Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
File: 83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa (raw, json)
Hash identifier: onqlcx8xi6KlerBHg/byPKzCflb9BqYtwB+UpVlNq7M=
Subject key identifier: FD:B0:E6:79:53:13:CF:F3:36:37:2D:79:71:1D:31:DA:01:E0:4F:B0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E0A4893F69527FF7AC01EE9E7390B9065C33D29
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
Signing time: Mon 28 Apr 2025 15:50:08 +0000
ROA not before: Mon 28 Apr 2025 15:50:08 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:0a:48:93:f6:95:27:ff:7a:c0:1e:e9:e7:39:0b:90:65:c3:3d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:50:08 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=2907808bd4b8052390187e6a017c8554daa8d6e82a1f12cbc2b5a70a4d73c0e9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:62:55:51:f5:82:f1:8b:4a:f4:f3:f3:29:
08:9b:4f:bd:b2:8b:5b:99:29:a1:74:0e:fe:40:fd:
ca:9f:4f:0d:61:da:96:70:68:fd:25:db:d0:1e:91:
e0:86:59:b9:b9:da:33:d6:ac:ad:de:f1:bf:a2:e7:
4e:91:de:8f:ea:df:1c:b5:f3:4b:72:fa:3f:f2:62:
29:c7:11:a6:40:db:4c:a2:75:fa:5a:9a:c1:dd:9b:
54:94:48:f3:00:8a:02:64:93:0e:d0:9c:1c:b0:a0:
67:ae:e7:e3:e5:d3:00:c6:0a:86:a4:5e:2c:96:8b:
28:e6:f0:89:b2:82:e6:14:ec:6a:46:a9:79:f1:7d:
4d:9c:82:18:5f:1b:e2:95:7f:e4:7a:1e:c7:0f:5f:
b2:72:26:fc:92:f6:59:05:0e:69:8d:b0:a3:19:7f:
62:12:ac:24:31:0c:bc:21:d4:6c:0e:99:6a:c0:93:
b8:85:3f:d0:11:91:46:c9:7e:a2:c7:eb:a1:2a:37:
20:c2:27:12:02:5d:cf:3d:98:78:16:f2:0c:32:74:
05:eb:56:9a:cc:b4:42:bf:08:52:5e:69:21:dd:3d:
fa:b3:9f:39:0b:41:5c:4e:a5:01:97:41:1d:f6:4d:
c1:35:00:4c:0c:44:d3:f9:1a:49:08:34:ae:bb:67:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:E6:79:53:13:CF:F3:36:37:2D:79:71:1D:31:DA:01:E0:4F:B0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/18
Signature Algorithm: sha256WithRSAEncryption
35:5f:8a:7a:92:12:bc:8a:9d:fc:b9:08:e0:98:10:5b:e6:81:
0c:fb:7c:da:9d:02:24:50:ee:ad:d1:bc:b8:ca:79:8c:0d:7a:
9d:57:db:6f:46:9f:f4:de:6f:b3:fb:cf:6d:64:53:fd:ff:a1:
20:78:89:b5:c9:6e:68:a4:2b:e6:49:fa:6c:46:26:85:1c:b4:
a2:70:8b:75:19:da:09:ef:51:05:91:09:37:e4:6d:ed:ea:fd:
d7:8b:94:6d:e9:70:e4:b9:31:51:98:e1:95:c8:85:c1:2b:e2:
30:d4:e9:ae:da:be:9b:45:3d:d3:45:a0:23:f7:56:a7:05:f7:
b8:a8:92:bf:b9:c9:06:8d:94:8b:23:b3:f5:79:f7:bd:65:b0:
bc:39:da:de:4c:4f:c6:b5:36:5a:36:bd:8b:16:37:13:87:25:
10:b6:e0:bc:20:51:8c:3f:69:2d:6d:87:f9:03:34:c5:67:ba:
4b:65:97:20:9f:b0:21:46:06:e4:fc:f0:43:43:f8:fc:cb:da:
a6:ce:34:41:29:29:2d:95:ab:4e:62:7f:f9:f8:8b:33:96:eb:
c7:48:e0:70:42:d3:c3:fd:0e:bf:96:d2:17:65:44:02:ec:cc:
45:11:b2:b4:74:d7:df:33:7e:63:6c:87:39:4d:2c:a7:af:df:
bb:79:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:21:00 2025 by rpki-client