Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a0bbc81-c72e-4bc3-aa05-9e9aee8f319e.roa
File: 1a0bbc81-c72e-4bc3-aa05-9e9aee8f319e.roa (raw, json)
Hash identifier: Igy0+bl2EhxizVGMdo3EtoHGB1rOBnlaLV5POz84T2k=
Subject key identifier: 61:F0:F9:92:47:0F:72:D5:9C:22:0A:64:D2:23:4C:BF:52:83:F9:71
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1F1B8B757A214A984F81C9D0398FE28C72336A23
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a0bbc81-c72e-4bc3-aa05-9e9aee8f319e.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1b:8b:75:7a:21:4a:98:4f:81:c9:d0:39:8f:e2:8c:72:33:6a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=1d0a602242ba3bd6613c032650f53173367a23c53e6d31beb06b9f4460c23f14, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:0d:3c:55:bf:91:a9:3f:84:33:0f:86:d2:
cd:19:6d:94:ee:a5:0c:14:83:63:dd:6d:f6:7c:fb:
98:38:58:89:89:36:13:2c:86:c3:ac:e3:2b:a9:10:
a2:20:27:c8:cb:80:95:f8:ee:b0:38:eb:1f:bb:b2:
b9:37:84:7a:aa:1d:11:e6:96:10:fd:af:17:58:dd:
42:70:b2:a2:c0:ec:d2:95:61:56:c5:b2:5f:fb:23:
9c:2e:bf:a7:f6:9b:d9:db:69:4a:6e:9b:a7:1f:df:
a9:6e:de:b8:9f:e0:fd:8a:ac:c4:80:7b:36:b9:4e:
fe:b4:e3:05:b1:58:d3:be:93:1f:04:25:04:a5:b6:
b3:04:44:01:17:b3:71:79:a5:01:73:91:74:4b:08:
8d:6a:88:e6:bc:b6:ca:f1:d6:a0:aa:59:ee:23:08:
2b:c9:f4:c6:22:99:9e:d8:f3:54:ae:c9:31:1c:43:
4e:c4:07:54:11:5d:39:7c:7d:0c:1b:b2:35:bd:d6:
d3:d4:ce:08:49:a3:ba:ca:a5:8b:90:0d:d7:08:f7:
f1:3e:b7:45:2c:55:f8:37:cd:66:b6:cc:76:ec:e0:
20:4d:77:61:29:42:d4:b4:46:79:f0:ce:6a:c9:37:
c9:f0:86:e0:43:70:d2:54:c3:39:ca:12:61:bf:a2:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:F9:92:47:0F:72:D5:9C:22:0A:64:D2:23:4C:BF:52:83:F9:71
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1a0bbc81-c72e-4bc3-aa05-9e9aee8f319e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:e000::/40
Signature Algorithm: sha256WithRSAEncryption
34:3e:47:ae:7d:75:7e:83:b6:b4:df:d3:9c:9a:53:0c:33:bd:
dc:8f:53:4d:bf:85:b9:10:a2:b3:25:6e:fb:8f:58:cf:d1:ee:
bd:32:50:4a:1e:c4:fa:88:f6:49:2a:cf:9e:8a:81:0c:04:42:
89:d0:38:47:af:fc:ed:4d:78:a0:2b:75:5c:10:44:cc:36:49:
78:90:18:ef:c5:9a:75:a5:52:d8:e1:2f:f9:e7:33:18:63:37:
61:e2:f7:d2:10:04:f9:b6:04:f0:7e:8e:cb:2d:44:f9:28:8c:
2f:da:16:20:f3:71:bc:cc:a5:23:c3:33:05:3a:75:4a:69:19:
8c:5b:ed:31:dc:98:97:2d:bc:00:0e:8e:0b:40:1e:73:da:f7:
dc:bf:83:73:7f:4b:e0:dd:d0:7b:f4:48:45:5a:4f:b7:e9:c3:
ca:0a:dc:7e:0d:75:01:7c:b2:fc:88:61:ce:80:38:6b:e0:ef:
48:9a:4b:38:b6:b5:db:ee:75:1f:e3:31:f9:a6:05:ee:04:93:
59:32:45:ef:ec:3b:50:27:d4:8e:98:2d:8c:c6:ce:7b:ca:87:
bb:dc:8e:a7:e6:d8:96:c1:6c:98:39:17:17:5e:ae:37:f6:05:
d9:24:04:cb:8c:97:d6:a0:9c:ab:7c:7e:43:30:86:73:39:a5:
27:09:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:27 2024 by rpki-client on console-ams.rpki-client.org