Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
File: e2212154-4339-4293-b1a8-15f06519a708.roa (raw, json)
Hash identifier: IMjCMJx9MzEdrCaRPfNHqP1zaqmxcnN1XnwQskFLHQY=
Subject key identifier: C4:37:C7:69:B8:F6:97:FA:0B:5E:F0:AD:89:55:25:A1:35:A9:3F:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D9DE98DEDC04B09F985EA6013CF01A180991E50
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
Signing time: Mon 28 Apr 2025 15:41:05 +0000
ROA not before: Mon 28 Apr 2025 15:41:05 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9d:e9:8d:ed:c0:4b:09:f9:85:ea:60:13:cf:01:a1:80:99:1e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 28 15:41:05 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=78cf4a268bd776dc842de358dfcb90041ad6cb46e28a3cbed8a338f441d7bbea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:37:dd:df:0c:9e:8b:aa:5a:48:96:30:7f:
01:63:ea:30:03:5a:f1:df:97:0b:b1:0b:18:86:08:
90:9a:3e:04:66:05:b2:1b:84:73:e9:57:01:0d:21:
d5:9b:cd:9b:ee:54:2d:51:ec:c3:97:53:d5:6d:60:
16:d7:79:9d:d2:e5:e8:a6:08:07:1f:1e:45:76:3d:
19:3d:71:9b:b4:52:7c:29:d9:ba:57:1b:57:b3:7f:
a6:d4:67:34:7c:7b:92:26:15:0b:ac:5c:c1:88:2c:
56:86:57:6c:81:ff:fd:47:ef:69:ee:c2:28:d0:34:
f6:28:c9:5c:c6:30:f7:b9:ff:7b:3f:bc:16:d9:27:
38:96:ad:8c:41:ac:54:73:c4:79:b5:3d:93:a6:cb:
37:8c:97:9f:c6:c5:cf:76:b9:05:4f:f5:6c:5c:c6:
56:03:83:f9:17:03:82:ed:9c:fb:19:b5:1d:85:95:
be:67:9f:ff:4a:d9:c6:99:9e:c9:02:40:86:80:28:
e3:33:19:d0:22:89:2d:e2:61:58:c1:d2:64:12:2c:
15:47:6d:5b:f5:f7:d6:ba:8a:15:9a:35:82:ec:2c:
7f:45:9d:ad:1c:5d:54:27:5f:99:96:ac:4d:a6:75:
e2:5b:5d:ad:77:30:59:b6:5c:a9:f8:4c:c7:5f:4c:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:C7:69:B8:F6:97:FA:0B:5E:F0:AD:89:55:25:A1:35:A9:3F:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e2212154-4339-4293-b1a8-15f06519a708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:a000::/40
Signature Algorithm: sha256WithRSAEncryption
61:fb:72:e4:0d:ca:fa:95:ef:e1:58:5c:8f:e8:04:38:c5:0b:
2d:aa:e2:37:33:92:89:3a:69:e1:cb:50:dd:10:91:c6:6b:ce:
48:03:d8:c3:13:21:3e:7c:50:9d:0c:f2:bd:79:aa:a8:6f:91:
cf:08:ca:ba:22:8f:c5:e5:01:72:17:62:8d:de:84:c6:37:e3:
8e:9a:60:81:51:88:70:1f:54:b7:7f:fb:88:ab:67:83:5f:2f:
46:7a:59:80:6a:3e:a6:35:c4:e0:2e:3a:62:59:b6:44:13:86:
32:85:2d:d5:3b:9d:37:ea:1a:ef:ee:a9:71:62:31:3e:93:5e:
42:e3:9a:e0:97:2d:07:54:78:53:8d:98:b5:a0:8a:b8:b7:f4:
a5:c9:84:65:02:05:c1:48:7d:7a:a0:d9:2d:e4:5d:5f:8c:18:
a2:24:46:16:1a:a5:4f:1b:09:b9:46:dc:a3:4d:38:59:fa:b3:
ac:e9:6b:82:bc:f5:21:f5:c2:6a:bf:7d:f1:90:f8:f6:56:65:
e1:93:96:53:91:b5:4d:78:a7:1c:b3:65:69:15:8f:c7:55:99:
fb:3f:b8:33:b1:de:46:41:0e:38:6a:af:d5:68:79:1c:89:ac:
5c:7e:68:40:de:24:c7:2b:34:ab:40:e0:4b:1a:5c:e4:53:42:
26:6b:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:23:32 2025 by rpki-client