Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
File: 739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa (raw, json)
Hash identifier: jgxg+RJnfvPooxddQeQj8UcErO8tJFX2hidTDaB2uUU=
Subject key identifier: DD:74:08:37:6A:82:D1:54:3F:7C:BF:DF:57:17:4C:E1:A7:1D:B1:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BA36C8C091B389FFF4938FCFE69F0C4466C3EA1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
Signing time: Fri 25 Apr 2025 20:10:42 +0000
ROA not before: Fri 25 Apr 2025 20:10:42 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07e:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a3:6c:8c:09:1b:38:9f:ff:49:38:fc:fe:69:f0:c4:46:6c:3e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:10:42 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=3425fd18e2b450b46e478beb34c10bea1ab6b753991587a178b53be8e5489e37, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:eb:d9:aa:e4:4e:29:c1:ca:e0:bc:6f:6b:
e6:33:f1:6a:0f:2d:4e:f8:6f:23:0f:35:c7:20:6d:
34:97:d1:eb:f2:18:55:bd:dd:1d:b0:1c:da:42:0a:
84:1a:3d:4e:00:66:d2:85:11:66:f7:41:7b:13:fb:
f9:08:ad:e1:a6:11:32:b6:bc:01:d4:7c:b8:23:72:
60:15:e8:44:34:96:7d:e4:21:e3:0b:83:f1:a5:ba:
70:d4:af:68:e5:ff:94:28:7c:b2:65:fa:7a:b0:5b:
3b:63:20:90:1d:a6:f3:cb:c6:71:d9:7b:fe:5e:37:
97:00:ec:78:bd:0b:49:f1:8b:36:77:19:22:35:d2:
65:25:09:1f:92:6d:65:10:60:00:f7:ef:d7:3d:3a:
ca:45:92:0f:86:2e:49:94:3d:25:18:54:4b:09:00:
24:7c:a2:44:09:e8:77:22:c3:88:b5:2c:06:d9:9c:
60:1d:5b:81:da:02:df:4d:05:94:32:5c:6a:bb:2a:
45:69:67:32:e1:44:ad:63:ef:b0:7c:cb:76:0f:a5:
e4:17:ac:cc:5b:a8:33:d0:c8:ad:0a:05:7c:5c:fe:
23:b9:e9:82:02:d9:ff:20:f9:44:11:39:53:50:ed:
31:d2:17:20:f1:d8:26:e6:a3:7e:b3:51:8e:93:59:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:08:37:6A:82:D1:54:3F:7C:BF:DF:57:17:4C:E1:A7:1D:B1:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/739d8b08-f82b-4a2a-841c-2faf7a331ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07e:9000::/40
Signature Algorithm: sha256WithRSAEncryption
86:67:70:88:9c:21:20:1f:61:6f:4e:03:82:11:a9:e9:ca:34:
95:63:eb:77:8f:54:0e:fb:76:9f:8e:6a:fb:b4:80:e7:d1:73:
ab:35:fc:fb:cc:34:ac:03:df:8e:8e:e7:98:77:b4:d2:20:06:
d2:63:49:c0:d1:2d:7b:cb:43:d0:5d:30:32:60:05:a5:c9:70:
40:b2:4f:d7:54:3c:48:e9:fe:15:e1:11:e3:8d:5f:f5:69:14:
49:0f:c8:7a:b7:b4:91:a4:c0:46:eb:e2:07:d5:7d:35:ef:9a:
4d:a6:72:6b:fd:40:6d:ea:f6:00:d7:42:b2:d1:d7:ff:37:41:
41:60:66:d0:d5:f3:56:ad:88:0e:9e:f4:e0:72:e5:f6:51:6d:
18:6d:b9:ab:5f:ec:be:36:ee:9c:25:f4:64:84:a8:83:2c:17:
dd:c1:9d:2d:70:19:27:96:d4:19:40:ca:dc:f5:6e:45:e1:90:
c3:c2:6c:04:11:95:8e:31:be:74:20:94:30:2e:34:a2:48:4b:
bb:1b:3f:84:88:0c:7c:e9:67:e6:eb:ec:98:6f:55:54:96:e9:
10:37:c1:c4:70:c2:7c:9b:5c:e4:23:15:69:23:5a:c4:e4:9b:
32:df:90:ab:31:b8:b8:8d:5e:6b:2e:b7:9b:e8:b2:21:56:6f:
e7:d7:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:40:28 2025 by rpki-client