Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa
File: 4498c2d2-5806-4a94-bd91-8de10249561d.roa (raw, json)
Hash identifier: Gb+glC9NIewTtWlCXKzKIp/NQ40h8EPO5i1PRaJgap4=
Subject key identifier: 8F:D4:BD:22:ED:DC:F2:2B:18:FF:09:CC:13:AC:30:5E:A3:A6:D3:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5ED8110E74D4AE2840EDD2EF03F17B5BCE8BB9CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa
Signing time: Fri 15 Nov 2024 00:00:00 +0000
ROA not before: Fri 15 Nov 2024 00:00:00 +0000
ROA not after: Fri 20 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d8:11:0e:74:d4:ae:28:40:ed:d2:ef:03:f1:7b:5b:ce:8b:b9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 15 00:00:00 2024 GMT
Not After : Dec 20 23:59:59 2024 GMT
Subject: serialNumber=b6b8b7143a17d0ce64c63e9060d02b06853c7af4afab6fe494fd7f52a05513fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:70:f3:18:99:ea:9f:36:72:dd:6d:de:1a:
96:f8:21:5f:02:0f:54:26:37:b3:49:b3:d7:1c:24:
cd:b9:33:a3:ba:52:e1:1b:2e:45:73:37:a0:65:8f:
88:ec:80:23:3f:eb:15:76:ca:38:12:ec:98:c8:d4:
8b:98:26:18:38:c8:74:9e:da:86:cd:5c:ad:79:fc:
ee:99:32:5b:cc:a6:94:c3:c9:0e:86:d0:94:4f:12:
b1:b0:2d:8b:98:da:12:3e:8f:31:b9:c7:3f:c4:6f:
44:b9:e2:44:76:d9:86:1c:d8:38:43:e7:6a:8a:ce:
7d:dc:c8:b2:43:60:20:42:6b:90:bf:1d:11:08:e5:
d9:34:a6:18:a5:e1:72:ab:69:1a:ee:40:0d:c8:be:
fa:5b:bd:87:4e:3f:25:62:df:2f:88:24:f5:76:4e:
a6:6c:98:a0:97:ba:fe:c4:7d:d7:80:72:92:ca:d8:
8e:8d:dd:cb:87:80:5b:93:65:01:7e:b9:44:3d:1c:
0f:36:0b:5b:06:ce:88:a5:8f:a0:b0:30:72:96:62:
60:8a:0a:f5:38:36:8b:31:7e:63:a2:94:ed:ca:f4:
3a:a0:76:d0:99:04:36:fd:59:3e:f6:39:e2:53:27:
24:64:38:a6:21:5f:76:53:ca:4e:74:4a:ae:2c:bd:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:BD:22:ED:DC:F2:2B:18:FF:09:CC:13:AC:30:5E:A3:A6:D3:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:e000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:06:cd:ff:25:ad:ea:ce:8e:c4:a2:92:f8:57:5a:29:12:41:
34:1d:79:8d:c9:9a:10:87:0d:68:70:a2:44:cf:ab:9d:1c:10:
21:7c:96:8e:61:d6:d9:ff:d1:38:fa:66:86:4c:87:ad:4a:14:
c5:8b:54:1e:ee:b0:de:e1:ee:05:56:ec:e7:be:58:c3:d7:aa:
bd:fe:dc:5f:d0:c3:f3:2b:9e:1c:67:01:9c:05:26:cd:68:13:
99:a9:43:45:a6:2e:07:a3:49:57:de:62:83:e8:87:fd:60:b7:
1b:33:aa:82:4b:67:c3:18:5a:6a:3e:48:92:d7:e5:9c:ee:3c:
d2:df:ba:b1:83:c3:bf:7d:48:d8:09:7f:a0:49:63:81:a4:95:
ec:7e:01:d4:cf:00:b0:5f:13:d8:4d:d8:4f:83:a9:94:c2:89:
69:da:99:3f:86:90:5b:25:d3:64:cd:54:b9:fb:43:10:b9:91:
e4:09:41:55:93:03:e7:9d:01:6a:85:8e:0d:0a:cc:7a:2f:13:
d2:0c:20:ca:58:ff:3a:d5:81:3c:85:c3:4f:9e:16:62:fa:26:
7f:37:09:35:7f:be:37:34:3b:e7:a9:8e:aa:25:77:30:44:9e:
6f:ec:31:3b:45:39:38:6e:20:1a:54:18:6b:d3:1b:f8:93:0f:
b0:f7:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:31 2024 by rpki-client on console-fra.rpki-client.org