Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/027dccf7-9d90-4ef7-ab83-7ec3364cbd2e.roa
File: 027dccf7-9d90-4ef7-ab83-7ec3364cbd2e.roa (raw, json)
Hash identifier: iWn0fV+dRQFJr0QvbQkbo/Y3wPAfB1zrz+tnhLNAIrI=
Subject key identifier: 42:0C:81:DE:D3:7A:3C:72:15:9E:E8:3E:99:DF:86:43:40:E2:59:D5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 16B852F6A50005763CE2B311F1520AE61657A142
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/027dccf7-9d90-4ef7-ab83-7ec3364cbd2e.roa
Signing time: Fri 24 May 2024 00:00:00 +0000
ROA not before: Fri 24 May 2024 00:00:00 +0000
ROA not after: Fri 28 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b8:52:f6:a5:00:05:76:3c:e2:b3:11:f1:52:0a:e6:16:57:a1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 24 00:00:00 2024 GMT
Not After : Jun 28 23:59:59 2024 GMT
Subject: serialNumber=40fd08b726d1f1fa769aa0219167a0525ba813747d574b97a9fe61b8452341ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:d3:7f:7a:cf:de:72:17:ab:b3:44:00:b7:
e6:b5:e5:34:fe:b1:49:38:1e:74:90:7d:ab:6b:b6:
b3:cd:56:b9:dc:4e:89:45:9d:ff:bb:d1:b8:39:fe:
56:35:90:3e:ed:4f:4f:89:e1:b4:c5:3f:fd:d1:38:
88:1c:26:d0:7b:50:d8:b4:61:13:31:d6:d7:d9:d6:
54:9c:20:7c:84:70:b0:3a:6a:79:66:35:e4:7b:b1:
40:d1:3c:89:ff:7c:bc:63:9c:53:73:0c:cc:8c:ed:
c1:39:1e:49:38:61:f5:b9:6c:30:53:30:58:ea:73:
e6:3c:60:1a:ef:34:c7:62:90:25:aa:90:da:a2:8e:
05:49:36:36:c7:e4:a2:4b:fc:03:35:44:bc:f1:e8:
e8:d9:d7:80:8d:29:1a:51:67:d4:2d:10:32:a8:df:
d9:2b:72:dc:2e:dd:9b:5f:ad:a1:1e:4a:aa:8d:d5:
d0:ca:13:1d:29:79:85:11:b3:aa:a9:61:6c:f1:15:
64:84:9d:d2:5d:37:91:80:79:79:da:24:6d:52:68:
8c:3c:e3:48:81:d5:2d:11:88:8a:d1:90:6c:98:ab:
6a:64:8e:8d:5b:4a:d9:4c:18:46:ee:e8:7e:6b:ac:
48:2b:a5:59:ba:9c:8a:c0:2c:60:bf:4e:e9:f8:7b:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:81:DE:D3:7A:3C:72:15:9E:E8:3E:99:DF:86:43:40:E2:59:D5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/027dccf7-9d90-4ef7-ab83-7ec3364cbd2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:a000::/40
Signature Algorithm: sha256WithRSAEncryption
0c:3e:7f:5c:1e:a4:b2:0d:4b:38:2b:4f:e7:89:04:98:49:71:
0e:3c:89:27:f8:0f:33:24:d7:55:93:34:24:60:61:b4:4c:1b:
b2:d2:dd:a8:fc:8e:ed:63:50:3e:5e:3d:80:d9:b2:91:65:d3:
39:11:c9:cf:ca:b9:bb:15:a6:13:c9:3d:d7:a5:ed:d8:65:8c:
e8:fc:8d:2c:be:0c:04:30:09:42:5d:63:d1:a5:a4:4d:8d:c5:
b4:42:71:db:ba:0a:66:bc:7c:0c:7b:9c:6f:a7:48:71:b3:bc:
96:7e:a1:b9:c0:20:74:0a:62:43:c8:93:69:4b:7b:50:bc:28:
10:21:99:78:b6:31:3c:87:b5:56:83:93:eb:2b:b9:c3:fe:c4:
3b:6d:6d:96:7a:3b:53:7e:50:f4:45:16:91:89:2b:a4:48:8f:
0a:e1:9b:75:9f:0b:ff:14:7d:30:e0:88:b3:30:42:ef:3f:51:
1c:46:3f:ca:95:54:4c:0b:0f:5e:6d:04:38:b8:9e:bf:f7:b2:
b6:e1:c0:13:3f:86:c7:34:af:00:e4:41:d4:32:03:b4:28:77:
e8:b2:55:c8:a4:9d:b1:ef:c0:dd:39:f8:1b:b3:43:26:e1:eb:
88:b2:a3:02:dd:d8:0a:ae:c9:25:96:86:29:d3:27:b5:75:38:
86:c5:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org