Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
File: 61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa (raw, json)
Hash identifier: ch0YpTVQhycw4AHL9QtHTpXvUls5N0zso2w03upMjlc=
Subject key identifier: 8E:C8:87:2B:33:5F:36:E0:57:09:92:9D:EC:77:E5:2F:AB:D9:ED:AF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 25C71512CD64F2145BAA762B9B94DA02F940FC1E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c7:15:12:cd:64:f2:14:5b:aa:76:2b:9b:94:da:02:f9:40:fc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=6c7437eb976d584b1948b681f6ab6a91a25ccf94ea4ab7d96e4d16c015d036cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:07:9e:04:bd:b9:2d:d6:6c:e4:29:8c:a2:
f2:89:93:90:49:15:4a:38:5f:7e:7a:25:0e:8c:dd:
fc:e4:c7:97:00:d4:c7:9c:cf:b1:de:5e:d9:b9:44:
40:76:57:02:06:05:83:64:7a:19:ee:5b:2d:05:94:
c0:1f:5c:d1:0c:84:07:93:69:d2:80:6e:5a:33:59:
98:c3:38:e3:20:9a:dd:e4:8c:05:da:ba:37:78:71:
d7:9a:36:c0:93:04:ae:e6:a4:52:74:a4:50:34:11:
78:65:75:ce:ce:9a:cd:30:f8:79:b7:e1:52:ae:27:
e1:30:11:40:15:02:bc:d2:1e:73:a2:f7:f7:83:a2:
38:58:bb:11:91:36:8a:03:56:58:e0:76:71:a5:e3:
f5:d1:61:65:69:35:c6:4a:be:71:ef:4d:fc:c9:ee:
a2:0f:dd:b8:cc:92:7e:bd:d5:5e:a0:28:72:25:40:
1c:59:24:3b:00:eb:ad:88:bd:27:04:1a:b6:93:a7:
3d:79:64:77:7d:79:2e:39:4d:d2:b0:55:b4:f4:3f:
ef:5f:d7:2a:a8:cd:f0:90:80:7f:55:0e:1d:fb:73:
8f:c3:f9:ed:8b:2b:bb:cf:f4:06:2b:81:4a:48:3a:
5e:d3:be:c4:52:19:22:64:82:64:5a:a9:52:1c:fc:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:87:2B:33:5F:36:E0:57:09:92:9D:EC:77:E5:2F:AB:D9:ED:AF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/61a0530d-8d0b-4fd7-8bef-6b8c99c3df33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:a000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:13:b8:b9:f8:3d:d1:76:23:28:f0:50:23:49:48:59:2b:ea:
66:ce:58:89:50:13:f4:5c:fc:75:9a:62:30:d2:14:49:0b:4a:
cf:fd:24:27:29:87:9a:52:1a:c2:1f:fd:3f:de:40:2e:27:61:
a4:9c:05:3c:d8:52:ff:cd:52:a3:fe:a7:5d:3a:8f:f3:2b:1b:
af:0d:7c:4a:e7:06:77:2f:12:f3:61:43:a8:ce:59:cb:30:c8:
46:e9:b7:28:98:5a:e5:56:c9:c8:d9:1a:79:72:aa:45:2d:35:
d6:4c:1b:e2:09:f7:6c:12:81:fb:1c:09:2c:36:e1:c1:0a:69:
88:9b:3a:76:f6:1b:0d:41:19:16:5e:f2:1e:9f:4f:aa:af:7f:
1f:71:d1:71:64:b9:91:6d:96:48:44:28:b7:0a:32:16:20:f6:
95:50:2e:bd:60:71:cf:75:f8:ce:15:46:96:4b:b3:60:3f:91:
49:85:33:59:e4:3d:f5:82:c7:de:29:39:90:56:2c:9b:e5:a0:
cf:14:f5:2c:60:85:5f:fc:60:d8:d1:e6:23:c8:63:e6:61:9c:
90:24:87:13:76:b1:33:b3:f5:58:15:e2:58:cf:da:5c:3f:d1:
24:5e:08:4f:b0:e2:93:26:60:42:bb:89:f1:aa:1d:11:d3:e5:
af:b2:ad:40
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJccVEs1k8hRbqnYrm5TaAvlA/B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDA0MDIwMDAwMDBaFw0yNDA1MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDZjNzQzN2ViOTc2ZDU4NGIxOTQ4YjY4MWY2YWI2YTkxYTI1Y2NmOTRlYTRh
YjdkOTZlNGQxNmMwMTVkMDM2Y2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJNYB54Evbkt1mzkKYyi8omTkEkVSjhffnolDozd/OTHlwDUx5zPsd5e2blE
QHZXAgYFg2R6Ge5bLQWUwB9c0QyEB5Np0oBuWjNZmMM44yCa3eSMBdq6N3hx15o2
wJMEruakUnSkUDQReGV1zs6azTD4ebfhUq4n4TARQBUCvNIec6L394OiOFi7EZE2
igNWWOB2caXj9dFhZWk1xkq+ce9N/Mnuog/duMySfr3VXqAociVAHFkkOwDrrYi9
JwQatpOnPXlkd315LjlN0rBVtPQ/71/XKqjN8JCAf1UOHftzj8P57Ysru8/0BiuB
Skg6XtO+xFIZImSCZFqpUhz8JPsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSOyIcr
M1824FcJkp3sd+Uvq9ntrzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjFhMDUzMGQtOGQwYi00ZmQ3LThiZWYtNmI4Yzk5YzNkZjMzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HWg
MA0GCSqGSIb3DQEBCwUAA4IBAQBuE7i5+D3RdiMo8FAjSUhZK+pmzliJUBP0XPx1
mmIw0hRJC0rP/SQnKYeaUhrCH/0/3kAuJ2GknAU82FL/zVKj/qddOo/zKxuvDXxK
5wZ3LxLzYUOozlnLMMhG6bcomFrlVsnI2Rp5cqpFLTXWTBviCfdsEoH7HAksNuHB
CmmImzp29hsNQRkWXvIen0+qr38fcdFxZLmRbZZIRCi3CjIWIPaVUC69YHHPdfjO
FUaWS7NgP5FJhTNZ5D31gsfeKTmQViyb5aDPFPUsYIVf/GDY0eYjyGPmYZyQJIcT
drEzs/VYFeJYz9pcP9EkXghPsOKTJmBCu4nxqh0R0+Wvsq1A
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:11 2024 by rpki-client on console-fra.rpki-client.org