Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
File: 15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa (raw, json)
Hash identifier: Ql7sWzlrAmVv6lb/sxen1COrzYTgTq6mroezcTVY7NE=
Subject key identifier: 0D:19:78:BE:2B:00:BF:CA:5F:61:B0:0C:BA:7C:89:97:07:80:34:E0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 61F6BF0476ED4757676BAE4F94E6A53B27A7A27B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
Signing time: Tue 23 Apr 2024 00:00:00 +0000
ROA not before: Tue 23 Apr 2024 00:00:00 +0000
ROA not after: Tue 28 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01c::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f6:bf:04:76:ed:47:57:67:6b:ae:4f:94:e6:a5:3b:27:a7:a2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 23 00:00:00 2024 GMT
Not After : May 28 23:59:59 2024 GMT
Subject: serialNumber=b08a13ff8c039bcc815b2b5daa7c9343f815026f883912a0a1282a3c8d19c8c8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:87:0b:08:2a:82:75:21:01:53:fa:c8:f7:
77:9c:ec:67:0b:c9:a7:d0:f1:49:7e:7c:ad:83:85:
8b:8a:43:c2:2f:ad:9a:fa:b1:fc:6c:5a:52:94:58:
d7:81:e2:51:6c:f7:3a:0c:9f:e3:76:f8:44:b9:32:
6e:7d:6b:0a:ab:fa:d9:18:fd:a2:b5:a8:b4:c9:78:
fb:fc:b3:fb:a4:09:8c:31:a7:26:58:00:b3:d0:b5:
2c:7f:1d:1f:f5:61:0a:d8:d8:3c:09:af:2f:7c:76:
32:92:01:c7:45:3f:31:a2:26:b6:d0:07:d2:1e:f8:
4a:1f:36:8c:b6:38:e4:02:c3:56:33:2e:80:0a:ca:
34:dc:3e:31:22:d8:52:98:3f:53:ee:56:c1:1f:e4:
c8:e3:08:7c:59:3d:c5:8d:e6:e1:95:a2:3d:6c:a0:
ca:7f:51:94:d5:3a:ad:53:30:8d:e1:f5:5c:13:86:
82:cc:01:01:e4:98:35:49:02:df:52:ab:5e:f4:3c:
83:be:e6:3f:63:55:95:dc:0e:65:fd:fe:73:a6:8f:
95:43:91:3b:61:47:a7:21:8a:33:b4:83:78:38:5d:
66:1f:d4:1b:95:e2:49:80:5c:84:bd:0a:e6:d1:8b:
7b:95:0f:5a:ad:68:9f:83:d6:00:41:29:2b:ba:ff:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:78:BE:2B:00:BF:CA:5F:61:B0:0C:BA:7C:89:97:07:80:34:E0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/15bb95ba-ebea-4e26-bf73-67b8bf6b89cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01c::/36
Signature Algorithm: sha256WithRSAEncryption
10:d6:48:98:18:f5:7b:59:64:b3:a6:3c:7f:95:68:77:f6:16:
6a:6f:9d:79:8e:24:79:84:08:6d:ea:b4:a6:83:b5:26:8b:7d:
cc:dc:6b:4c:a1:4b:7a:ec:21:da:0d:f3:50:5e:b1:e4:1f:88:
b2:cc:99:73:e6:06:89:80:b2:37:d2:3a:f9:af:48:ff:fa:3e:
59:0d:09:3e:e2:49:10:f7:64:2c:8b:e0:5c:2f:a3:47:6e:98:
65:a5:90:65:e1:5e:11:45:74:96:54:97:00:2d:08:5b:d9:3b:
fc:1e:d8:6c:9c:71:01:98:07:98:9a:b7:5b:fc:da:22:5d:72:
09:75:7a:21:43:94:90:46:78:5a:28:d4:70:85:aa:4d:37:95:
25:70:55:24:31:3b:da:70:c4:9a:10:c7:a5:dd:30:e7:f3:1c:
05:df:af:df:a3:54:16:a4:7d:b2:7f:01:e8:66:00:83:09:e9:
04:be:4f:f3:99:ac:1c:84:82:3e:d7:65:97:6a:41:27:38:a6:
35:ef:63:80:03:7b:0a:81:cb:87:f4:0f:2e:a5:8f:e9:16:c9:
cd:e6:c7:c0:f1:db:e4:a4:b9:ba:ad:e0:c3:95:d8:21:de:a2:
2f:c0:90:45:f5:cb:56:89:e4:72:3f:7e:fc:1b:76:1f:6f:c8:
fd:a9:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:03 2024 by rpki-client on console-ams.rpki-client.org