Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0457f915-9a1e-4628-9399-bf0f6dcba1d9.roa
File: 0457f915-9a1e-4628-9399-bf0f6dcba1d9.roa (raw, json)
Hash identifier: 0j37J459si6LntPPwgxG5jwVoqmorVjNhSmL8enH1Xo=
Subject key identifier: DA:76:CE:03:74:C1:5C:80:85:30:31:C2:AB:74:04:CC:3B:08:CE:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0F7C3E532AE216C9474ED29F7D2E4BD57C0E6EA9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0457f915-9a1e-4628-9399-bf0f6dcba1d9.roa
Signing time: Mon 28 Oct 2024 00:00:00 +0000
ROA not before: Mon 28 Oct 2024 00:00:00 +0000
ROA not after: Mon 02 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7c:3e:53:2a:e2:16:c9:47:4e:d2:9f:7d:2e:4b:d5:7c:0e:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 28 00:00:00 2024 GMT
Not After : Dec 2 23:59:59 2024 GMT
Subject: serialNumber=144dad36e6b70be7e85d3e8a5bb28b8bd8cb2136804fe8a3fecfb2b70ed7af89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:dd:d1:6f:14:00:92:0e:b0:86:b0:9c:01:
9d:49:89:2d:79:7e:5a:5b:99:53:5c:54:c7:dc:fa:
e8:be:7a:b9:3b:86:08:ba:48:71:95:1c:ab:de:3c:
d9:13:51:27:c1:a5:a1:06:2c:5c:00:21:b9:24:76:
6a:d5:b6:b0:04:17:a5:8f:09:10:a3:fc:1c:58:7d:
a6:f4:ec:ca:b4:65:98:5b:a8:ea:c7:8d:92:89:92:
ba:f0:b9:f4:10:b3:43:6f:8d:a6:a5:63:aa:f5:c5:
5b:21:9f:b9:9d:1f:3c:fa:9a:8d:3e:c8:ad:9f:72:
0b:dc:71:c7:f4:46:1c:f3:25:3b:bd:b2:b5:b9:5e:
cd:e1:5d:18:01:d4:f1:b8:e8:fb:a9:bc:4b:96:ca:
56:fa:9b:40:5d:17:4c:06:05:8f:b0:af:ba:16:ef:
3c:6c:e1:7e:32:b1:cb:e9:ac:82:a5:16:52:16:09:
62:ed:31:d2:df:da:62:c8:f9:00:79:2d:fb:bb:e1:
1a:be:04:71:dd:b9:b2:6a:40:1b:ff:b0:9a:1c:c5:
06:d9:c5:0e:0b:f8:9f:92:13:d9:2c:53:37:51:56:
a6:d6:c0:a6:9a:65:ac:6d:38:55:b6:02:a0:80:06:
b0:58:89:85:90:2a:22:15:2a:0a:1b:eb:86:a5:1c:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:CE:03:74:C1:5C:80:85:30:31:C2:AB:74:04:CC:3B:08:CE:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0457f915-9a1e-4628-9399-bf0f6dcba1d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:e000::/40
Signature Algorithm: sha256WithRSAEncryption
57:f7:d5:4b:e2:68:8a:22:08:5b:39:80:f0:3e:81:89:e0:04:
ae:3e:3c:02:c1:f2:bb:dd:c1:1f:f1:41:e2:f7:9d:94:38:a6:
ea:d5:48:e5:74:ec:79:02:78:6c:93:14:f2:07:61:95:c3:38:
d9:1a:55:11:36:27:89:82:37:3d:95:68:07:ac:7e:21:5e:f7:
29:7f:dd:b2:56:d8:98:2a:4f:4b:52:e9:00:42:e3:54:9a:aa:
18:0c:58:82:bd:33:60:06:64:6e:17:38:25:e3:32:e6:3c:6a:
91:f7:06:c6:f5:cb:c3:c6:9a:55:d6:a5:ae:9d:05:8a:29:6f:
7d:eb:08:62:68:d7:61:7e:9c:f0:81:52:48:60:dc:fa:1f:b9:
78:78:ef:ea:0f:d7:fd:13:78:4b:a6:45:48:66:7e:7a:c1:58:
97:61:a3:86:78:cc:dc:a7:09:22:44:af:ca:bd:da:6c:b8:7a:
69:7d:e3:20:4b:4c:4d:6e:2e:e7:e4:15:f2:a8:eb:f9:43:cc:
88:10:95:31:6f:1e:a5:a9:de:ca:3a:93:ea:5c:72:f9:01:70:
62:19:de:ad:fa:bf:bb:ae:2b:3a:d0:4f:cb:e9:4d:a5:38:3d:
57:01:cf:6c:00:85:a7:f1:2b:07:24:57:c7:e0:53:9a:2e:9c:
3b:1c:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:31 2024 by rpki-client on console-ams.rpki-client.org