Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
File: c1f61529-4ff8-4380-a3cb-87884046881d.roa (raw, json)
Hash identifier: CsWdiCzd7CccYin9zCe2zd3jaA7+rOnJPUHyrXf7IF0=
Subject key identifier: 02:B9:7D:11:67:02:D6:E4:1A:C1:4E:96:D2:F4:3B:63:1A:8B:71:21
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 082B7B80C70D63E9679B96E16784E014EB2EB169
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
Signing time: Mon 20 May 2024 00:00:00 +0000
ROA not before: Mon 20 May 2024 00:00:00 +0000
ROA not after: Mon 24 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:2b:7b:80:c7:0d:63:e9:67:9b:96:e1:67:84:e0:14:eb:2e:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 00:00:00 2024 GMT
Not After : Jun 24 23:59:59 2024 GMT
Subject: serialNumber=51299fff8c3e1ad58fd04e9cacd0a8b26b99c211b415aa004caa77746adb5276, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:8a:7e:d9:5c:16:41:6f:99:4e:16:19:07:
73:f3:26:b4:e9:b9:0a:ee:77:23:07:78:ec:8d:92:
cd:1e:00:91:ab:92:ed:ff:58:9d:1d:53:3d:13:3f:
54:61:fa:7f:1b:5f:15:67:a8:bc:95:19:a1:bd:26:
ac:41:a7:0b:16:cb:5e:2b:78:9c:aa:2e:56:02:13:
6e:38:a7:4a:ee:ea:49:35:f3:50:14:3c:73:00:ef:
1c:1d:52:79:a9:e8:71:09:b4:ad:2e:4b:f3:5f:61:
47:c1:57:f7:61:50:0c:d5:27:7e:58:fa:a5:68:67:
b7:e3:42:d0:1f:6a:cf:6f:2b:62:ad:8d:b8:c0:3f:
ef:26:03:54:81:27:43:bf:a9:68:47:61:61:d3:c0:
44:d9:ac:da:0f:7e:73:28:6a:f7:37:21:93:e8:17:
42:96:6a:87:a5:eb:40:85:f5:e3:d0:f1:65:aa:02:
f2:ac:b3:10:b1:18:88:2c:19:b3:35:7c:3c:a9:ca:
e0:e1:48:18:6b:87:b6:de:de:e4:8d:1b:17:17:57:
12:56:ca:61:43:30:f8:de:1b:91:d5:a6:59:54:83:
72:b2:50:68:b4:2a:32:e5:c9:b7:01:50:d8:3c:9b:
6d:b2:ca:94:5a:6c:27:98:26:c7:d3:e2:b1:37:8d:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B9:7D:11:67:02:D6:E4:1A:C1:4E:96:D2:F4:3B:63:1A:8B:71:21
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c1f61529-4ff8-4380-a3cb-87884046881d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:8000::/40
Signature Algorithm: sha256WithRSAEncryption
8a:14:a5:fc:98:92:f2:dd:90:90:1c:19:8e:d6:d2:c3:31:1a:
5b:32:6a:c4:cb:29:cf:3e:e3:b8:3b:9f:0c:04:42:93:bb:e1:
bf:7f:f0:04:dd:a3:84:3c:5f:9b:70:6c:d5:3e:5e:3a:89:d6:
f8:10:f7:df:3d:58:32:32:f1:b3:47:38:61:61:49:8b:3e:74:
00:42:01:5f:88:e1:65:41:c1:26:61:44:cb:11:66:5e:2e:5d:
8e:35:3d:70:7d:80:53:1c:4d:75:b2:4c:18:50:8d:96:94:10:
fe:4b:53:9e:c5:33:d6:f7:84:48:ee:09:8a:d7:73:4a:94:1a:
71:a1:3d:15:30:55:9d:8c:dd:69:f8:d4:40:19:41:3d:3d:cb:
7d:1b:5a:05:23:64:7d:72:a6:ec:6a:30:0b:87:d0:74:33:76:
d2:40:aa:fc:9f:ed:30:98:d4:b4:e8:2d:f9:d6:09:7c:7f:d0:
70:03:91:3d:07:b8:7f:dc:eb:d7:c2:88:75:5d:f7:82:cf:42:
7b:17:69:dc:01:1c:92:25:23:4a:b9:e1:e2:cc:11:4b:90:41:
aa:db:a6:52:ea:d1:7d:77:c5:fa:66:36:fe:89:33:32:bd:31:
7b:e2:b7:07:26:31:08:cd:39:29:48:54:d5:c0:9d:19:4d:9d:
07:3e:9e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:38:09 2024 by rpki-client on console-ams.rpki-client.org