Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
File: 58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa (raw, json)
Hash identifier: jsMtjyrkRLk5kyhh6eGGst97pT+GgNHuC1WjmnZD+kg=
Subject key identifier: 07:2C:0E:68:D4:F1:85:0C:B5:67:6D:24:9B:25:84:33:2D:36:AF:B0
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2A83F17F800E932240DE469B134DA164EA2CB6D9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:83:f1:7f:80:0e:93:22:40:de:46:9b:13:4d:a1:64:ea:2c:b6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=9caf82a0993293b0862e3e52509d8227d7a151f33a536157474b23c495494570, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:30:fc:bd:7f:09:0c:ea:e6:c8:e8:d1:8a:
b3:32:6d:e9:de:87:8e:0b:3a:4c:80:68:65:be:90:
31:08:1f:ab:91:65:9a:b4:bc:89:0d:a6:4c:7d:22:
2f:a6:ac:d7:78:39:fc:71:51:37:cd:c1:8a:44:8e:
cc:f9:71:39:4c:94:ab:be:0f:28:a1:9e:92:46:a3:
27:2c:2a:5a:ea:81:9b:65:45:f4:ec:5f:d4:2e:e7:
d7:75:3c:8e:b0:06:ec:00:61:ab:94:66:dd:99:74:
3b:4b:27:a0:d2:b3:a7:81:d5:08:29:3e:3a:94:91:
ec:0f:73:27:c0:1f:fa:8f:32:a9:bf:fb:ee:00:65:
d2:15:5f:65:06:bd:a4:c4:79:39:96:2c:c5:95:3d:
1d:10:4d:0c:b0:e6:31:60:d2:1a:84:ef:6e:82:a4:
1e:a8:b3:4b:70:2b:66:7c:af:17:3d:d3:f7:0d:69:
a2:0f:6a:bd:36:9a:fb:29:03:af:37:bc:66:29:2f:
cc:db:d7:f5:f2:08:9d:2c:10:ad:53:ca:e2:1b:f0:
d6:4f:25:07:e9:62:a5:72:5b:62:76:27:8b:c9:6c:
3e:fc:22:6c:73:1f:95:88:8c:f7:c7:c9:5e:79:36:
d6:1f:e1:36:7f:c9:70:e9:6e:02:6c:08:d6:0e:51:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2C:0E:68:D4:F1:85:0C:B5:67:6D:24:9B:25:84:33:2D:36:AF:B0
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/58d3d0e3-44a1-4172-b9bf-138a61abfdf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:8000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:79:33:83:9f:05:88:06:20:a8:c3:b9:3c:2b:ab:6b:66:5e:
88:0b:6e:7f:09:84:a3:82:7d:88:7d:46:92:88:36:8e:83:6f:
36:6e:5c:77:13:d1:57:a7:8b:5e:9b:0d:4b:bb:a3:d8:0a:59:
fb:a4:0b:20:80:a7:c8:86:85:b5:42:50:bd:b6:a7:09:79:9c:
fb:e2:ce:5b:77:70:33:60:95:6b:1c:ff:4e:1e:81:02:43:00:
95:61:b1:9a:4e:8d:7f:cc:e4:2a:06:63:35:80:c1:2d:96:12:
cf:a6:e1:46:96:b6:fe:a4:e0:6e:f3:6f:93:dd:a4:68:60:83:
e8:6f:d9:2a:55:3f:be:fc:31:ef:73:7e:7a:ba:19:3d:57:b4:
7d:1f:2c:50:4a:ae:6e:48:c7:84:fe:e1:e6:f3:3a:d4:a5:8c:
32:fd:df:fd:27:36:a7:83:1f:16:ab:ab:c0:94:87:2e:5c:1e:
01:76:cd:3c:f8:34:b7:01:31:20:a1:95:78:43:e5:0c:eb:06:
19:ea:17:db:f9:be:c7:bc:89:06:3d:f8:1a:8d:2b:4f:c4:b6:
26:1a:4e:92:31:b8:56:26:6e:1d:51:20:6b:59:62:c3:6b:2e:
83:5a:94:4d:6f:dc:c6:84:e6:1a:e9:a3:cb:8d:73:3c:3b:1c:
e7:48:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:31:26 2024 by rpki-client on console-fra.rpki-client.org