Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/645cd21e-8605-428c-a809-be8a73eccafb.roa
File: 645cd21e-8605-428c-a809-be8a73eccafb.roa (raw, json)
Hash identifier: KtJbLaQahxrjCB8XhxZ34Mw8ZdeqC2KIIsIHidyPJLs=
Subject key identifier: 38:A0:EF:BD:F2:B9:51:9F:BE:C7:C5:E8:3B:BD:A3:7B:FF:04:76:7A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 51AC3A3885E812342DF1CC0FFB7F198CD2FA48A3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/645cd21e-8605-428c-a809-be8a73eccafb.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ac:3a:38:85:e8:12:34:2d:f1:cc:0f:fb:7f:19:8c:d2:fa:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=c4da515c81f041ed29d17f68710a9fa589b53ca0558b8634324d58154aa75d5a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:fb:1d:38:1d:5a:3a:1f:0c:87:73:11:0e:
35:61:31:e8:a5:bc:1c:c8:63:fd:5b:89:4d:f6:a7:
c1:4e:ef:7a:0e:de:3b:9e:6f:5d:11:ce:2b:34:65:
a4:23:5b:29:80:55:8e:8b:05:4c:f5:ec:8a:8e:56:
9c:13:5d:e5:70:24:ec:7f:10:90:a2:12:ee:23:1d:
56:c2:a9:77:61:84:6c:d7:27:ea:94:18:ea:a8:65:
f1:30:51:20:77:1c:ae:1d:2b:43:1a:37:3d:02:3a:
e6:8c:30:af:9e:8f:ef:b5:cd:27:0a:87:dd:e7:aa:
b0:ef:57:7f:e1:39:20:23:2c:d6:9d:49:39:01:6a:
85:9b:31:c1:0f:a6:36:74:06:88:ae:97:56:f0:47:
af:d3:4f:c0:82:88:51:c8:45:2e:92:f1:d6:2a:e0:
36:69:f3:a4:f0:19:5d:f1:04:71:f1:05:fe:b5:18:
d7:fc:7e:b4:fd:30:0f:40:f8:f3:78:b7:85:fe:77:
11:87:bd:23:3c:5b:51:af:ee:39:ed:ba:54:e4:95:
8b:5e:ce:fb:02:94:8e:7f:d8:83:07:5a:80:c0:3b:
c0:ff:9c:f5:93:a9:e0:bd:c2:d9:d2:f4:c9:fa:37:
24:74:ab:ce:07:5d:10:39:ea:ff:5c:e6:be:c8:07:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:EF:BD:F2:B9:51:9F:BE:C7:C5:E8:3B:BD:A3:7B:FF:04:76:7A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/645cd21e-8605-428c-a809-be8a73eccafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:5000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:5d:9d:c0:22:0a:9e:16:20:a9:68:6f:95:97:cd:4d:d9:e3:
41:b7:45:06:99:49:88:0a:44:10:78:a7:cc:7e:77:fb:53:e9:
6a:58:ee:51:e8:c4:64:20:f0:e8:42:43:ab:4f:21:72:44:a8:
f3:e3:76:85:35:ed:c9:42:76:46:51:f3:df:f7:2b:3f:f4:d3:
e3:39:46:31:2f:47:1a:9a:3a:33:9a:74:ed:a9:9e:e6:12:c9:
cd:6f:78:0b:17:7c:81:f2:7d:08:b1:b7:d6:b5:ea:e9:11:5e:
07:38:69:e6:ea:1c:8b:20:f4:e9:01:96:18:ed:0d:28:44:13:
89:01:59:b9:f3:b0:2c:5d:57:50:48:ef:ed:1e:df:e3:e8:f7:
a6:e6:91:1e:19:24:46:ff:8f:cc:96:ce:c9:71:f4:17:d4:c4:
00:b4:bb:a0:c3:cb:71:fa:8f:1a:71:61:9c:95:ff:78:78:34:
66:f4:1d:ac:c8:e9:a5:77:0c:35:3c:5a:52:1c:1f:74:58:1e:
f1:79:1f:aa:37:a0:af:01:07:ea:16:a5:e8:68:82:f8:92:a8:
ef:cb:f1:8d:20:d4:81:d2:13:08:fc:79:97:6c:bd:1f:52:41:
0e:90:08:b9:35:aa:3a:d8:ff:7e:13:54:e8:cf:7e:c4:9d:eb:
77:b4:13:a0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUUaw6OIXoEjQt8cwP+38ZjNL6SKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDA0MDEwMDAwMDBaFw0yNDA1MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGM0ZGE1MTVjODFmMDQxZWQyOWQxN2Y2ODcxMGE5ZmE1ODliNTNjYTA1NThi
ODYzNDMyNGQ1ODE1NGFhNzVkNWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMJX+x04HVo6HwyHcxEONWEx6KW8HMhj/VuJTfanwU7veg7eO55vXRHOKzRl
pCNbKYBVjosFTPXsio5WnBNd5XAk7H8QkKIS7iMdVsKpd2GEbNcn6pQY6qhl8TBR
IHccrh0rQxo3PQI65owwr56P77XNJwqH3eeqsO9Xf+E5ICMs1p1JOQFqhZsxwQ+m
NnQGiK6XVvBHr9NPwIKIUchFLpLx1irgNmnzpPAZXfEEcfEF/rUY1/x+tP0wD0D4
83i3hf53EYe9IzxbUa/uOe26VOSVi17O+wKUjn/YgwdagMA7wP+c9ZOp4L3C2dL0
yfo3JHSrzgddEDnq/1zmvsgHt6MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ4oO+9
8rlRn77Hxeg7vaN7/wR2ejAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NjQ1Y2QyMWUtODYwNS00MjhjLWE4MDktYmU4YTczZWNjYWZiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DVQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBcXZ3AIgqeFiCpaG+Vl81N2eNBt0UGmUmICkQQ
eKfMfnf7U+lqWO5R6MRkIPDoQkOrTyFyRKjz43aFNe3JQnZGUfPf9ys/9NPjOUYx
L0camjozmnTtqZ7mEsnNb3gLF3yB8n0IsbfWterpEV4HOGnm6hyLIPTpAZYY7Q0o
RBOJAVm587AsXVdQSO/tHt/j6Pem5pEeGSRG/4/Mls7JcfQX1MQAtLugw8tx+o8a
cWGclf94eDRm9B2syOmldww1PFpSHB90WB7xeR+qN6CvAQfqFqXoaIL4kqjvy/GN
INSB0hMI/HmXbL0fUkEOkAi5Nao62P9+E1Toz37Enet3tBOg
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:40:29 2024 by rpki-client on console-ams.rpki-client.org