Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27e57c8a-3f63-4773-a205-fef17d1cf1d1.roa
File: 27e57c8a-3f63-4773-a205-fef17d1cf1d1.roa (raw, json)
Hash identifier: /kI8DgWzXSjPpkuNl8p0O88XZNdTlAg6anmwkqFkRV8=
Subject key identifier: C4:56:DA:A6:59:8A:5B:AF:FC:BB:34:67:C6:68:DA:9B:83:99:9F:D3
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 632EE1F79A24FA60060B6838F7B23BD98B38E176
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27e57c8a-3f63-4773-a205-fef17d1cf1d1.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2e:e1:f7:9a:24:fa:60:06:0b:68:38:f7:b2:3b:d9:8b:38:e1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=8907107e1a45973a97662b6e0b538e93a65b292a8471883c0c573e5ef05850ad, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:73:58:35:cb:df:89:e3:68:61:03:a3:84:
36:ab:bb:c4:08:1b:6e:d8:5d:5e:af:06:ba:53:39:
e8:45:88:51:cf:f8:f5:0b:e1:05:da:70:4f:01:42:
53:07:9b:be:2b:22:b3:14:4c:38:a0:f8:b0:c8:b1:
b7:6b:fe:72:f3:4e:49:f0:8a:5e:46:fd:7f:30:2c:
d6:f1:7f:3b:51:55:1e:ad:41:7c:db:d9:a1:84:88:
51:a7:9c:9c:3b:9b:87:a0:0b:5e:84:11:21:4f:8d:
a6:75:51:20:04:95:70:bb:8a:32:4e:22:8b:e2:91:
9e:9b:a0:df:77:29:c4:93:f4:a2:51:d2:fc:23:8e:
32:55:a6:c5:25:d7:ad:76:a8:71:fe:de:77:d6:de:
62:c9:67:e7:b6:3b:fb:ff:0c:99:4f:cd:1e:ed:22:
63:69:a0:36:33:8e:ce:ca:d8:2e:f1:96:1f:78:d0:
26:fb:0c:1f:22:25:47:3c:77:e1:79:e8:77:d9:01:
8b:43:e0:38:5e:78:8d:71:cc:2c:7c:4e:6a:22:77:
a2:c7:24:43:ff:55:83:f6:5b:63:3c:bf:dd:0e:4e:
05:93:59:67:c0:11:29:03:df:02:32:22:b3:a1:a3:
94:ba:05:aa:94:4b:06:a2:83:97:d3:d6:27:ec:a8:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:56:DA:A6:59:8A:5B:AF:FC:BB:34:67:C6:68:DA:9B:83:99:9F:D3
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/27e57c8a-3f63-4773-a205-fef17d1cf1d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:5000::/40
Signature Algorithm: sha256WithRSAEncryption
62:18:0b:5f:19:e1:07:4b:9a:31:59:48:d7:b7:31:d7:ef:6c:
6b:95:84:32:52:51:d7:a3:f6:6a:3c:9c:39:ed:89:b8:8c:11:
ce:70:05:af:86:54:68:50:f5:ed:c3:81:2b:3c:aa:ef:c0:d7:
0b:d6:32:68:65:34:3e:23:35:21:34:95:f2:d3:76:4c:fa:c8:
9a:21:74:80:b0:d4:46:5b:e4:23:0e:b0:7d:eb:09:56:56:fb:
aa:15:6d:2e:9b:12:5c:dd:cd:30:03:e2:49:0c:7a:57:0a:5b:
90:79:ba:e5:59:9c:83:31:0a:5d:6c:c6:16:9c:34:cb:2d:af:
e1:d1:c4:dc:92:e1:ae:61:ad:04:f0:95:ed:c9:6e:cb:cf:ad:
cd:cf:66:4d:c6:42:b9:3b:5a:d0:bf:74:ae:c7:ec:94:cd:30:
6e:85:8e:c7:a0:2a:7d:0b:6d:6f:88:44:ad:23:d5:6d:6d:e4:
30:db:c9:e5:57:17:03:8b:00:5b:a1:cf:ef:86:72:0c:6f:68:
71:15:27:72:0b:ae:cb:e8:c6:7e:34:4e:82:00:88:9f:ca:44:
29:47:68:45:31:3b:69:69:ce:d0:81:2a:a7:0e:95:82:be:60:
16:97:b7:82:39:67:e1:88:66:63:7f:6f:40:fb:c2:10:93:83:
18:44:27:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:40:29 2024 by rpki-client on console-ams.rpki-client.org