Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
File: a6c6065d-431b-4a4f-98c4-f607358ee480.roa (raw, json)
Hash identifier: VF4+iUZm+I9ctoSYe8dvBHaO16NR9AUV8l7AQ6/lOcY=
Subject key identifier: 78:E4:1D:AF:03:12:2F:E0:AE:41:7D:E0:1A:7D:1C:F5:E5:43:40:5D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D8CD75D4C8F88E7CB55098252144165451EDCAC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
Signing time: Mon 28 Apr 2025 15:41:11 +0000
ROA not before: Mon 28 Apr 2025 15:41:11 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2a05:d06f:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8c:d7:5d:4c:8f:88:e7:cb:55:09:82:52:14:41:65:45:1e:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:41:11 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=4c9d610caaa215e934ce3b366b0a131db2e101ab1210a755268da373eec99f58, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:04:1a:49:c2:4f:69:ee:03:16:3d:62:bc:
2b:fb:22:d7:4a:ae:88:ad:54:5f:b6:c4:3b:d2:e3:
ab:e1:0b:fc:9e:df:f1:6c:74:f6:de:8d:46:aa:74:
ca:4b:4c:3a:81:04:a3:6f:bf:82:f1:d1:26:2b:14:
42:9a:25:bf:a4:b7:18:ce:5b:ea:58:ea:6d:5f:a2:
e5:ae:14:a9:6b:d3:f2:54:99:0e:92:c3:ac:6c:5e:
cd:96:6f:c2:c0:5c:10:54:f4:c6:24:55:30:1f:59:
4a:3b:db:ad:d7:bb:d4:c0:15:54:60:52:7b:08:39:
2c:89:b4:ba:55:b7:21:de:69:ed:9b:0e:76:d7:3d:
82:24:f4:37:ba:6f:cd:21:6c:2b:ed:c0:39:83:a2:
fc:87:32:44:9b:ee:91:d7:bd:41:23:ee:4b:00:b8:
3a:4d:f3:46:fc:5a:ca:7d:1e:c7:76:4e:02:2a:47:
0f:e1:28:d1:d8:ad:6d:ec:ac:82:92:ce:3d:ee:52:
a4:db:4a:6b:d0:b0:6d:ff:87:a4:87:d9:a9:00:e8:
5a:19:90:73:9b:3a:5a:12:1f:e2:aa:df:2d:75:6b:
a8:b0:42:5b:99:5a:65:77:22:93:56:00:3e:ff:1d:
7a:3a:03:a4:f8:0a:1a:7e:f5:2f:0b:b3:53:ac:21:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E4:1D:AF:03:12:2F:E0:AE:41:7D:E0:1A:7D:1C:F5:E5:43:40:5D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:c000::/40
Signature Algorithm: sha256WithRSAEncryption
52:a6:63:26:2d:76:7a:39:17:a9:96:d5:13:be:54:75:cb:63:
52:4a:1f:d9:b0:51:b6:41:3a:b8:81:58:78:53:36:f0:4e:50:
b2:99:60:39:60:96:89:9c:84:0e:33:b2:5e:6d:be:e4:4a:46:
ac:fe:29:90:e5:5f:50:76:dc:80:dc:55:e3:57:6b:e2:a1:cc:
55:ac:6a:46:59:ab:19:61:d2:e3:f3:f6:2f:a4:1a:c8:20:bd:
dc:00:9d:6e:d3:77:e2:24:b6:47:df:44:16:cd:1c:0c:72:d8:
7c:99:35:61:d1:1d:2f:c9:9d:f2:a8:9b:75:de:d2:07:8a:fa:
f1:79:85:12:eb:78:32:aa:96:00:8c:89:93:1a:2e:88:30:d2:
51:5b:e9:fd:c0:b0:12:90:5b:8f:cb:fe:d0:54:9e:f6:94:ab:
67:f8:36:a6:fe:77:be:c7:14:f1:5a:98:e7:f9:3d:7e:97:3e:
f0:51:08:35:56:83:d7:2f:6d:b2:5d:4d:0a:03:d7:d7:50:bc:
8b:3a:fe:be:30:75:43:37:87:4a:11:71:e5:79:f4:48:7f:bd:
e1:41:b5:bf:2b:a0:7d:f9:83:be:c8:2b:94:bd:b5:87:75:a2:
60:55:eb:33:b7:2a:33:34:53:b6:9e:df:b3:92:dd:62:33:f9:
87:21:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:42:04 2025 by rpki-client