Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bbd25c8-3460-4cc0-b71f-27d04e964e37.roa
File: 7bbd25c8-3460-4cc0-b71f-27d04e964e37.roa (raw, json)
Hash identifier: JYoo+CLDDx6OKlthdNt7IF5gqUBXLH3JTTv8MRuYHbg=
Subject key identifier: C9:8D:FD:11:18:B6:12:B6:54:36:87:81:69:5B:68:46:D8:CA:E9:F0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 560D5A286BBD8C731EBB3FB82BC4897DD30DCF13
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bbd25c8-3460-4cc0-b71f-27d04e964e37.roa
Signing time: Mon 28 Apr 2025 15:40:57 +0000
ROA not before: Mon 28 Apr 2025 15:40:57 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d059:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0d:5a:28:6b:bd:8c:73:1e:bb:3f:b8:2b:c4:89:7d:d3:0d:cf:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:40:57 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=17a52bf742df380f7af233876d8f22be92e4b920e482600a13e78d2aa0d772c1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:ea:6f:0a:c5:d0:e0:5d:9d:bf:ba:16:ad:
ab:dc:bf:6f:6c:e1:40:da:62:a0:d0:38:25:ef:80:
12:c2:1f:60:2a:0a:62:8d:bc:35:c8:5c:9c:ba:62:
5c:d1:e0:fc:38:3b:88:5d:2b:4b:be:cd:4e:90:c7:
22:58:b1:26:47:c4:45:3f:47:a5:cc:bc:b1:a2:4d:
2c:ba:2b:93:3e:f5:d7:ba:8a:27:9d:d8:21:1b:20:
b7:1d:ee:3d:fe:f2:6c:ac:61:82:eb:9b:39:65:74:
74:44:49:a3:0a:20:67:e8:89:22:16:e5:8f:98:82:
cf:c1:17:f6:7a:f7:c5:5f:dc:bc:ad:75:a5:b1:09:
94:25:43:06:27:7d:93:66:98:3d:5a:d5:64:a3:28:
14:59:1b:3b:0d:1e:60:e1:56:0a:cb:fc:51:c4:42:
dd:71:1f:f1:44:71:c1:00:58:54:20:94:cc:ee:65:
c1:ab:f2:e1:17:2f:cd:ac:dd:ab:04:5a:13:d0:4d:
58:36:6d:44:f9:98:76:5b:4b:a6:23:ad:86:a1:0f:
36:43:e4:80:7e:22:4d:4b:6d:6b:b0:65:55:66:0f:
b7:5b:b3:5c:e1:ad:10:6e:43:a4:ad:9b:8e:bb:41:
45:7e:b9:92:7c:d5:c1:a2:f9:21:95:fa:fc:db:ae:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:FD:11:18:B6:12:B6:54:36:87:81:69:5B:68:46:D8:CA:E9:F0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7bbd25c8-3460-4cc0-b71f-27d04e964e37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d059:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b9:d0:3c:78:a0:21:55:f0:8d:bc:eb:6e:c6:03:7c:52:9f:83:
62:09:46:16:dd:69:93:62:8b:a8:71:9d:4f:24:91:84:61:60:
ab:3e:83:fd:6f:2a:68:2a:dc:38:6d:9b:17:12:de:51:3e:8f:
e6:ff:39:3e:ae:a9:c8:56:94:a2:88:dd:1e:0d:91:35:eb:db:
b8:e4:9c:c3:c5:74:8a:f4:cf:e9:0f:0b:e8:3b:12:df:bb:cf:
2d:ab:73:60:13:eb:0c:2d:68:98:23:44:72:bc:17:9f:ac:86:
d9:ac:df:b5:77:69:0d:c0:a7:99:7b:01:ca:96:cb:ba:15:c6:
12:af:66:0f:64:13:b2:d7:41:dc:10:af:5f:84:c1:cd:c1:f8:
37:a8:80:66:25:3a:30:77:52:bd:4b:3f:07:8f:29:3d:0a:25:
f5:cb:93:98:36:f0:0e:7c:12:fb:c1:3d:03:e2:17:61:3f:fe:
2a:93:cf:cd:02:dd:02:e4:19:a5:53:ea:9f:d8:74:08:c7:06:
73:36:f8:91:6c:4c:37:18:32:13:be:25:7c:68:5b:2c:87:ef:
69:f0:07:ea:9f:28:9a:60:2e:a0:0c:ed:a8:8d:8e:39:6c:42:
d7:5e:a9:cc:de:63:9b:ca:27:7e:4a:39:8d:d7:c4:2e:20:66:
0f:26:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:32:46 2025 by rpki-client