Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
File: 92f142f2-bd1c-4295-a008-efcde04ceb18.roa (raw, json)
Hash identifier: 6KaXQ+uqngbkG3iTag7iyacRISOMb+kwZ01tYLCzegE=
Subject key identifier: 88:F3:96:D4:3A:22:F1:D0:D5:0B:6A:4F:BD:15:3E:4E:94:FB:8E:27
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E8C0E0A5A1895CE2236C42974A5CB794F8213EB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
Signing time: Mon 28 Apr 2025 15:50:13 +0000
ROA not before: Mon 28 Apr 2025 15:50:13 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 79.125.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8c:0e:0a:5a:18:95:ce:22:36:c4:29:74:a5:cb:79:4f:82:13:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:50:13 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=1dd5d68f2b40a9ec5a8204ce0ef0b04324201388b6b4695c6f888e07d7888e97, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:a4:89:69:64:7e:1e:5f:e8:9d:ed:26:49:
fc:da:81:95:55:35:69:66:1e:20:7a:01:c6:ca:6c:
55:41:9b:f1:68:05:7a:30:77:ae:0b:84:20:a2:77:
a3:13:42:74:43:5c:4d:57:69:9b:cd:88:b1:2d:b5:
79:80:6e:94:6b:41:ab:ff:dc:17:b4:60:3a:a6:33:
4f:93:7b:6a:ec:be:d7:98:30:29:d8:fb:36:47:e5:
ef:fb:0b:d0:83:87:9d:05:a2:e9:70:6e:83:5b:ce:
b1:82:c4:86:b3:2f:4a:c5:07:b1:aa:59:41:25:78:
af:d8:39:60:f0:5b:71:0b:b7:cb:21:fb:a0:79:19:
79:b4:d4:2b:2e:b1:b0:6e:34:4c:4c:d5:7b:5b:d7:
91:bd:89:37:79:f2:c8:46:76:99:87:53:ae:70:46:
67:76:dd:18:a9:54:f3:ac:de:f4:7b:21:28:d0:67:
cb:0e:b0:70:32:1a:19:22:b3:de:95:15:a6:a7:fd:
82:42:d7:d6:19:11:ff:0a:e7:9c:d1:56:5c:05:29:
b7:9d:97:d9:63:80:06:7c:35:1e:49:5a:78:ad:13:
55:bc:a2:1c:7e:a2:d5:00:ca:00:ce:bd:a4:b0:3e:
65:44:23:6d:cc:f6:da:ff:ad:17:ac:c7:ca:bd:4b:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F3:96:D4:3A:22:F1:D0:D5:0B:6A:4F:BD:15:3E:4E:94:FB:8E:27
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/92f142f2-bd1c-4295-a008-efcde04ceb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.16.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:24:7e:60:c7:84:1e:5f:32:13:5e:6e:b6:dc:85:14:13:3f:
2e:d4:00:e0:a2:92:aa:f0:b4:a7:1f:b2:6c:64:56:7e:b4:eb:
37:21:3a:98:e7:cc:1e:d7:12:55:b6:a9:94:76:89:8a:ae:e1:
9b:1a:1c:8f:09:d5:55:84:5b:0b:38:08:d3:87:77:17:66:18:
64:48:60:f2:e1:b4:2c:d3:5b:5d:cb:ec:76:16:a7:5a:29:9a:
e7:aa:d2:54:3b:18:ac:f0:d5:4f:7c:17:8c:e2:79:10:48:0c:
b0:54:16:08:5a:12:e8:e2:60:d6:e3:76:f4:57:69:12:5d:e9:
5d:23:25:8c:52:f3:d2:9c:d0:f0:22:e4:25:d3:d0:ad:01:ba:
5a:eb:03:8a:6a:9f:c8:d5:34:3c:00:d5:f8:48:20:86:11:ea:
f1:58:33:bf:21:d2:3a:09:d2:47:65:7f:4b:d9:9e:f9:00:d5:
70:ab:a6:79:2d:10:28:ed:23:26:84:f6:37:d4:19:de:29:59:
c8:e0:b0:93:0b:e3:32:ae:02:dd:2e:5b:01:ce:63:66:07:a1:
cf:b0:ac:a6:06:48:91:06:87:34:10:a7:06:36:ae:98:8d:25:
d2:04:41:40:ea:a5:4b:95:fc:18:ce:89:9c:1c:87:b8:9c:2a:
96:27:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:33:30 2025 by rpki-client