Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
File: 06c271dc-5e79-4265-bb06-1d06647fd302.roa (raw, json)
Hash identifier: nztus9Jo/cQQBAsIeR8Sa3zkMaFe+jfPanNhg2KNOqA=
Subject key identifier: 72:AC:97:20:5C:A1:98:86:46:9F:05:94:B3:CB:4A:DC:8C:C2:E0:8C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 446E91576341F4176D8DFE718F1008C42C47B702
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
Signing time: Fri 08 Nov 2024 00:00:00 +0000
ROA not before: Fri 08 Nov 2024 00:00:00 +0000
ROA not after: Fri 13 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d023::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6e:91:57:63:41:f4:17:6d:8d:fe:71:8f:10:08:c4:2c:47:b7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 8 00:00:00 2024 GMT
Not After : Dec 13 23:59:59 2024 GMT
Subject: serialNumber=64ed00e6e4480baa31644c3541d978f43fcb15acf585289b7d9eb2c51fdb4ab3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:b9:4c:7a:ac:57:f1:cb:e0:61:e0:48:f3:
8c:0b:81:58:e8:46:b6:15:25:8d:8c:c4:8a:6a:7d:
06:fd:df:fc:e4:7a:a0:3b:8e:ec:16:b8:75:65:74:
32:f6:92:af:fc:df:7c:ce:9c:89:86:9d:99:2d:aa:
3f:9c:d6:ad:1d:6c:04:36:73:74:aa:7b:94:8b:d9:
a0:e8:57:64:37:57:c2:30:44:2a:10:b1:4f:a0:81:
b6:89:3a:00:1b:07:07:2f:c6:4c:18:9b:29:94:66:
ce:72:c2:c5:8d:e3:59:d2:64:19:cf:df:18:9c:55:
1a:a8:01:74:89:a7:9d:d0:39:3a:1b:de:6b:70:27:
12:c9:4d:72:43:12:03:f6:d7:01:84:94:c5:3f:ba:
43:76:bd:89:30:ce:e3:04:78:3c:4f:4d:af:d4:55:
18:a1:75:48:0c:3c:c5:92:94:8a:4c:a3:d8:d9:96:
1c:95:9c:9a:8d:da:ed:43:65:e0:f6:d1:b0:e8:9d:
91:da:f0:1e:fe:c8:aa:98:08:0a:dc:ac:df:54:e1:
ab:19:2d:be:2e:8a:fa:a4:29:08:3a:0f:ca:c7:9c:
88:09:53:1a:42:5d:af:9e:0f:71:1d:36:97:a8:7f:
1c:33:5e:13:c4:ba:16:8e:18:f3:34:cc:72:f4:5c:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AC:97:20:5C:A1:98:86:46:9F:05:94:B3:CB:4A:DC:8C:C2:E0:8C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/06c271dc-5e79-4265-bb06-1d06647fd302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d023::/36
Signature Algorithm: sha256WithRSAEncryption
47:ee:d2:77:a0:77:0e:b8:2c:cb:6b:a9:2b:3d:6f:0b:e8:8b:
72:2e:70:42:42:ff:55:ba:48:69:c7:a2:35:fa:1d:cd:9e:3e:
64:e1:06:42:64:d1:bf:3e:7b:bb:98:db:f5:63:11:fa:c6:97:
63:70:7a:6f:f8:53:b7:7a:35:e6:82:a4:69:93:14:44:25:6a:
1f:3c:04:35:60:bc:5f:1a:f9:65:f0:1f:b5:7b:af:11:b7:37:
7f:d8:25:04:5b:d9:05:0a:6c:95:32:56:bb:76:86:d1:6e:34:
ad:15:2e:55:63:94:d5:06:e0:f0:40:7e:71:a2:2a:a8:46:08:
2c:61:9a:08:c3:31:86:15:6d:d4:d4:c4:cc:0c:7b:7c:94:df:
5f:26:f6:79:71:c8:41:9a:ee:07:11:02:a3:38:b3:f1:74:f4:
af:b4:94:1e:be:9c:0d:0c:f6:cf:2c:4d:a1:b8:93:7e:46:ab:
ca:41:97:aa:1a:18:5b:be:d4:9d:51:ad:38:98:ac:1a:10:a9:
41:1e:20:4f:41:9f:e3:5d:30:a1:e4:9d:b9:30:85:9b:8d:f6:
ac:ff:3d:32:08:81:e7:9d:d9:ef:04:c6:2b:90:d3:42:d3:6e:
aa:af:b8:78:ef:98:c1:ca:49:67:63:78:77:82:00:00:66:ad:
4f:aa:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:31 2024 by rpki-client on console-ams.rpki-client.org