Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
File: 8afa1c3e-762a-4db1-b600-92897f76c67e.roa (raw, json)
Hash identifier: 46PCxK+smH+wmsQAIwrzXPI+cP3KT6tpR55TrzEC3/g=
Subject key identifier: 4D:BE:41:DE:F1:74:92:D6:BD:D1:5A:4F:EB:9A:A9:08:43:7F:DE:B8
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4BEA4842B713BB0C85C8B86CC2BB3545B1C7E18F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
Signing time: Fri 24 May 2024 00:00:00 +0000
ROA not before: Fri 24 May 2024 00:00:00 +0000
ROA not after: Fri 28 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ea:48:42:b7:13:bb:0c:85:c8:b8:6c:c2:bb:35:45:b1:c7:e1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 24 00:00:00 2024 GMT
Not After : Jun 28 23:59:59 2024 GMT
Subject: serialNumber=16f17851c5d86419673285dbbc6a10018da26d1cbc202610632c750a4f7bacef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:13:25:a3:84:f4:ed:03:6b:ac:1f:71:ea:
53:ea:a0:e4:9c:d5:2b:a7:4d:bc:99:81:00:cd:31:
c4:8c:f2:85:23:0a:ca:f3:b0:66:cc:9c:f9:59:a7:
a6:e7:50:a4:1b:36:69:cf:66:ea:6f:a5:d8:ad:2e:
5f:d9:8e:db:8a:53:3c:67:b8:e4:9b:77:8a:31:ee:
29:a2:0b:87:c6:69:69:29:51:75:8a:f5:b2:4c:29:
d2:d8:f2:00:19:f9:de:01:ad:c1:59:ea:5d:a2:5a:
a6:9c:43:32:e7:b2:25:e6:a9:34:72:a2:91:65:48:
de:2d:e8:8e:6c:d7:29:7a:a8:d4:07:d3:fb:14:f8:
8b:4b:64:40:cb:86:6b:45:44:fe:86:3d:fc:af:93:
ba:82:fc:aa:83:f1:a5:70:c0:3f:b1:d3:e0:90:42:
65:00:db:e7:3c:a1:a8:31:47:7c:ca:21:51:5f:d6:
d9:39:34:47:45:ee:a5:fb:0b:5f:6d:53:ad:ea:4e:
14:d5:52:3d:3d:ec:88:e9:63:bd:4a:02:8d:0e:dc:
9a:7c:e6:a8:14:3c:8c:ce:e9:62:74:5b:8a:79:da:
d9:d2:12:ef:ad:f4:66:1d:56:8c:24:36:24:6e:ba:
2a:ab:d2:f6:f6:4e:bc:79:aa:a8:9e:90:da:3d:37:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BE:41:DE:F1:74:92:D6:BD:D1:5A:4F:EB:9A:A9:08:43:7F:DE:B8
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c:9000::/40
Signature Algorithm: sha256WithRSAEncryption
99:67:66:42:c7:ef:73:e3:42:dc:55:6d:56:91:a9:04:6c:cc:
c3:e8:40:75:b6:0e:2e:0a:08:a2:b5:0b:79:f8:29:32:d0:4e:
f5:8b:52:ed:3d:45:b8:ba:76:29:63:63:2a:72:92:00:5d:c2:
9b:f2:10:70:69:97:14:a5:93:16:5c:19:b7:78:d3:72:ef:3f:
6a:ab:db:44:69:e3:dc:64:ab:95:46:78:b0:ee:07:33:db:48:
1a:6b:2b:7d:6d:46:42:d9:5e:3e:0d:02:8c:00:78:f4:9e:08:
cd:9e:23:00:0f:30:2b:3c:8b:89:0e:ed:26:0a:a5:9b:c5:c9:
89:2a:02:8b:33:90:e2:30:b0:07:f0:c6:60:94:9a:f6:49:6c:
a8:e3:7a:02:36:80:50:a3:d3:84:00:e2:85:fe:17:03:21:98:
fe:53:a4:87:f0:c0:a9:6e:64:5f:be:68:5d:0f:03:36:b8:d2:
8d:7d:1a:45:46:30:21:36:a6:f5:bf:ce:f0:e6:49:ec:f8:95:
a4:c8:12:a0:dc:84:ca:8e:c4:91:7f:a1:ab:00:a2:39:44:d4:
ac:10:3a:67:8d:06:c3:5c:da:c0:0a:f1:54:9c:96:df:aa:ed:
56:bb:d9:77:c8:6e:54:eb:f5:92:52:9c:4f:2f:17:b3:14:79:
9c:f9:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:38:08 2024 by rpki-client on console-ams.rpki-client.org