Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
File: 58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa (raw, json)
Hash identifier: y4rL80ZCLNhWX7Bb82OguuywBbopuFvL/pIds/6u4aM=
Subject key identifier: 7F:1A:68:B3:39:9D:E5:68:3D:0A:9E:00:F1:78:86:45:E5:B5:03:5F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5281E9250BD86B04BC560AEC52FDDCEF37B18ED7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
Signing time: Fri 24 May 2024 00:00:00 +0000
ROA not before: Fri 24 May 2024 00:00:00 +0000
ROA not after: Fri 28 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:81:e9:25:0b:d8:6b:04:bc:56:0a:ec:52:fd:dc:ef:37:b1:8e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 24 00:00:00 2024 GMT
Not After : Jun 28 23:59:59 2024 GMT
Subject: serialNumber=4478466e725eca81ce0acbc0ba6ee5048bb0c4463715daf3a88883366c80b1dc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6d:6b:46:2a:89:ef:08:68:0e:90:2f:86:f4:
59:00:8b:77:01:27:d8:e3:d2:01:4f:51:0a:6d:08:
c2:e0:42:f6:26:74:7e:e4:03:81:28:01:96:86:6d:
8a:e3:2c:f3:f2:21:29:f9:26:ab:2f:89:ee:b0:67:
fb:49:25:90:22:ed:3d:33:0b:16:35:5d:00:0a:35:
8c:37:a2:98:4c:8a:38:0e:6d:af:8c:3b:54:cd:c5:
7e:07:a5:f1:02:38:78:39:8a:2b:1a:72:83:e6:ea:
ab:8f:cc:b1:5c:20:97:21:57:cb:e8:60:52:c9:2e:
8c:52:9a:79:1d:56:61:84:df:35:a5:7d:a9:00:ae:
d3:b8:2d:5a:39:b5:c9:1f:39:b4:ed:29:be:23:70:
db:37:4a:cf:14:cd:ce:3c:78:33:49:cf:04:7b:64:
f1:f9:11:55:2e:06:66:9d:ea:9c:7c:46:12:fa:00:
d0:84:ec:8b:74:79:f9:4b:f7:b9:cd:eb:d2:72:5c:
89:8a:63:fd:8b:9e:f9:71:e3:93:bf:3a:b7:ef:ed:
34:9e:3f:87:cb:e5:8e:9c:24:2e:67:16:76:2b:24:
a4:bf:7c:42:e5:24:c4:30:58:5b:ba:f6:88:ac:7f:
71:6b:dc:66:1d:a2:3f:64:ff:59:2f:a4:a6:b8:97:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1A:68:B3:39:9D:E5:68:3D:0A:9E:00:F1:78:86:45:E5:B5:03:5F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:8000::/40
Signature Algorithm: sha256WithRSAEncryption
79:cb:bb:a5:fc:eb:36:44:d5:e4:a8:64:b3:4a:af:25:b3:81:
32:70:1b:bc:7c:d7:96:dc:41:64:e6:51:75:8c:b9:99:8e:e3:
e2:45:ed:d7:f9:bf:9f:c7:06:8c:6c:b1:ac:6e:56:22:17:9c:
a4:e8:d0:9c:5c:87:89:7b:c6:d5:95:93:45:bd:fb:4a:22:a7:
b2:55:0c:17:51:e3:69:7a:14:8b:64:7e:98:57:a6:eb:fb:4e:
9f:63:25:d9:b2:a1:43:dc:bd:f4:2b:d2:20:69:45:0a:40:23:
41:6b:07:8a:61:69:cb:bc:bb:7f:3d:a2:ed:ea:c8:48:f6:18:
e3:33:ac:0f:49:d0:df:b3:ee:cc:20:0e:ed:90:bb:53:68:0c:
84:ec:ce:54:93:a7:8c:f3:5d:ac:29:ab:d1:e0:e0:18:79:b8:
ef:a3:ba:70:ae:28:7f:0e:a4:10:97:6f:f3:a9:23:2d:2b:2f:
b4:08:c9:9c:27:c8:bf:fd:da:e2:94:c0:b9:d3:15:6d:c7:13:
43:25:ef:b9:fb:16:eb:b7:00:30:2f:bb:77:dd:14:06:2f:4d:
e0:9c:c0:42:c9:0b:8e:89:30:dc:4a:21:3c:41:95:aa:eb:cb:
fd:c4:76:ba:b9:89:10:ee:ae:a0:f0:eb:d5:59:94:28:e2:b8:
ee:b1:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:38:08 2024 by rpki-client on console-ams.rpki-client.org