Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1f04e42-73c1-443a-82e2-623f7a02136a.roa
File: d1f04e42-73c1-443a-82e2-623f7a02136a.roa (raw, json)
Hash identifier: aejI1vCysspyJmLIQapkqZO0CtxnU9uOOGcJ9UdHi2o=
Subject key identifier: DC:E3:65:50:11:9B:F4:40:E9:08:39:CE:03:92:94:29:EB:58:54:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2F9D4C8696F3FE43ACA9DD3A50BD88268547535A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1f04e42-73c1-443a-82e2-623f7a02136a.roa
Signing time: Mon 21 Apr 2025 18:40:25 +0000
ROA not before: Mon 21 Apr 2025 18:40:25 +0000
ROA not after: Mon 26 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9d:4c:86:96:f3:fe:43:ac:a9:dd:3a:50:bd:88:26:85:47:53:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 21 18:40:25 2025 GMT
Not After : May 26 23:59:59 2025 GMT
Subject: serialNumber=44aa7e49ab1d84170fa4ccf6d66db340ae333cd35b28df77f4b9b4a7844bd529, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:27:53:76:b6:51:4c:c9:91:36:67:3a:4e:
10:f6:6f:10:e5:63:5e:3c:79:80:74:12:47:03:da:
c0:59:a3:b6:31:21:7c:13:45:6d:e8:36:a2:67:ab:
b0:fa:53:85:36:5f:fc:0d:01:2f:d1:21:dc:15:68:
8b:d6:cc:19:b2:6b:c8:23:0e:64:6c:04:8d:5d:ca:
f8:34:89:6e:54:92:b2:ea:7b:68:6f:cd:5a:09:ff:
25:c2:91:c3:bc:09:ff:39:96:f9:5a:1d:6a:60:e5:
0d:17:7c:dc:19:dc:2d:61:0f:aa:a2:d6:d6:89:63:
3b:20:78:cf:a2:45:40:04:d8:eb:70:44:d0:eb:75:
23:f6:61:c9:1a:0b:74:ee:fe:35:0b:bc:bb:7a:34:
64:fa:f1:f8:27:18:18:62:3a:bb:aa:38:46:bf:ee:
c0:24:e7:b3:b8:1e:e7:a0:08:32:da:c8:84:75:47:
32:3a:e9:2f:32:7a:81:c4:17:3b:97:f5:8c:34:42:
84:86:a2:1f:10:9e:32:ae:e0:7d:f0:2f:d6:3a:bd:
aa:92:9c:24:03:16:e0:63:f6:30:c2:92:94:96:18:
49:82:3b:69:40:06:be:42:58:9e:49:44:a4:bb:a9:
28:20:2e:e1:67:f6:ef:a9:ab:6f:00:7c:80:76:5c:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:65:50:11:9B:F4:40:E9:08:39:CE:03:92:94:29:EB:58:54:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1f04e42-73c1-443a-82e2-623f7a02136a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:800::/40
Signature Algorithm: sha256WithRSAEncryption
18:69:1e:28:12:60:86:1e:83:c7:e2:52:1b:cd:22:9c:db:08:
31:37:7d:61:6b:67:14:08:0f:b1:dc:04:b5:cb:98:c7:82:1b:
cf:f2:1d:28:92:21:63:be:2a:46:9b:1b:c1:14:b8:50:b5:bc:
61:a1:d8:76:d0:92:0e:15:f6:36:d1:d9:42:23:e5:5a:c0:a8:
80:46:b7:7a:ac:b9:9d:f0:96:82:56:82:7e:20:c0:51:91:f6:
21:25:c0:e9:99:31:e8:87:95:e4:64:34:a3:77:22:22:57:35:
7d:f7:2d:16:34:23:e0:a6:e7:6f:b1:ce:05:2e:e5:c8:1f:9b:
34:08:40:15:76:57:0c:10:70:c1:12:6b:7c:92:f6:a4:f6:7f:
c9:e1:c1:b3:63:ca:ee:ce:b7:68:45:1c:df:5a:04:15:9c:7d:
b4:49:8b:28:2b:c6:2d:55:be:3d:8b:5d:bc:8f:a9:f5:a1:72:
a5:53:93:37:d8:c7:87:0f:1d:0b:fc:f0:cd:9b:58:10:26:8e:
bd:9d:b2:37:1e:53:70:6a:4b:9d:7b:a8:5c:c8:1c:a8:4c:a1:
99:16:a8:e0:8a:57:34:3b:a1:39:f1:e8:96:4d:49:67:4a:30:
b3:5e:01:16:a9:85:4e:47:08:3b:9f:fa:e9:04:e0:2a:9b:eb:
36:d5:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:46 2025 by rpki-client