Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c97f681a-cc69-4f2e-a3db-335145b02e2c.roa
File: c97f681a-cc69-4f2e-a3db-335145b02e2c.roa (raw, json)
Hash identifier: fgWWFI+3EpmAyuezjEHuJyatPiCrflrUJ3I3Gq5S6xI=
Subject key identifier: 75:C6:CB:28:13:7A:DF:72:C0:05:54:5E:9C:36:A1:F4:D1:85:42:32
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 15D4B4561737B18F138C9911BF13980FD98FAB47
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c97f681a-cc69-4f2e-a3db-335145b02e2c.roa
Signing time: Thu 17 Apr 2025 20:36:58 +0000
ROA not before: Thu 17 Apr 2025 20:36:58 +0000
ROA not after: Thu 22 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06e:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d4:b4:56:17:37:b1:8f:13:8c:99:11:bf:13:98:0f:d9:8f:ab:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 20:36:58 2025 GMT
Not After : May 22 23:59:59 2025 GMT
Subject: serialNumber=dae28f13bd21067b3c5ab5412cf5e4b5f0762f99eeff2d5e1ccdb25fa3d52d03, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:7c:c1:88:e0:b7:a8:54:a5:ac:28:25:ca:
ad:e5:b7:20:86:49:96:d2:af:8b:05:c2:e1:39:7c:
3f:f4:60:74:ef:03:2c:5b:e4:ac:3a:a8:70:4d:13:
f7:8c:26:cb:f3:3d:7b:07:20:c4:7c:00:db:87:39:
7f:77:6c:e0:1a:a4:f1:98:00:7c:41:37:79:11:29:
e1:5f:b2:e2:bc:51:07:89:ed:e5:3f:a3:62:a4:77:
00:29:f5:46:e7:ae:9b:91:2f:4d:86:af:cb:f1:42:
42:3b:32:2a:e1:ec:4d:8b:27:9c:76:5b:5e:98:84:
71:93:b2:04:f5:56:a2:9e:1a:75:8a:a7:62:ab:26:
07:4d:99:75:e2:8c:28:b4:f6:17:11:61:f1:e3:a2:
45:32:92:1f:ec:e3:88:3a:57:ff:40:37:5d:53:13:
78:83:f6:0b:2e:4e:bf:8f:d9:8e:f3:03:b8:79:e4:
91:5a:0b:e6:95:4d:2c:e2:01:1c:60:5e:a4:c0:7c:
bf:84:30:c9:07:df:09:21:2a:bb:5a:3b:16:a4:c7:
4b:65:8e:30:ee:1d:a5:e0:04:ab:d7:c6:85:fe:ed:
3c:ef:da:83:5c:1d:0b:cd:6a:14:4d:b3:46:57:45:
17:ba:6d:08:f4:28:bb:c5:b6:8a:eb:f7:c5:26:72:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C6:CB:28:13:7A:DF:72:C0:05:54:5E:9C:36:A1:F4:D1:85:42:32
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c97f681a-cc69-4f2e-a3db-335145b02e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06e:8000::/40
Signature Algorithm: sha256WithRSAEncryption
b9:b4:35:29:f0:c2:b8:96:59:b9:11:78:b3:5f:c8:7b:12:a1:
4a:04:ab:3d:fd:d1:4c:f8:ba:26:c6:13:3c:a3:bb:f2:e4:d2:
d8:2b:8d:c3:0d:13:b2:b6:ba:96:6a:28:f8:89:09:7d:8b:c0:
39:a3:18:ee:44:7c:0f:c3:61:86:88:a6:97:5e:38:37:42:01:
74:69:9c:19:8d:e8:34:58:cd:76:f0:c6:d2:ec:bd:73:70:a8:
c8:21:d6:b5:03:e9:b1:c5:4d:aa:7e:65:b4:89:7d:2e:60:13:
54:ff:f4:a8:23:03:6d:88:f9:83:a3:77:6f:33:ac:53:53:59:
8f:03:43:a2:95:27:55:dd:6e:f3:df:6b:2d:c0:01:c4:c5:1c:
c4:1d:be:4b:d2:1a:3e:a9:61:20:0b:dc:e9:29:07:f9:85:fc:
00:6d:39:d6:3e:3a:e1:fe:31:ef:7a:3f:eb:29:45:d2:4b:2e:
67:0f:e5:66:b0:94:8c:18:34:2b:47:8e:26:bd:00:22:99:98:
84:b7:6f:b4:a3:ca:85:11:73:e2:dc:41:ed:4a:0e:a7:74:a2:
a3:92:6c:13:c5:a9:8a:ef:a2:b3:5f:25:82:91:56:c6:b6:b4:
1c:cd:75:87:37:2e:12:6c:96:c7:93:c0:06:34:c1:6f:0a:f1:
ca:1b:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:40:46 2025 by rpki-client