Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
File: 87659113-4050-43f4-ade6-cfd7a3483d5c.roa (raw, json)
Hash identifier: Qizk65gEAuOL/aY291fduXwcZ33pFvbAazjEjO1x7eY=
Subject key identifier: 8A:CF:02:1A:CF:03:78:F4:7C:6B:1F:69:2A:F0:2E:1B:5E:79:C1:63
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A1B16EC95ADC224EC22461E9F9F1845DC464851
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
Signing time: Fri 25 Apr 2025 20:01:09 +0000
ROA not before: Fri 25 Apr 2025 20:01:09 +0000
ROA not after: Fri 30 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1b:16:ec:95:ad:c2:24:ec:22:46:1e:9f:9f:18:45:dc:46:48:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 25 20:01:09 2025 GMT
Not After : May 30 23:59:59 2025 GMT
Subject: serialNumber=7220f17f0b7b3576875f5538dc81d7a870f50b76512fd578926f5584c2a35408, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:63:ce:b9:e0:59:76:94:48:a6:d9:88:5e:
49:8f:4d:2b:5f:55:a8:d0:38:7a:bf:50:2f:1d:54:
64:f2:a9:d3:f7:57:9d:07:49:10:6e:50:48:cb:5a:
77:94:0c:6f:c8:b9:3d:24:cd:08:83:84:2e:08:5d:
67:d8:59:3e:b4:da:2a:d8:43:c5:19:ed:19:09:d3:
a1:7e:c7:4d:d8:53:16:65:2c:c1:46:29:90:0f:c2:
cf:21:67:20:72:02:ab:eb:7e:14:51:7e:29:ce:4f:
6b:63:05:55:d0:e3:0a:b1:b4:f6:35:6e:ee:02:d9:
bf:69:f0:ff:f8:73:09:35:d4:95:07:97:5a:a8:b9:
ac:6d:a6:30:a9:6d:02:55:be:f3:a4:20:40:0c:07:
f9:35:a6:48:2e:0e:a3:d7:61:36:37:82:31:0b:5a:
06:57:6f:ab:79:c2:87:ec:27:f8:dd:a9:74:91:0e:
fc:73:32:b7:cb:42:e9:e2:30:27:e3:e7:e4:40:1c:
83:3a:8d:04:74:cd:52:e4:78:a0:81:c7:6f:fc:0e:
12:34:73:6b:2e:ae:e0:91:db:8c:fa:65:26:fb:03:
72:09:f1:72:1d:e1:04:73:2e:9d:70:e6:53:1c:3a:
ae:04:d9:9a:f2:d4:49:42:ab:ff:72:18:f0:80:1d:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CF:02:1A:CF:03:78:F4:7C:6B:1F:69:2A:F0:2E:1B:5E:79:C1:63
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87659113-4050-43f4-ade6-cfd7a3483d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:8000::/40
Signature Algorithm: sha256WithRSAEncryption
20:da:d5:5f:ec:e1:14:89:78:7c:cc:93:73:05:b7:9f:50:e2:
0e:3c:32:82:d1:db:40:a4:c9:1d:9a:09:dd:6c:b2:01:63:5d:
8d:79:69:87:79:46:4f:01:4e:39:1c:4c:c4:ee:9c:3d:74:e9:
6c:16:f1:fe:98:24:1b:db:9f:39:f5:a2:a5:eb:8f:e3:1d:0c:
1a:ad:ee:52:f2:28:10:d8:75:a1:f8:b8:b3:5b:c7:c7:c8:ca:
60:32:bf:7a:95:7a:49:c7:09:30:a2:3f:a7:6c:de:07:46:2a:
9e:f0:ae:22:2b:d2:a6:8c:98:ed:75:54:aa:ec:5d:df:c4:d7:
e3:06:46:39:24:28:b6:86:71:aa:ff:5d:22:6e:0c:2b:30:16:
15:ec:93:69:69:9a:4f:44:c5:ff:42:59:ae:51:bb:ba:5e:e7:
16:4a:67:df:e3:b8:66:84:0d:6b:2c:ce:d7:f7:cb:cb:b6:5e:
b7:b4:9d:d4:3e:5f:06:0f:d0:82:03:7a:34:ab:11:3c:84:40:
00:d2:19:29:59:76:c5:8c:fe:7d:ca:75:84:ff:ff:93:69:ed:
22:cb:fc:be:20:f2:e8:28:f5:f2:b9:1c:0e:3a:4a:63:0b:c0:
cd:30:48:e4:7f:12:c4:25:d1:09:f7:d5:c3:99:83:d9:44:dd:
e4:b0:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:20:45 2025 by rpki-client