Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
File: 2ab74891-6199-47fc-bcde-b8022379067c.roa (raw, json)
Hash identifier: bcWmROn8qZX7FJJ5vHSBQXbPjKBXaNOumOBoVPvNscg=
Subject key identifier: 2D:35:79:40:4E:11:D2:FB:60:32:04:1F:E7:AC:75:14:5A:45:2E:BE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7AAF443536E1073C48318DC5B23F838403F5F4CB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
Signing time: Fri 06 Sep 2024 00:00:00 +0000
ROA not before: Fri 06 Sep 2024 00:00:00 +0000
ROA not after: Fri 11 Oct 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Sep 2024 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:af:44:35:36:e1:07:3c:48:31:8d:c5:b2:3f:83:84:03:f5:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 6 00:00:00 2024 GMT
Not After : Oct 11 23:59:59 2024 GMT
Subject: serialNumber=863db8bf7da71d6c5bf36a7c189988a746b714a33bfb44d2f9091d3a7e03db05, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:0e:90:ee:61:9e:90:a4:11:95:6c:db:54:
34:de:81:87:42:0d:29:2c:58:87:26:aa:e7:f0:87:
89:f5:49:69:8a:fb:f4:0c:bf:11:f1:57:e7:bb:02:
8b:4a:ad:e3:b8:8d:22:d3:88:e7:50:21:ef:c7:68:
9b:22:29:86:53:a8:e4:b9:42:37:15:ee:ad:a3:e4:
66:22:91:dc:30:91:3f:33:79:d3:84:c7:d3:57:e9:
b5:5c:31:10:01:0a:05:82:7f:48:1a:33:da:be:90:
59:72:34:d3:1d:57:5d:65:29:b9:f8:d4:3b:42:bf:
dc:db:61:b5:4a:e8:ab:c8:29:41:32:f8:f7:d1:b3:
92:5c:17:8d:55:9e:65:8e:89:c8:1d:f6:bd:13:3a:
5a:de:97:c0:e1:47:31:39:73:18:f3:11:ee:37:b4:
96:1a:e3:45:44:b5:f0:b8:f3:23:77:55:c8:f6:8a:
f4:9a:c0:cc:ee:ab:c1:59:9d:30:ee:5e:5a:05:46:
de:5e:cf:70:be:49:56:dd:50:f6:fd:91:5b:de:3b:
ee:53:94:04:08:b5:23:04:dc:33:77:d4:22:48:91:
d5:fb:9d:e3:28:b9:f4:ff:db:1b:6b:a0:cd:9d:40:
66:e3:c6:5b:10:9e:94:71:8f:5d:8a:10:3e:c2:f8:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:35:79:40:4E:11:D2:FB:60:32:04:1F:E7:AC:75:14:5A:45:2E:BE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:4000::/40
Signature Algorithm: sha256WithRSAEncryption
3b:05:dc:0d:c7:fe:c7:ea:7c:cc:e2:a9:fd:76:f4:30:d3:9d:
e8:b0:2c:ef:aa:2d:09:7c:d5:21:05:c2:ae:24:7b:3d:c9:0c:
4f:1d:f3:5f:3d:41:69:59:2a:cd:db:40:48:d7:42:48:e3:e1:
5b:78:0f:f7:18:b9:95:79:dd:b1:35:f2:1e:f2:62:cf:ba:7d:
49:80:36:54:8a:a9:ff:b1:98:cb:7e:28:91:25:f0:08:bb:aa:
f3:16:68:b0:23:77:d6:35:ef:84:14:94:fd:a7:19:5f:86:3e:
b5:f4:d8:05:d1:4a:f7:6f:80:3f:a7:a7:05:bc:d7:10:bd:c6:
a7:90:49:46:b3:23:6a:f2:2b:28:e7:41:df:fa:5e:22:bd:f5:
0d:39:98:09:f4:43:f7:7d:fe:15:18:3f:12:71:bc:33:1b:34:
3a:1f:5e:dd:d0:9e:5a:87:e1:ec:a0:a2:05:0f:28:44:d3:0f:
0c:81:75:b2:72:11:eb:d3:cd:c7:a2:08:11:ac:c9:d3:16:06:
cc:12:97:c3:d8:ab:ae:33:dc:63:f6:c8:39:f0:84:47:17:dd:
42:4f:15:a6:e9:8b:6c:9d:ca:76:d7:6c:a6:93:4b:ab:ab:d9:
8c:40:00:1f:1d:a9:cb:d7:42:be:59:3f:fd:c4:1d:9e:82:c0:
cd:64:15:29
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeq9ENTbhBzxIMY3Fsj+DhAP19MswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDA5MDYwMDAwMDBaFw0yNDEwMTEyMzU5NTlaMHoxSTBHBgNV
BAUTQDg2M2RiOGJmN2RhNzFkNmM1YmYzNmE3YzE4OTk4OGE3NDZiNzE0YTMzYmZi
NDRkMmY5MDkxZDNhN2UwM2RiMDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkxDpDuYZ6QpBGVbNtUNN6Bh0INKSxYhyaq5/CHifVJaYr79Ay/EfFX57sC
i0qt47iNItOI51Ah78domyIphlOo5LlCNxXuraPkZiKR3DCRPzN504TH01fptVwx
EAEKBYJ/SBoz2r6QWXI00x1XXWUpufjUO0K/3NthtUroq8gpQTL499GzklwXjVWe
ZY6JyB32vRM6Wt6XwOFHMTlzGPMR7je0lhrjRUS18LjzI3dVyPaK9JrAzO6rwVmd
MO5eWgVG3l7PcL5JVt1Q9v2RW9477lOUBAi1IwTcM3fUIkiR1fud4yi59P/bG2ug
zZ1AZuPGWxCelHGPXYoQPsL4AiUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQtNXlA
ThHS+2AyBB/nrHUUWkUuvjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MmFiNzQ4OTEtNjE5OS00N2ZjLWJjZGUtYjgwMjIzNzkwNjdjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DhA
MA0GCSqGSIb3DQEBCwUAA4IBAQA7BdwNx/7H6nzM4qn9dvQw053osCzvqi0JfNUh
BcKuJHs9yQxPHfNfPUFpWSrN20BI10JI4+FbeA/3GLmVed2xNfIe8mLPun1JgDZU
iqn/sZjLfiiRJfAIu6rzFmiwI3fWNe+EFJT9pxlfhj619NgF0Ur3b4A/p6cFvNcQ
vcankElGsyNq8iso50Hf+l4ivfUNOZgJ9EP3ff4VGD8ScbwzGzQ6H17d0J5ah+Hs
oKIFDyhE0w8MgXWychHr083HoggRrMnTFgbMEpfD2KuuM9xj9sg58IRHF91CTxWm
6Ytsncp212ymk0urq9mMQAAfHanL10K+WT/9xB2egsDNZBUp
-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:48 2024 by rpki-client on console-ams.rpki-client.org