Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/936f123e-9454-43b0-8e10-3ff2b1252a7a.roa
File: 936f123e-9454-43b0-8e10-3ff2b1252a7a.roa (raw, json)
Hash identifier: udvEE8AuPa3+skIM0q6lv5F0uCMyP+tNjPz2vxIi/BY=
Subject key identifier: 23:DF:08:37:2A:28:2D:BC:E9:A4:5B:1F:80:2C:5A:E7:27:E0:5B:B2
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0EDF6BE0C62D0BEBBFBA2BE0ED849AB81B96DED7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/936f123e-9454-43b0-8e10-3ff2b1252a7a.roa
Signing time: Mon 27 May 2024 00:00:00 +0000
ROA not before: Mon 27 May 2024 00:00:00 +0000
ROA not after: Mon 01 Jul 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d040:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:df:6b:e0:c6:2d:0b:eb:bf:ba:2b:e0:ed:84:9a:b8:1b:96:de:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 27 00:00:00 2024 GMT
Not After : Jul 1 23:59:59 2024 GMT
Subject: serialNumber=8194324983678293c048f34f54302929007aee44711d1eea8dbb8228768142a6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:2a:1d:72:e2:00:8e:11:eb:69:42:d0:28:
e9:6c:54:11:27:22:f7:40:62:54:05:e4:6f:35:78:
f1:22:ab:3c:cf:6e:08:08:be:86:41:31:3e:b6:0e:
49:af:cb:5e:61:fc:ce:9a:f1:4e:57:5c:be:4d:87:
bd:9b:68:56:9f:c6:82:09:ed:4c:4c:a6:e6:3b:91:
94:90:f0:0f:67:3e:66:c1:de:d5:06:01:b6:e0:6a:
ad:e9:5e:86:f9:0b:9f:24:19:3b:d6:98:6a:61:0b:
eb:bc:53:87:ec:fc:98:e3:ed:2f:53:57:ea:4a:54:
a5:33:b4:12:7a:d4:8d:30:24:0b:95:86:db:91:72:
db:71:8e:1e:f2:b2:e8:d7:67:cd:d7:53:62:de:75:
85:bb:b5:e4:fb:51:8a:eb:82:7e:fe:ee:37:c2:7a:
9b:e8:ae:f9:ba:2f:d0:38:e6:61:64:fc:ef:64:34:
2c:50:43:a1:9d:a1:7f:17:c3:46:7a:b2:ed:0b:28:
2e:98:30:96:c5:8b:e4:4d:58:af:ed:18:3a:9a:fe:
74:a5:c6:17:f0:16:9d:c1:87:f8:68:a9:47:20:55:
c2:3a:5d:33:37:19:bd:e5:97:af:61:c2:7f:75:28:
5f:bd:c2:82:a3:06:da:aa:b7:6c:35:2e:99:dd:b1:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:08:37:2A:28:2D:BC:E9:A4:5B:1F:80:2C:5A:E7:27:E0:5B:B2
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/936f123e-9454-43b0-8e10-3ff2b1252a7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040:6000::/40
Signature Algorithm: sha256WithRSAEncryption
36:1c:95:14:25:54:04:bf:ef:e8:7a:45:30:b7:7a:b7:65:ba:
39:86:20:67:17:a2:7a:19:23:0b:51:6f:42:e2:5b:71:4b:07:
33:17:b5:f1:57:0f:28:a2:04:fb:8f:5e:74:d1:8a:63:63:28:
14:06:ab:f2:2b:b1:a7:d6:69:25:f2:d1:4f:21:b5:7c:e5:6a:
84:1a:76:71:82:0a:36:88:d1:0f:14:c7:34:f9:64:ba:1a:23:
19:8d:d0:b7:10:3b:5c:b9:79:45:bb:6e:c9:4e:a5:b1:92:90:
32:39:78:8a:98:05:40:1e:8d:cb:e3:77:56:1d:61:c9:ea:c0:
1e:2e:35:f3:65:f0:50:c9:b4:ae:b6:03:5e:f4:0a:2d:86:87:
87:77:9e:18:86:a0:6d:f0:8b:fc:49:84:ef:19:4a:f2:cf:8e:
a4:ae:a9:00:4e:95:d4:1a:d4:14:df:b4:02:81:4f:67:03:b4:
61:97:8b:16:a9:86:c0:fb:df:4a:2f:79:c6:5b:14:90:3e:29:
c5:e2:ff:ad:a3:c8:32:25:3a:38:08:6d:03:20:c1:3c:a6:cc:
2c:04:cf:3e:05:ae:a6:59:92:98:d1:dd:e9:eb:97:1a:53:b1:
3a:1f:43:bc:97:19:8a:5f:b5:af:18:38:d4:ba:e2:67:8c:31:
6b:56:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org