Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12c4ac2e-2a89-4144-9c3f-24db18a67870.roa
File: 12c4ac2e-2a89-4144-9c3f-24db18a67870.roa (raw, json)
Hash identifier: uYkSjYcsKj2FuH7mAbs9xL0sqhaNNWouJ+HUGkAZD4s=
Subject key identifier: F1:D2:91:78:A7:7E:F8:96:A1:17:5B:6C:87:A7:C2:B4:01:C2:F1:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1A039BD96F65BFEF7A7CDA880C9EB8DEBAE502F7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12c4ac2e-2a89-4144-9c3f-24db18a67870.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:03:9b:d9:6f:65:bf:ef:7a:7c:da:88:0c:9e:b8:de:ba:e5:02:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=cfa00c40a6d4899e61b89cea7f45db6d8d6244dea2c19d762db5e2fe55782b3d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:de:c2:af:e9:af:c1:34:00:1f:20:7a:27:
fb:42:47:cc:9c:da:0b:bc:d9:55:5e:c2:a1:c4:fc:
86:2a:5b:d9:4b:dc:76:ff:01:ea:ea:bf:43:7b:be:
bb:bc:80:ff:c5:cb:0b:55:2f:61:6a:28:44:25:ee:
9c:79:cd:70:1f:29:c1:d1:3e:40:8c:d4:bf:42:c8:
2d:ef:fb:c1:f9:ae:87:a8:63:b8:7c:4a:a7:c3:54:
d6:08:66:98:d4:a5:da:fa:c6:ce:64:9f:00:b7:61:
6b:c2:28:55:ef:28:ad:fd:94:3e:2f:a6:0d:c7:f0:
c2:97:1e:52:3e:08:24:af:5b:3b:2b:25:c7:39:ba:
1a:54:44:28:68:2e:91:37:3c:af:00:1b:18:2c:e9:
e9:6d:ef:e3:75:d4:2b:a3:bd:99:76:12:bb:1b:fc:
5b:22:6b:f1:c0:d1:5e:05:5a:cf:28:ac:9f:f2:8b:
93:cb:53:35:0c:65:bb:87:a6:70:3f:fe:be:2c:95:
67:0a:37:c1:83:50:38:2f:ae:9e:c8:9c:b6:b1:09:
4a:d2:8c:94:9b:d6:c8:3d:d6:b5:05:f2:de:2b:03:
a1:98:10:1b:e6:e8:c5:13:e8:d6:dc:d2:c3:f8:b0:
02:81:18:23:d1:67:6c:57:fa:65:44:13:be:da:89:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D2:91:78:A7:7E:F8:96:A1:17:5B:6C:87:A7:C2:B4:01:C2:F1:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/12c4ac2e-2a89-4144-9c3f-24db18a67870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:b000::/40
Signature Algorithm: sha256WithRSAEncryption
07:82:1a:d3:e9:64:ec:3c:e3:cc:03:f4:ae:42:f6:65:fd:fd:
e6:6d:ae:70:e6:96:99:ad:52:d7:03:86:d1:b0:a1:b6:28:7d:
01:70:28:b2:75:76:66:9a:af:4a:9e:62:72:21:33:5e:b5:cd:
08:65:a7:1c:7f:c6:c6:a6:42:6d:46:e0:a0:64:98:a8:72:18:
cd:cb:82:6d:d6:81:80:19:70:81:eb:0b:09:74:10:a7:01:3f:
27:3b:10:2e:66:55:11:44:c5:ac:ce:e1:0c:69:01:6c:54:5e:
8e:a0:a8:67:c0:98:ea:80:18:09:87:3d:8c:fb:8f:7f:11:37:
90:38:c4:c8:1a:f4:78:03:ea:a6:fc:10:e5:39:7d:75:42:96:
58:a0:99:6e:f0:79:61:22:86:c6:9e:f0:2d:10:57:04:25:62:
da:e9:2b:e8:18:09:35:0e:9d:02:2c:91:72:29:d0:4d:31:e0:
12:1e:02:1d:eb:9e:69:78:07:8f:75:56:19:e7:31:f1:bd:f1:
65:48:28:e2:a5:4f:0b:80:b4:b3:8e:a0:b0:4d:48:bb:6a:83:
23:ae:89:55:50:f6:dd:3d:f0:95:38:36:97:6f:02:db:31:d0:
17:a9:5e:61:aa:ab:ad:fa:1b:05:a6:7d:ef:9e:87:70:37:7e:
03:7c:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:31 2024 by rpki-client on console-ams.rpki-client.org