Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
File: 2ab74891-6199-47fc-bcde-b8022379067c.roa (raw, json)
Hash identifier: BK5oTNCmZE/jvzwMmsHQFFy/fVp8UZq0bFWd/rVDrdc=
Subject key identifier: 54:90:4D:2C:66:58:1A:09:61:A3:1D:84:B2:B0:45:50:B5:39:7A:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 45EB43AA401616E38B9F92FA330F86147B0B4BAD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
Signing time: Mon 28 Oct 2024 00:00:00 +0000
ROA not before: Mon 28 Oct 2024 00:00:00 +0000
ROA not after: Mon 02 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:eb:43:aa:40:16:16:e3:8b:9f:92:fa:33:0f:86:14:7b:0b:4b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 28 00:00:00 2024 GMT
Not After : Dec 2 23:59:59 2024 GMT
Subject: serialNumber=bad20552c0232548c09f0d93fef32d6f00ce4f1a25f623036ebb2beb30fea727, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:a4:13:dc:29:af:b0:fe:b7:33:21:5b:b0:
70:38:42:3c:42:6b:fb:be:03:1b:a0:b6:b5:ce:cf:
4c:26:59:95:c5:de:95:2b:5f:ba:a9:0a:ec:33:92:
3a:c8:28:2b:fd:34:43:2b:fa:57:b8:76:83:77:eb:
c8:17:e0:56:e2:6a:2d:9d:25:7e:c0:05:1b:ec:5e:
05:57:ff:de:a0:86:b5:40:8a:2f:81:50:c2:34:0f:
9e:7a:47:5f:6f:41:2a:ec:ba:0e:1f:e2:02:c6:b9:
84:1c:75:61:86:53:3c:5e:89:0e:8b:25:45:fc:d4:
fc:f9:04:7b:33:e9:a9:a0:bb:03:09:18:8b:68:5d:
72:51:db:a2:18:28:b1:8b:82:5d:79:1f:3b:bf:4b:
47:39:a8:7a:2d:b7:c6:6b:d5:53:bb:e2:aa:c5:5d:
2b:77:85:6a:a5:c5:dc:47:ef:c8:ed:8f:db:af:1e:
b1:9e:67:3c:15:f6:56:4a:9a:9d:76:41:ae:af:d1:
f3:c0:ef:ef:aa:cf:0a:f9:4e:b9:70:4d:8f:a4:5b:
0e:bd:3c:21:45:a0:33:1d:41:f5:46:91:1f:23:f6:
58:d0:29:87:31:85:35:d1:ec:e8:37:ce:fe:67:ff:
fa:14:f8:05:18:fd:7f:32:b1:e1:b7:88:da:9e:29:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:4D:2C:66:58:1A:09:61:A3:1D:84:B2:B0:45:50:B5:39:7A:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2ab74891-6199-47fc-bcde-b8022379067c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:4000::/40
Signature Algorithm: sha256WithRSAEncryption
b0:fd:27:71:05:73:97:f9:6e:15:46:a0:4d:18:ec:a9:9e:5d:
e9:25:be:81:0a:28:37:29:d2:7e:b2:69:cd:26:35:db:c4:88:
56:8e:36:d0:80:dc:04:82:a4:f2:d6:fb:48:f8:7e:d8:5f:17:
fb:f3:70:01:5a:e2:82:09:4c:92:43:d2:0b:db:1e:d3:93:11:
82:c5:73:17:02:90:d2:ae:92:55:19:5e:0a:8d:4b:cb:d8:f1:
6e:bd:ba:5c:a0:22:66:33:33:95:0c:1f:8b:a5:f8:f0:92:77:
03:ae:83:03:3c:cc:9c:c6:b1:b5:47:5a:a7:df:10:49:40:92:
92:d3:8f:83:7c:bb:98:0a:78:96:83:f1:1d:82:8e:45:29:ec:
89:84:1c:d8:5b:f8:7b:cd:f7:54:9e:87:e1:47:7e:f1:56:70:
18:35:5c:5d:d5:5d:80:0d:80:17:d0:d7:a4:e5:90:4c:15:95:
a7:39:79:0d:4d:95:34:ef:54:7b:ea:1f:01:3c:34:f0:e8:1b:
53:ff:70:ce:ef:9f:85:30:66:a3:02:69:bc:14:b3:74:14:0c:
62:5c:71:eb:e3:f5:5d:56:bb:72:7c:c0:8b:15:59:22:5b:2d:
f7:c4:ec:9b:79:c5:4f:5c:0f:cb:18:8f:f0:ef:61:e3:3a:5c:
42:ca:aa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:32 2024 by rpki-client on console-ams.rpki-client.org