61:d3:02:
f6:e7:7b:10:a8:6e:9e:6c:7d:11:ad:89:ed:98:fe:f3:6d:84:
ed:09:86:2e:1c:6b:36:67:8c:88:c2:29:5c:f1:56:1c:ae:fb:
f4:16:ae:6f:d1:3b:cf:c3:42:b3:f1:34:19:b2:e4:14:7d:a9:
f5:89:e2:09:a5:bc:b7:dd:0f:14:50:07:0a:39:0b:e4:4b:40:
b5:e6:eb:f6:51:67:83:6f:00:13:5e:84:11:49:08:1f:a4:4a:
f8:81:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:00:32 2025 by rpki-client