Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/215f2d45-f22e-464c-b4f1-f2e4aa2ef44f.roa
File: 215f2d45-f22e-464c-b4f1-f2e4aa2ef44f.roa (raw, json)
Hash identifier: vM3wE7iqY2IpAfEO1/3kopJZPly/BKQbbiTyTsP4P0Y=
Subject key identifier: 01:7F:00:08:F8:CB:30:69:7A:7D:B6:62:C2:89:66:5A:63:74:15:51
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0D57791C82F69523DAC1672EC57F8A21A40A0CE4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/215f2d45-f22e-464c-b4f1-f2e4aa2ef44f.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 2a05:d000::/25 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:57:79:1c:82:f6:95:23:da:c1:67:2e:c5:7f:8a:21:a4:0a:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=6e9fa7e49251a7081ebeaf18fb892732ef882c6817f08d8701f5d2249ce8f7e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:67:dc:e5:2a:32:24:de:5c:18:d8:c0:24:
b1:57:6c:5b:3f:dc:09:8e:34:1d:e4:c0:d9:6a:ea:
88:42:22:bf:09:cf:fb:bd:e9:aa:ac:41:ae:d8:7b:
9d:13:75:3b:ab:94:f4:ad:2d:59:1a:38:30:96:90:
15:d0:8a:b6:23:ed:17:d1:b7:d5:bf:d8:e2:71:a8:
7c:38:dc:0c:8f:02:c3:36:c5:17:1b:7c:16:ba:53:
b0:54:64:84:8d:eb:29:6b:97:8c:a7:2c:69:af:8c:
ee:1c:39:fa:9a:69:eb:60:98:b5:a5:36:6f:e6:89:
a3:fb:0b:57:cd:3a:24:e0:04:0e:d7:c1:db:28:55:
f5:55:a3:cd:30:e2:56:09:58:22:a4:1d:83:fa:c9:
cf:7e:47:03:f0:bb:69:5f:f1:4a:73:e5:3e:89:1c:
6c:55:23:6c:ff:f5:c9:08:7c:8c:6b:ea:66:32:9d:
0e:df:06:c1:4d:b8:95:9a:92:e5:0d:4f:f5:c8:e4:
54:d6:a4:1b:29:a7:7c:89:ad:05:a9:75:15:b9:68:
07:52:53:cd:62:55:03:ee:e5:96:81:7b:a4:81:3f:
69:16:68:6b:9f:58:61:17:cd:d3:b0:10:d4:4f:2b:
63:d8:73:f3:8c:68:8b:b0:98:a0:63:4f:7a:4f:a6:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:00:08:F8:CB:30:69:7A:7D:B6:62:C2:89:66:5A:63:74:15:51
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/215f2d45-f22e-464c-b4f1-f2e4aa2ef44f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000::/25
Signature Algorithm: sha256WithRSAEncryption
7e:c6:38:f1:cd:3b:d8:20:88:18:cd:ff:be:9f:c0:42:e3:fe:
e9:ff:2e:d1:6f:ed:8a:e0:6c:9a:e6:d7:bb:21:58:43:e5:b4:
f4:2e:e2:11:38:13:9d:8a:e2:4f:1a:27:38:d8:a7:ac:0e:47:
81:63:cc:57:53:be:2d:34:44:af:4c:af:14:21:0a:96:40:28:
d3:11:9b:d9:b6:b7:be:51:72:f9:f2:d9:c4:1b:fa:7b:2f:d1:
ec:a3:ff:67:89:b8:46:f3:59:97:34:8f:45:71:ea:6c:2e:cf:
a6:80:aa:9a:d7:eb:98:37:aa:8a:6a:3e:d8:53:2f:37:28:97:
92:d1:fa:a8:e8:a6:98:0d:35:44:0f:77:c7:e1:b6:d2:91:98:
9f:77:56:52:a4:37:55:eb:cf:c8:79:8c:e9:ec:4b:a2:8d:68:
fc:08:2e:66:3b:99:f7:b7:d9:c5:0f:12:1c:4e:df:8d:a9:7c:
f2:b2:89:18:4a:70:40:c6:0f:d1:6c:4a:60:0f:bb:01:94:86:
cf:f5:66:24:38:9c:b5:12:b5:ac:8c:36:6c:9d:d1:72:ae:85:
51:94:4f:29:02:80:2e:cb:d8:0b:55:3f:4e:44:b1:09:17:e8:
9b:f9:02:0e:e7:c3:7b:bb:2f:d4:5d:93:3b:f2:fe:af:45:4f:
3d:48:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:31 2024 by rpki-client on console-fra.rpki-client.org