Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/027dccf7-9d90-4ef7-ab83-7ec3364cbd2e.roa
File: 027dccf7-9d90-4ef7-ab83-7ec3364cbd2e.roa (raw, json)
Hash identifier: C4d0raismhfYKaIyRjw32Th8OTXmYwLbTt1/9loUJsY=
Subject key identifier: 3E:2A:20:43:83:65:DB:AA:4F:41:06:70:A1:89:2E:48:37:54:C3:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A889286FCF50268F2D472B4C040522D3F10DC6B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/027dccf7-9d90-4ef7-ab83-7ec3364cbd2e.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:88:92:86:fc:f5:02:68:f2:d4:72:b4:c0:40:52:2d:3f:10:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=11b10ec17cbcdc3f1ba674aea73d73cd69db4ed150a6f7a6097a91b1711e32d0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:7c:21:a2:34:f7:a9:e5:0d:11:94:15:e0:
f3:b9:7b:d8:ef:f4:c8:e4:29:41:b2:1d:ef:1e:99:
25:7e:7f:f6:7a:41:f5:1c:bf:da:31:25:15:43:45:
e7:25:2d:6c:82:3c:f1:6b:cd:3f:3c:49:e3:9f:b5:
22:8a:bd:ac:91:fe:c8:9c:e7:66:32:f0:3a:86:fc:
0d:51:c4:7e:eb:c0:81:5c:9b:82:73:cb:58:2b:74:
bf:6c:d9:1d:54:09:63:3d:e5:9e:a4:6b:ba:2d:33:
0a:e5:38:c6:bc:57:24:50:c2:73:45:34:ed:76:c6:
a3:2a:7e:9c:3e:fe:b1:4d:83:8f:b7:d7:55:a8:85:
2e:f3:69:59:38:83:e5:4a:5d:61:c3:00:cd:da:e1:
bc:15:e4:61:a2:67:10:71:68:3d:20:42:c5:12:b5:
25:0e:4e:1a:cc:ad:a8:a4:1b:c3:71:87:61:66:aa:
b9:25:d4:e6:8b:72:0a:f3:48:a1:a4:3c:5f:8a:77:
bc:b4:b3:50:27:7e:eb:98:ba:8b:08:f3:e9:3e:46:
99:15:e5:07:41:51:d8:10:ff:68:40:24:a0:59:4e:
91:24:2d:43:55:32:2e:1a:64:2c:c5:09:e4:d1:fd:
92:13:9b:46:53:10:dd:d3:04:b4:be:6d:a7:11:c4:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:20:43:83:65:DB:AA:4F:41:06:70:A1:89:2E:48:37:54:C3:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/027dccf7-9d90-4ef7-ab83-7ec3364cbd2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:a000::/40
Signature Algorithm: sha256WithRSAEncryption
1a:69:08:82:0e:13:7e:6c:e5:da:b0:2a:93:07:f5:ad:f9:c4:
fb:83:19:7c:57:35:31:f6:3d:6d:37:f7:85:22:87:90:1f:0e:
f9:94:3e:7e:7a:ab:76:10:12:9a:69:7c:11:5f:ca:8a:a9:6e:
c1:18:c2:28:88:85:15:38:37:46:e7:ff:6b:93:d7:18:91:25:
09:3a:e5:5f:56:5e:c8:0a:bc:d1:07:e7:26:78:da:6d:89:6d:
b4:13:40:30:50:af:25:13:57:d4:f5:86:7b:90:83:98:fb:bc:
6c:da:24:0e:31:79:3d:58:a1:56:82:6a:e3:b7:b6:d9:6b:01:
98:8d:ab:19:87:4d:66:73:16:f8:3e:6d:de:e8:1e:b1:09:94:
77:56:ef:3d:88:33:80:e9:50:70:d3:b3:92:ef:17:0e:60:5f:
5f:fe:a4:6e:44:35:4b:e4:32:2a:35:ff:cd:eb:c1:8f:85:cb:
82:5c:e8:75:2f:2b:68:ac:72:5f:16:ae:74:a0:f3:f7:16:53:
9a:f1:7b:91:dc:52:71:ee:5c:23:c8:3e:cd:02:68:0c:29:8c:
46:94:df:d0:ef:71:95:3c:8f:70:f5:39:9c:fe:8a:22:43:5f:
bc:4b:cc:5c:66:4d:a7:30:5f:1f:ff:e9:29:92:22:30:95:73:
ff:b6:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:34:50 2024 by rpki-client on console-ams.rpki-client.org