Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
File: 90bd72ba-b30d-4433-a47e-e0543a4ea451.roa (raw, json)
Hash identifier: OUht8EvGhQ6c85zsJZ5EZzIldVFi+BImL5j1aJTDHbw=
Subject key identifier: 4C:E9:20:78:AE:50:30:4F:76:86:56:5C:CF:2F:16:B8:25:AA:42:DC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 75035AA25D3A2014E988FCC2AF1348D2294C93A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
Signing time: Mon 20 May 2024 00:00:00 +0000
ROA not before: Mon 20 May 2024 00:00:00 +0000
ROA not after: Mon 24 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:03:5a:a2:5d:3a:20:14:e9:88:fc:c2:af:13:48:d2:29:4c:93:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 00:00:00 2024 GMT
Not After : Jun 24 23:59:59 2024 GMT
Subject: serialNumber=474809811dc9af34e4e0cfe26fcc2066517b83e7897217e1c36698b9a25591ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:5e:07:8f:7a:77:84:cc:d3:74:b9:ec:5b:
17:e1:d2:6a:d5:15:e4:71:db:8e:b9:c2:b5:b6:06:
08:f9:4a:91:4d:d6:e2:15:6d:27:a2:ef:1b:0c:8c:
83:82:e1:8e:0c:89:bf:48:32:0b:4f:19:74:80:a1:
53:a3:dc:f7:3a:11:05:e1:1c:6b:9f:01:1d:5b:18:
85:1f:5d:53:bd:ae:75:af:57:76:f0:70:9b:01:fd:
66:86:dd:fe:c6:18:27:cb:67:a5:79:a8:0b:f4:0d:
c3:1a:e6:d0:29:11:80:85:7e:46:0c:2e:a2:22:6a:
d4:b8:ce:c6:ca:6f:42:e0:42:0c:2e:c0:a9:75:cf:
e8:07:6f:71:fc:d5:3b:85:d5:d6:c4:60:69:8d:14:
37:ad:38:81:c5:f5:47:37:d6:26:88:63:ce:28:e9:
e8:32:a9:21:0c:5a:0a:e8:5c:35:1d:22:6a:1f:ba:
10:55:4c:f9:64:e5:4e:e6:bb:41:83:0f:9a:9a:4d:
d9:35:0b:cc:3a:49:0c:e2:1f:b6:d8:61:c5:6d:04:
ca:45:e3:9a:81:cf:e7:96:c7:3b:76:26:b0:9f:74:
2e:31:f2:c4:45:73:f5:bc:69:b7:cf:99:3b:ea:7a:
ac:29:ca:5c:13:09:11:32:ac:c5:14:f8:d8:98:b1:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E9:20:78:AE:50:30:4F:76:86:56:5C:CF:2F:16:B8:25:AA:42:DC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/90bd72ba-b30d-4433-a47e-e0543a4ea451.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:e000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:8e:ff:83:f5:b3:2f:32:4c:6d:61:78:bb:48:76:e0:96:4e:
c8:7f:bd:10:d9:1e:aa:16:a0:45:cf:c5:d6:5d:c3:42:39:3d:
e6:14:c6:a1:af:30:6b:23:cf:39:76:5e:18:95:9c:a1:86:f0:
09:d1:fe:d8:c8:f2:0b:48:f9:10:da:eb:f6:c7:8c:19:3e:c2:
5f:bb:a2:f5:6d:c7:99:1a:7a:a6:2a:0d:91:a0:a6:03:1c:18:
94:99:e3:d3:a8:a4:dc:4b:98:bc:e6:22:9c:d0:09:6a:59:81:
53:e4:5a:bb:52:37:0b:73:48:4d:2b:83:2f:96:a9:cf:c2:9e:
8e:59:58:ac:16:26:ad:c1:bc:0e:b7:7d:01:97:3e:cd:6e:74:
02:42:02:f8:29:42:ec:28:d9:8c:fb:22:6a:f6:5d:9f:9c:51:
86:5a:ea:d1:96:b7:4c:da:ad:e7:4a:ef:df:ec:49:08:cb:6a:
54:9e:69:a5:63:2c:31:65:c2:9d:b4:ea:9b:76:b5:85:2e:6c:
4f:94:b9:c0:8b:fe:db:93:d2:4e:cf:bd:2b:1f:95:b5:f6:5e:
e9:13:92:18:6b:14:91:68:f6:e0:2a:ce:ae:0d:a8:08:87:53:
fe:bf:00:6c:11:7f:81:b2:47:a1:54:27:42:38:58:d4:6e:43:
13:1d:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org