Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
File: 56c31249-f32b-4fc4-a69f-07420913a101.roa (raw, json)
Hash identifier: 8OZz3/EXjt02yrWyviPk1IhfR+ibRqAabszLzLNrofE=
Subject key identifier: B7:50:48:D1:E6:77:7D:FB:7D:9C:2E:AB:5E:71:0A:3C:EE:A1:8E:BC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 379F3C8927EE52B1AFE50419000FD26CF47F4B91
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
Signing time: Fri 25 Apr 2025 18:50:11 +0000
ROA not before: Fri 25 Apr 2025 18:50:11 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9f:3c:89:27:ee:52:b1:af:e5:04:19:00:0f:d2:6c:f4:7f:4b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 18:50:11 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=9127ed9a4e31c2b75ec1bfe5a1a75ad823bdc57f4ec05a4c8e720f162e8dac72, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:e2:a7:5a:7d:ce:2f:f6:c8:2f:9a:93:c8:
6a:c1:f1:0f:12:65:80:ec:ad:c6:c9:a3:9d:81:cb:
d4:4b:21:ce:20:e6:1d:bf:e1:22:29:37:fa:8e:c1:
d9:22:34:f6:23:3c:93:9a:3a:3b:ab:9b:56:9c:1c:
8b:38:98:3b:25:03:64:13:5f:1b:c1:69:45:0b:ef:
9a:24:db:54:95:06:59:26:52:88:3f:38:cf:d2:51:
3b:d6:9d:fc:b9:3e:44:7a:b9:c3:15:f8:49:1f:0f:
ed:d4:31:4d:5a:be:84:4a:d3:d8:e8:87:ac:75:e1:
b7:a0:54:80:22:d8:b6:8b:10:25:2e:fc:b7:10:6e:
06:bf:65:54:b0:22:5d:d2:94:13:9e:8a:8c:86:ad:
85:7a:f0:3c:5c:7c:ee:4e:0d:85:68:45:db:92:1d:
d7:ff:7b:c5:7a:7e:66:b5:83:0b:50:2f:c1:90:05:
29:13:45:77:38:82:0a:2a:28:f7:35:03:0d:ce:f3:
5a:50:41:d7:f6:72:92:a9:f8:32:95:e7:9a:01:ab:
60:6d:54:6c:be:e6:c5:fe:0b:46:b9:cf:f4:70:f4:
3e:4d:ba:64:3d:b5:c9:7f:94:8b:61:4f:28:41:16:
81:45:4f:d7:0d:74:41:44:5e:d1:c4:a9:e4:a6:0e:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:48:D1:E6:77:7D:FB:7D:9C:2E:AB:5E:71:0A:3C:EE:A1:8E:BC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/56c31249-f32b-4fc4-a69f-07420913a101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:4000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:71:af:50:e5:db:af:a3:70:99:01:92:96:d9:da:36:13:ae:
55:c2:21:4e:da:2f:ca:e1:f4:6d:61:a1:7e:b2:46:99:94:f6:
5b:3c:0e:ff:24:9c:58:c0:fe:76:57:24:93:96:07:28:10:c9:
f1:c2:05:91:82:69:15:e2:05:93:ab:9b:98:e7:09:76:ba:17:
b7:50:3f:e0:99:3f:93:49:9f:b0:79:38:8b:7d:1c:0c:e2:01:
b7:5d:3f:5c:d1:8d:f2:43:b5:24:4a:1c:9f:73:9c:73:e7:ce:
fb:74:ec:5d:bf:2e:e3:07:0b:e4:71:f8:08:16:ae:85:14:44:
dc:21:b2:d3:b6:cd:ec:f3:ad:5b:a0:25:f5:57:54:e0:b1:c6:
85:92:b6:a7:42:16:1b:f9:db:51:8b:d6:dc:4d:ac:e7:3c:4c:
d1:96:21:7e:6c:1f:bd:50:af:9c:11:e0:17:d3:ee:7c:c2:c2:
b8:80:0c:13:1f:05:3b:e2:9f:69:5f:9e:a9:ff:9c:c4:48:23:
7a:78:2e:6f:ee:81:82:8e:03:4e:45:0a:74:cb:09:b1:41:e6:
73:1e:c3:04:8a:b2:25:b6:ca:33:46:7b:9e:e6:8f:75:b6:83:
29:14:aa:bd:df:d6:ef:ac:4b:4a:50:53:5a:cf:23:4b:28:e7:
0f:1e:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:02:13 2025 by rpki-client