Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
File: 0b360e2c-382b-4420-8550-330a58e946ee.roa (raw, json)
Hash identifier: XqIdYRxFqATMFVmHtuaICeuT+8DA8M350PLUdh/Hyn8=
Subject key identifier: 16:D0:2F:97:F7:75:1E:43:55:12:1D:64:7C:86:CB:28:56:CB:90:09
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4F262452614389D374B935E0292D964FC2142CCF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:26:24:52:61:43:89:d3:74:b9:35:e0:29:2d:96:4f:c2:14:2c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=2410adb031f19e6be2b9eac003da99519e7073f33c3541fbec7b15986fa4603d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:1e:d4:b1:ad:b4:6b:7d:52:40:fd:8d:e6:
1c:65:a9:e2:94:bb:c6:a0:24:59:65:5e:cf:f4:ba:
c4:ab:2c:ab:30:a7:21:16:55:95:22:42:c0:d6:61:
94:11:bb:bf:b5:98:4f:64:b1:7f:56:fd:2d:29:0a:
60:57:1c:97:74:39:3a:b1:74:72:6b:5a:a0:aa:fb:
b2:5c:d8:55:2d:ac:2c:28:c4:9e:13:f5:64:0e:71:
03:44:c8:a3:43:aa:43:d3:7e:39:bb:2e:fc:68:18:
b6:6a:9d:ee:91:b1:c4:67:fe:c0:a4:d7:47:aa:a7:
a7:39:bb:de:9d:c2:fa:0e:b3:5d:bf:d1:08:f0:72:
58:80:08:84:b1:22:ed:35:39:b1:d2:5b:e8:75:fc:
11:2d:1e:26:2d:2a:b5:b3:e1:97:3c:43:ae:73:e2:
5c:42:22:bd:5a:91:5d:85:03:62:d4:69:c9:5e:bc:
06:86:12:b0:31:8e:2a:21:12:cb:16:a0:4c:09:25:
6f:c7:47:e5:ca:2d:e0:62:c3:c1:37:74:82:fe:4c:
da:9f:ff:e6:e4:cd:f9:83:49:56:b1:65:f9:6f:19:
50:ec:91:dd:b2:50:9d:e7:df:50:8a:4b:7a:5a:a2:
9f:2c:81:e6:f8:4d:0c:5d:3d:00:74:4b:fd:2b:5b:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D0:2F:97:F7:75:1E:43:55:12:1D:64:7C:86:CB:28:56:CB:90:09
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:6000::/40
Signature Algorithm: sha256WithRSAEncryption
47:b5:6d:37:7d:8a:54:7a:0c:d0:bd:5a:65:ba:52:5b:39:61:
7a:0e:96:a6:93:c3:27:ce:ee:1d:0c:1a:86:d7:72:45:a5:d7:
b5:1e:e9:92:39:7c:19:59:9a:10:cc:1c:e2:2a:31:bf:b7:c1:
4f:d5:1e:31:09:53:6d:d7:02:99:1e:c9:25:09:1f:be:31:18:
a7:13:ce:da:d2:a8:d0:f5:fe:50:e9:ee:f3:3a:26:b9:c4:43:
64:ca:2c:48:3f:70:ef:3f:1b:ce:3d:f7:23:83:3d:f5:80:c7:
89:51:48:45:ac:02:04:03:e7:f1:da:f4:06:43:74:1d:af:b9:
3e:8b:b9:64:04:2c:31:ed:e9:e1:7e:fd:e8:90:4b:2b:90:05:
83:fc:8b:97:de:96:f5:75:dc:0a:f3:c5:95:16:f2:34:92:91:
7a:a9:a6:a3:3b:6a:63:2e:94:f3:7c:e2:1d:63:82:8b:8c:a0:
92:79:a6:d7:ab:71:db:be:43:6a:19:1f:8e:81:5c:3b:51:f2:
2b:90:d3:32:ee:66:e8:07:46:4a:ea:c9:2a:23:d8:dc:f0:59:
57:7e:f3:a2:95:3d:18:c8:57:a5:34:58:17:f7:34:4b:d7:76:
69:ab:63:38:1a:56:09:0d:15:ea:3d:aa:65:69:93:de:ae:db:
51:c8:b3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:54:23 2024 by rpki-client on console-ams.rpki-client.org