Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0367559a-fe32-47c4-a58b-1115f3d0e6d7.roa
File: 0367559a-fe32-47c4-a58b-1115f3d0e6d7.roa (raw, json)
Hash identifier: rLUsdCxmgJPZr8rwb8pfsTDCpE6bkOgJTmj8J3i+jek=
Subject key identifier: 98:C4:9D:0B:EF:2C:08:2B:F1:96:30:DF:BB:70:73:12:05:48:04:AD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 741BC17545375B4DAA6510AEEE905C9D8A0DEAAD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0367559a-fe32-47c4-a58b-1115f3d0e6d7.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1b:c1:75:45:37:5b:4d:aa:65:10:ae:ee:90:5c:9d:8a:0d:ea:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=78fd589f701db6dfb5b4783d978e6fba111b12c7c62564bb41e12d56539151ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:ca:83:ec:4f:26:f7:c7:29:d9:06:b2:80:
a1:e2:5d:3c:41:86:76:3d:1b:58:32:d0:82:d5:27:
36:00:8b:03:5a:9c:38:6a:9e:f5:e4:5f:8e:25:39:
bf:64:77:27:8a:20:54:d2:dd:b5:45:d1:1b:72:9b:
96:2e:35:49:7f:d8:49:aa:ae:9d:71:39:9c:88:8b:
ba:85:e0:13:b9:40:be:fd:bd:8d:d8:74:fe:27:7b:
8f:72:54:19:ab:38:14:52:46:0e:ff:3c:45:78:e5:
b4:70:71:bc:71:0e:e7:b3:cf:24:d2:9a:dc:72:90:
d7:20:f6:ea:a2:3a:26:f3:d8:6e:b5:67:d1:1a:00:
69:5b:d6:29:79:5f:0b:04:98:6f:1b:b3:4e:0f:80:
11:98:6a:ef:3f:53:7a:6b:70:70:c7:00:b0:b2:4c:
ce:bc:6d:f4:f2:58:10:05:ed:04:ba:05:bc:1c:f4:
da:0d:b6:a4:5e:2e:48:9f:58:b0:ae:ea:9d:a1:aa:
55:9a:00:cf:58:39:24:10:88:28:7d:73:3e:7f:a7:
e3:d5:81:2d:19:76:29:24:3c:b9:14:d6:7f:ac:0a:
80:59:58:be:65:77:1e:c6:33:21:5f:9a:14:57:aa:
50:e6:5e:cf:97:0a:f6:a8:1d:d6:a4:cd:aa:c3:8b:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C4:9D:0B:EF:2C:08:2B:F1:96:30:DF:BB:70:73:12:05:48:04:AD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0367559a-fe32-47c4-a58b-1115f3d0e6d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:1000::/40
Signature Algorithm: sha256WithRSAEncryption
4d:69:4b:aa:5c:db:88:31:f1:3b:76:6c:8c:28:cd:bd:88:10:
78:31:0d:9f:e8:68:5d:8c:77:ee:ec:b2:40:0d:e9:8e:e9:34:
9d:e1:48:8f:7d:c8:0d:6f:5e:48:86:7f:11:88:0c:3e:9a:fe:
43:1f:5d:7d:45:4e:bc:b8:ae:2c:13:8d:78:52:a5:94:0d:c4:
13:97:f4:da:9d:6b:02:ea:17:00:f9:3d:dc:ac:b1:40:ac:dc:
3a:e1:a3:b5:7c:48:7f:89:38:c2:46:85:5e:f2:67:98:08:80:
c8:6b:c6:62:9d:c1:8b:88:0d:0c:42:ef:7b:60:b6:76:9f:6b:
bc:e5:b7:2a:f2:e3:f6:e4:dc:f0:03:d7:e6:2b:68:5d:97:36:
fa:b5:fb:74:e9:52:2a:80:7d:eb:ed:d5:63:99:2b:b7:3c:6e:
cc:7b:7c:f2:88:08:5c:75:fe:55:56:11:31:8e:ab:f5:9a:70:
98:fe:e8:1b:94:35:a2:28:62:df:0f:35:3f:9a:0a:f7:2a:ad:
a6:55:60:26:65:5e:62:5e:72:bc:ea:28:35:93:43:ef:3a:f6:
6b:90:d0:d3:1e:12:0c:b9:31:ad:27:32:15:eb:b3:15:96:2d:
0e:8e:45:39:59:27:e5:80:46:42:f7:9d:17:90:67:f8:b7:21:
1d:33:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:02:32 2024 by rpki-client on console-fra.rpki-client.org