Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc8b5e2d-b0f1-4159-899a-3f32cb08a825.roa
File: cc8b5e2d-b0f1-4159-899a-3f32cb08a825.roa (raw, json)
Hash identifier: vrq6h+fqlFoWiDuhJpOZHtZW2kOKsr8ATxz+c241sUM=
Subject key identifier: 57:C2:F1:69:2E:57:3F:71:C2:FF:23:FA:E2:F7:48:9C:5A:FF:8B:9B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 04EBEEA086A138A01AD03E6362F430FA6E7D7001
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc8b5e2d-b0f1-4159-899a-3f32cb08a825.roa
Signing time: Mon 20 May 2024 00:00:00 +0000
ROA not before: Mon 20 May 2024 00:00:00 +0000
ROA not after: Mon 24 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d019::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:eb:ee:a0:86:a1:38:a0:1a:d0:3e:63:62:f4:30:fa:6e:7d:70:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 20 00:00:00 2024 GMT
Not After : Jun 24 23:59:59 2024 GMT
Subject: serialNumber=0cba608fce289b5583035f6b0f2fd512ab46a6eb60a3deac5f7c0b13f3865367, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:1a:be:74:40:c5:1f:f8:a5:92:e6:d6:38:
68:0a:58:ab:0d:ad:15:f8:fd:6c:10:c1:65:b0:9d:
08:b7:fe:73:40:f2:2c:fe:dc:af:9d:4c:e6:13:1c:
1b:a5:5d:d9:31:f9:cb:f3:6b:64:16:55:b8:cb:8c:
96:7b:cd:b6:56:f8:e7:d8:9d:ed:15:c3:34:d2:f2:
08:28:80:d7:ec:bd:83:fa:5f:42:ff:34:cf:3f:24:
2f:05:b0:8b:c3:dd:86:8a:41:41:b4:1d:35:a8:6f:
7b:49:65:e0:5d:06:03:62:6c:03:cc:54:bf:d2:37:
f6:c7:c0:b2:b3:3c:6f:dc:92:d0:b0:9c:51:f5:40:
c5:31:d2:e1:e5:77:6e:0b:e7:75:28:6a:cd:b9:5a:
4d:37:71:02:bc:15:30:02:41:43:81:ae:07:ee:94:
21:e5:0e:d1:2b:6a:31:19:cd:33:8d:6a:7b:0e:66:
5b:c4:1c:c6:bb:32:76:76:59:dd:c9:b0:38:0d:1e:
67:2b:d8:59:8a:d5:41:44:50:3e:ee:4a:41:ee:78:
32:30:c4:17:97:25:7d:9b:24:c9:f5:f5:1f:52:72:
4e:71:5e:d2:03:29:f6:1a:ea:15:ac:b1:6b:a8:9a:
23:1a:05:0a:db:42:c1:be:a1:44:20:74:9d:9c:ce:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:F1:69:2E:57:3F:71:C2:FF:23:FA:E2:F7:48:9C:5A:FF:8B:9B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cc8b5e2d-b0f1-4159-899a-3f32cb08a825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d019::/36
Signature Algorithm: sha256WithRSAEncryption
3c:f2:10:75:d2:94:10:c9:98:f2:fa:a3:ee:be:17:50:80:04:
be:8c:55:de:43:d5:3e:21:58:50:ff:2a:cb:f2:8c:0f:c0:53:
a2:fa:37:35:f7:f8:e4:80:89:bd:cd:8c:e9:79:cc:65:be:90:
bb:cc:35:3f:64:bf:08:22:49:47:0f:e4:dd:36:a4:d4:ea:68:
89:c9:1a:4b:ba:c7:f6:69:01:8a:4d:a6:8c:e9:e4:76:27:5d:
aa:63:58:9a:a1:23:19:fc:6c:16:3f:ec:a7:6a:73:eb:2d:4a:
90:bd:b9:3d:55:0f:0a:b8:7a:53:6a:fe:a4:1a:83:f8:97:9d:
d9:05:cf:df:f2:a2:79:b8:ef:59:d8:53:d8:43:bf:07:86:98:
68:9f:45:9a:e9:4a:ff:a3:75:25:d8:97:10:3a:57:2c:5f:a4:
40:e7:6f:54:c7:72:d4:cf:49:85:d5:51:b2:5b:33:6c:b5:0a:
02:96:be:20:73:cb:1f:94:3c:ee:32:3c:ee:60:ae:48:6a:de:
84:55:40:ed:9c:89:a7:58:b3:0b:36:21:e9:09:5b:bf:df:af:
8e:cb:8f:46:3f:25:ba:9a:09:91:7b:71:77:c0:5f:b1:e2:d3:
55:6d:95:93:06:a3:f7:7a:00:6c:ae:73:91:5f:c7:f5:40:17:
33:4c:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:38:09 2024 by rpki-client on console-ams.rpki-client.org