Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3dbbf79a-d9ed-4a70-869f-67c739fcf324.roa
File: 3dbbf79a-d9ed-4a70-869f-67c739fcf324.roa (raw, json)
Hash identifier: m+vYx7WmC2k1rp/SYu5/2u1rzIlC0eFc2/ZYxGGO+w0=
Subject key identifier: 47:45:84:72:9D:BF:C6:44:14:0E:84:7B:41:3F:C8:11:34:5C:FE:67
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 70C27DBE4CBC5B2AF2E14A6ED57F7D597B6CA7F6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3dbbf79a-d9ed-4a70-869f-67c739fcf324.roa
Signing time: Wed 29 May 2024 00:00:00 +0000
ROA not before: Wed 29 May 2024 00:00:00 +0000
ROA not after: Wed 03 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c2:7d:be:4c:bc:5b:2a:f2:e1:4a:6e:d5:7f:7d:59:7b:6c:a7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 29 00:00:00 2024 GMT
Not After : Jul 3 23:59:59 2024 GMT
Subject: serialNumber=f99aa0d149ef9c4b6a895b89e2268c3660d00e7dc880e4549522914faf70e4a8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:8e:21:dc:ff:df:0e:ef:e9:53:01:27:81:
04:07:cd:62:ad:a2:2f:3c:5d:74:b6:e7:9f:91:d1:
95:fc:19:69:0e:e0:e7:0c:b8:0d:8d:16:4a:d4:f7:
9d:a8:ff:61:01:59:b5:c5:ff:52:a7:63:6f:d8:6f:
68:cf:a0:16:00:10:d2:22:2c:17:fc:ab:e1:bc:0b:
c8:a4:75:0e:67:aa:e1:df:40:43:71:86:0c:49:82:
e8:c1:7a:1b:28:e6:50:b5:32:c0:0d:93:64:f2:88:
94:d1:57:64:02:8a:71:2a:47:46:4a:23:4b:74:fb:
d4:8b:39:01:51:f6:c2:ba:a2:9e:83:86:4f:72:22:
15:97:1a:b8:ff:8d:15:77:33:4e:2f:1d:0a:12:ef:
d7:ce:40:df:18:a1:ba:9f:50:d5:b5:00:4b:82:52:
d9:a8:5a:ac:25:22:ae:47:83:f7:28:c7:ae:bf:01:
6d:49:59:98:b0:62:84:58:58:6e:8e:32:8f:5d:9e:
49:80:1b:71:5e:79:a5:67:86:c5:19:0a:ed:9d:6a:
6d:e4:68:1e:8a:08:1e:96:bc:7a:92:14:e8:65:ae:
d2:67:f3:eb:cc:cb:e4:45:4d:2c:c4:90:9e:bc:36:
07:96:ca:5f:b1:6f:28:c7:d1:20:61:46:c3:1b:38:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:45:84:72:9D:BF:C6:44:14:0E:84:7B:41:3F:C8:11:34:5C:FE:67
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3dbbf79a-d9ed-4a70-869f-67c739fcf324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:9000::/40
Signature Algorithm: sha256WithRSAEncryption
39:3e:9d:df:3d:52:ba:24:a0:29:67:6c:c2:e2:c2:fe:ce:3d:
2a:7b:c6:22:fe:d4:6d:95:ad:d8:23:bc:99:7d:50:b5:4c:a8:
be:b1:3d:c9:90:b7:32:c6:5c:46:05:c2:76:48:e1:95:8b:53:
1d:3e:d8:2c:84:68:ff:e8:c0:41:8a:fa:fc:86:a2:e5:a4:1f:
d5:79:09:b0:1d:5f:14:86:9a:ef:4c:86:ae:32:48:24:9e:82:
d1:5f:85:7f:07:2b:32:ea:80:c0:7e:bc:fb:0a:df:24:ca:da:
11:ff:52:01:18:a2:d5:ec:50:9c:7b:c8:bb:68:5d:69:f9:5c:
08:96:47:c2:1b:f2:fb:28:10:04:f8:83:2e:4a:5e:14:b2:dc:
b7:5c:ff:6e:bf:94:2d:ed:d9:ba:e7:56:07:f4:8d:73:5a:d8:
01:57:4f:e8:52:ba:34:0d:5e:ac:99:a6:75:15:74:06:4d:62:
ea:9c:64:cc:5b:30:a9:5b:45:07:ad:f4:84:92:28:0f:b3:78:
01:36:dd:46:af:43:aa:5e:a3:af:ea:4b:3d:32:62:21:aa:73:
88:0d:83:92:2a:64:70:75:e8:df:17:ec:83:65:2d:ee:63:ad:
a9:2f:e6:0f:a7:0f:6c:a9:b0:bc:73:be:1a:f7:10:6c:63:12:
f0:7f:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org