Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
File: 45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa (raw, json)
Hash identifier: 6U/xw1zZAwVhotfOEmCeHaJq+INzf5e0/lLQ1+dvSRM=
Subject key identifier: EA:82:6A:14:F7:1C:FC:F6:46:19:6B:00:AF:5E:09:6D:E5:E7:F2:23
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7D8770F9329D5BD93F0A142175996996C1E56728
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:87:70:f9:32:9d:5b:d9:3f:0a:14:21:75:99:69:96:c1:e5:67:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=68a15ef514dbf73101b389730e9f8c8bc7f579d84d01ae7742211b3f57b87c0a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:f2:99:a2:5f:e3:e6:6d:27:af:44:b1:35:
5a:9c:c9:dd:43:64:5e:45:e4:ca:87:0d:30:97:7d:
ba:3f:4c:e6:23:62:2c:ad:04:44:aa:53:ba:20:08:
3f:8b:bc:1e:ad:95:cb:6e:11:22:ad:b0:f7:e2:39:
3b:17:bb:4a:d7:37:55:7e:7d:f5:6b:5c:55:94:43:
f7:3d:01:df:f1:34:56:2e:f1:ea:33:13:64:37:18:
70:95:d2:bf:c7:d2:a3:56:5b:78:92:dc:92:32:9a:
cd:99:84:0f:11:18:3e:79:34:ed:8e:8a:d7:59:4c:
21:8b:80:a1:cd:9f:47:cb:a9:90:f8:4d:67:ac:a8:
3b:04:8f:57:e7:c9:6a:a1:b2:dd:3b:a2:33:57:36:
23:af:eb:a3:69:42:96:37:74:c3:b6:02:26:0c:9c:
d3:a7:e9:df:e3:41:f8:b2:45:28:c9:28:ee:2f:eb:
e4:19:74:b7:4f:df:3b:dc:a1:c7:96:19:f7:86:4e:
76:c2:e2:30:dc:86:c3:3d:59:1c:2f:df:49:60:48:
71:41:33:97:d5:b6:8f:76:c5:7e:39:2e:03:d2:ce:
a9:f4:01:69:7a:33:ed:bd:b6:96:81:9d:60:56:42:
7f:ef:a4:4b:f7:84:46:44:dd:a5:6f:71:e7:d9:db:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:6A:14:F7:1C:FC:F6:46:19:6B:00:AF:5E:09:6D:E5:E7:F2:23
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:e000::/40
Signature Algorithm: sha256WithRSAEncryption
be:3e:fc:e0:60:e8:c0:73:95:21:2e:e1:a9:c9:83:a7:a2:a1:
9e:ea:32:96:d7:67:7d:50:b2:3c:6e:e9:f0:3a:09:08:4a:b7:
29:1d:a8:d5:9c:04:a8:62:12:ee:2a:2b:be:ab:b8:60:32:2a:
7e:2a:53:bb:fc:77:f7:9d:d5:73:f1:c1:fb:e9:b5:44:52:12:
1e:3c:ea:a7:74:5e:2d:88:c3:a8:a0:f0:ab:65:9c:62:1d:91:
89:0d:36:90:c7:0f:a0:a7:d2:bc:9a:c3:47:37:cf:ab:30:bd:
3e:dc:80:de:06:61:ff:c0:fc:24:6a:08:31:23:46:97:a2:19:
5b:8b:ac:63:52:2e:93:9b:6b:38:4e:bd:a9:c8:5c:08:95:80:
c1:fd:62:b3:48:91:b9:7d:7c:c9:06:30:49:aa:7b:94:d4:6e:
0e:1d:46:98:90:c5:b7:80:b1:2f:ba:7e:9e:33:ac:fa:14:23:
6a:23:22:b6:04:db:a8:0c:f0:23:0e:c2:be:16:6e:93:be:5f:
c3:da:8a:67:31:f8:b9:92:29:66:ff:da:ce:40:34:f6:ec:c5:
b3:2b:6c:92:22:19:09:e2:b6:47:a5:e2:2a:94:a7:20:66:8a:
91:a0:9e:8f:c5:a0:72:c2:40:bb:f4:6f:c6:a1:bd:69:4f:bd:
51:f9:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:44 2024 by rpki-client on console-ams.rpki-client.org