Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d72c754-61b6-49c2-bcfe-7df26eb1a6d6.roa
File: 2d72c754-61b6-49c2-bcfe-7df26eb1a6d6.roa (raw, json)
Hash identifier: ZdLz90wiEvdHqGSvOiaYB0eRKP1np48OoExraMLLv2w=
Subject key identifier: FA:A1:79:E8:80:83:9E:B6:3B:60:B7:55:B5:AF:2A:26:71:2E:59:E7
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2DC90B4F2C9C9ABCC4237938426B6273C7800DB0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d72c754-61b6-49c2-bcfe-7df26eb1a6d6.roa
Signing time: Fri 24 May 2024 00:00:00 +0000
ROA not before: Fri 24 May 2024 00:00:00 +0000
ROA not after: Fri 28 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c9:0b:4f:2c:9c:9a:bc:c4:23:79:38:42:6b:62:73:c7:80:0d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 24 00:00:00 2024 GMT
Not After : Jun 28 23:59:59 2024 GMT
Subject: serialNumber=f497e72432f27bc6f6779edf7d182a32b1c877c7f91da6cc7e4e858ea7438d02, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:49:49:66:24:81:b8:29:87:84:e6:84:be:3e:
7e:b1:1d:d5:0f:e4:43:7a:aa:56:22:ce:07:a2:20:
50:55:cc:7f:6c:e2:90:23:25:d8:ec:49:b2:3d:15:
a4:17:9a:95:3c:f2:a8:be:eb:18:67:ef:cb:65:c9:
3c:cb:b1:f9:73:a0:c3:4a:86:dc:31:23:68:ed:d9:
31:89:dd:2f:b1:46:bd:af:8a:ee:2b:40:1e:25:a9:
7e:a1:5b:08:9c:a1:2b:34:c7:18:39:d3:16:94:84:
25:5e:94:1f:64:7b:ac:cc:3d:1d:9c:76:a8:04:0a:
2b:06:cc:4a:ec:ba:5f:b1:7b:91:43:cd:7d:a5:89:
b4:44:e2:c6:5e:13:68:52:f7:37:4e:95:99:f5:ac:
bb:c1:b0:5d:50:ff:c2:73:38:4b:b3:4d:a8:64:4e:
c5:02:a1:50:cc:88:60:2a:d5:20:27:0e:48:77:bb:
f6:f1:70:74:b7:ca:7e:0c:3b:4e:61:ed:70:e4:da:
e9:43:d1:13:99:cb:28:8b:05:31:fb:4c:d4:2d:79:
6c:9a:53:55:e1:1f:e9:eb:e0:9f:ec:a7:6b:16:f2:
df:0d:a0:08:27:d7:e4:a8:2c:96:b9:1c:12:07:68:
12:9a:8a:d0:a8:aa:67:ff:8d:e8:bf:00:a9:d8:6d:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:79:E8:80:83:9E:B6:3B:60:B7:55:B5:AF:2A:26:71:2E:59:E7
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2d72c754-61b6-49c2-bcfe-7df26eb1a6d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:a000::/40
Signature Algorithm: sha256WithRSAEncryption
8f:77:31:10:ed:24:e7:6e:e5:e8:61:00:34:7f:5f:82:a3:1a:
ac:cd:56:7c:39:fa:4c:70:7e:69:c3:9c:43:97:59:67:a9:19:
d7:c7:43:f1:c0:a5:b0:f7:c9:e5:c5:12:4a:7c:89:85:3f:37:
b4:fb:c0:34:7b:1e:88:7c:6f:18:c4:cc:9f:a0:68:ff:f9:f6:
dc:ce:2c:43:04:b6:e6:cb:f1:a2:02:e5:db:5d:9d:b2:7f:99:
5b:47:f4:50:d5:2e:42:b2:5d:b5:fa:c2:30:f8:d6:54:00:90:
14:81:d9:ec:17:88:37:88:e2:cd:29:a6:fb:7e:6f:7b:83:81:
df:95:62:4e:14:b1:d7:4b:4f:c7:cf:ea:a6:1a:d5:aa:b6:2d:
3a:eb:51:25:2d:a8:ec:e7:2e:56:f3:75:05:9b:b5:5b:44:74:
0e:75:7a:9e:2a:ab:09:c2:0a:52:e5:15:ba:ba:da:36:e0:b6:
5a:37:04:77:9f:ec:a7:08:61:77:e3:67:82:6e:b0:94:15:cb:
ce:80:b9:94:d7:3c:40:9c:57:99:77:bf:28:60:e6:a4:bf:45:
1b:55:fa:00:0d:c6:4a:4b:05:5a:65:2a:42:f2:ed:58:ce:c2:
86:d2:54:9f:c9:0e:6f:ff:3a:90:92:15:5c:03:b0:1c:89:76:
7a:d3:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org