Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
File: 15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa (raw, json)
Hash identifier: w89/q6JVhyU/RaV++Zx0h/0dW/ChXfOkrPcBddS9O6s=
Subject key identifier: A6:7E:8A:56:04:14:0C:D7:5E:CA:D2:D4:DE:A8:DC:98:0C:18:7F:AC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 088F000205932F567FB71DBFEDE96A9BB260A758
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
Signing time: Mon 20 May 2024 00:00:00 +0000
ROA not before: Mon 20 May 2024 00:00:00 +0000
ROA not after: Mon 24 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8f:00:02:05:93:2f:56:7f:b7:1d:bf:ed:e9:6a:9b:b2:60:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 00:00:00 2024 GMT
Not After : Jun 24 23:59:59 2024 GMT
Subject: serialNumber=1f23d5df24d8b41e5e25dbcdfb920ecb5a4bc4daa655e26afbfc1e1bb35352ed, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:05:84:e2:ca:60:5f:41:bf:32:87:5c:a8:
19:e1:9b:ea:32:a4:90:63:db:a8:7b:bb:30:94:34:
ff:c8:aa:f2:fb:a0:a1:22:ba:4e:48:cc:ee:60:0c:
40:f6:fb:ed:76:ae:33:a6:f3:7f:ee:07:25:3f:c8:
e3:ad:ee:a1:37:e5:56:16:68:4b:17:71:99:0d:3c:
12:0c:d4:74:18:eb:3f:9b:9a:8a:81:33:79:83:5f:
15:80:cd:d8:23:93:d6:37:09:08:19:ef:a1:06:44:
a0:bf:2c:e6:e2:46:9d:44:60:ec:87:f0:f7:f6:11:
06:dd:57:a4:a2:0b:73:3f:3f:fa:c7:80:97:9a:72:
5a:83:55:eb:df:d8:28:78:47:0a:bf:b5:5e:cc:25:
70:18:f9:8d:3e:95:a6:a5:2f:cb:c1:2e:26:2b:7e:
36:6e:f7:58:40:f5:e0:8d:b0:c8:19:df:24:41:4b:
6b:9d:d2:ee:fa:f2:ea:46:c3:96:df:74:62:15:ba:
62:3b:78:43:aa:90:e8:5d:5a:dd:87:15:1a:db:05:
1b:12:52:16:ef:32:5d:10:a5:de:e5:b2:5f:70:10:
65:9a:fc:0c:66:b3:a1:38:5f:93:3c:f7:b8:f3:08:
7a:b9:cc:63:3c:35:4b:c0:20:77:9b:67:cf:23:81:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7E:8A:56:04:14:0C:D7:5E:CA:D2:D4:DE:A8:DC:98:0C:18:7F:AC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/36
Signature Algorithm: sha256WithRSAEncryption
6f:e4:aa:3f:48:b8:bf:20:f4:e9:e4:e2:22:be:8d:ad:ea:89:
00:a8:be:c0:9c:60:e8:f2:c9:45:af:a4:70:cb:f1:71:73:e6:
eb:07:3b:15:07:dd:ff:b4:21:26:b3:3d:94:cd:c4:61:4f:5a:
bd:d7:a8:48:72:96:35:2e:9e:3c:fa:33:44:14:09:1d:d8:b3:
48:63:8c:01:c8:bc:08:b6:36:ed:ee:58:3e:1d:e1:ce:c0:ad:
c9:f8:6f:62:93:7a:fe:93:11:71:03:01:5d:71:cd:b1:e8:ea:
04:b0:d8:c8:67:09:f7:90:52:db:e4:cf:16:00:e3:1a:27:48:
23:e3:ea:18:cb:8d:cc:f9:7b:a9:5f:08:44:99:12:00:09:26:
f7:79:71:77:a1:d4:40:e2:84:00:3c:1d:89:8b:74:4b:35:e9:
32:22:0f:b4:b8:7e:eb:91:df:8c:81:6c:db:0e:48:34:e6:16:
c4:f5:e2:e1:7c:d7:f9:82:fb:f2:8a:4e:c3:54:5f:2b:ce:b6:
fa:d7:1d:cc:a3:9b:80:53:f2:33:e5:7f:75:fc:09:6f:7a:03:
95:23:1f:98:fe:d8:f8:40:30:13:f8:c2:d3:05:46:b1:0d:2b:
c9:ba:8a:0c:0e:fa:ca:6d:8f:a0:17:80:f3:9c:95:c6:b7:bc:
f2:04:d0:56
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUCI8AAgWTL1Z/tx2/7elqm7Jgp1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDA1MjAwMDAwMDBaFw0yNDA2MjQyMzU5NTlaMHoxSTBHBgNV
BAUTQDFmMjNkNWRmMjRkOGI0MWU1ZTI1ZGJjZGZiOTIwZWNiNWE0YmM0ZGFhNjU1
ZTI2YWZiZmMxZTFiYjM1MzUyZWQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKIABYTiymBfQb8yh1yoGeGb6jKkkGPbqHu7MJQ0/8iq8vugoSK6TkjM7mAM
QPb77XauM6bzf+4HJT/I463uoTflVhZoSxdxmQ08EgzUdBjrP5uaioEzeYNfFYDN
2COT1jcJCBnvoQZEoL8s5uJGnURg7Ifw9/YRBt1XpKILcz8/+seAl5pyWoNV69/Y
KHhHCr+1XswlcBj5jT6VpqUvy8EuJit+Nm73WED14I2wyBnfJEFLa53S7vry6kbD
lt90YhW6Yjt4Q6qQ6F1a3YcVGtsFGxJSFu8yXRCl3uWyX3AQZZr8DGazoThfkzz3
uPMIernMYzw1S8Agd5tnzyOBNhECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSmfopW
BBQM117K0tTeqNyYDBh/rDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MTViYjk1YmEtZWJlYS00ZTI2LWJmNzMtNjdiOGJmNmI4OWNkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0BwA
MA0GCSqGSIb3DQEBCwUAA4IBAQBv5Ko/SLi/IPTp5OIivo2t6okAqL7AnGDo8slF
r6Rwy/Fxc+brBzsVB93/tCEmsz2UzcRhT1q916hIcpY1Lp48+jNEFAkd2LNIY4wB
yLwItjbt7lg+HeHOwK3J+G9ik3r+kxFxAwFdcc2x6OoEsNjIZwn3kFLb5M8WAOMa
J0gj4+oYy43M+XupXwhEmRIACSb3eXF3odRA4oQAPB2Ji3RLNekyIg+0uH7rkd+M
gWzbDkg05hbE9eLhfNf5gvvyik7DVF8rzrb61x3Mo5uAU/Iz5X91/AlvegOVIx+Y
/tj4QDAT+MLTBUaxDSvJuooMDvrKbY+gF4DznJXGt7zyBNBW
-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org