Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66ec7005-da32-4331-af29-ce60900e5f1f.roa
File: 66ec7005-da32-4331-af29-ce60900e5f1f.roa (raw, json)
Hash identifier: Qjr0WLwygwMv0DVYbV2I1lLEqjaob1imxu7QhPxw2hY=
Subject key identifier: D7:44:4D:C2:F5:02:1B:3D:7C:A7:54:86:CC:D9:A0:AB:CA:59:FA:77
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 52393E2C219CACFA252930DB239D36FFB50726B5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66ec7005-da32-4331-af29-ce60900e5f1f.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d079:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:39:3e:2c:21:9c:ac:fa:25:29:30:db:23:9d:36:ff:b5:07:26:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=ab643a41dcd8c695d4a9ca2e61588d7aa7953cd101d9cf92dea2143ec9fd8a1b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f2:41:38:e0:03:bf:5e:eb:49:26:72:b2:b0:
5f:d9:7d:c3:5b:48:c9:e4:34:6e:42:fe:e3:42:e6:
51:08:56:f3:6d:79:4d:88:09:c4:10:49:5a:b1:c2:
53:80:7d:d7:cd:87:bb:39:89:6e:13:88:9f:87:da:
dd:8d:97:b4:42:24:7b:61:fe:57:3d:2d:60:ad:c1:
0a:0e:ac:ce:6e:cb:ff:48:ee:bf:c3:dd:ff:3d:a4:
ad:46:75:48:f4:a0:87:98:fe:54:56:a6:6d:c9:af:
5b:39:49:76:ef:11:b6:74:46:5b:6a:66:94:d0:3f:
58:08:bb:ee:38:d8:e8:a4:64:ac:da:29:2f:a8:23:
0e:d3:71:bf:d8:6a:b6:d5:21:bd:47:3f:0f:93:c8:
05:2b:a9:a2:a7:e2:75:01:ec:d2:34:07:ed:c1:6a:
b6:97:b2:cd:02:0e:7b:a6:7f:28:9c:78:e8:40:93:
3e:a5:d0:74:86:82:16:7b:cb:5f:66:0e:91:58:1b:
d5:dd:8b:01:9d:48:ee:16:0d:6d:6e:04:a9:57:5f:
29:af:cd:e7:4b:f9:8c:ac:f2:04:8d:86:63:c5:9f:
35:00:c3:00:f0:87:b4:d8:ed:97:bc:86:3e:16:2b:
53:0a:33:60:f8:49:a6:b3:6b:51:d7:93:ec:76:99:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:4D:C2:F5:02:1B:3D:7C:A7:54:86:CC:D9:A0:AB:CA:59:FA:77
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/66ec7005-da32-4331-af29-ce60900e5f1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d079:4000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:ea:91:d7:93:de:f0:14:de:1e:df:f3:5e:02:d0:ce:f1:a7:
fe:b7:75:22:c0:21:86:24:fd:e7:03:ac:0c:96:68:48:ba:1a:
4b:d7:84:3f:d9:65:f9:f9:4b:87:59:85:e8:0c:98:fc:14:90:
1d:62:e5:a1:b0:5b:1d:e0:6b:70:50:a0:b5:e8:c8:44:2a:78:
cb:01:29:31:60:f4:33:c3:e9:95:0b:4b:b9:48:dd:5a:3f:ac:
60:50:ab:b5:6f:68:5b:df:69:82:3f:4a:a7:7a:bf:f4:ea:1a:
a9:7e:90:3a:8c:ea:70:da:0c:19:7e:c5:98:2f:8d:c3:dd:74:
3b:90:70:21:a8:19:6b:07:21:94:39:53:dc:3a:9d:66:97:37:
fa:d2:1f:0b:cd:79:c9:05:01:a8:a4:bc:92:bf:20:49:56:6e:
14:ed:b2:4a:c4:76:8b:40:d6:1a:6f:d8:2d:97:35:22:73:66:
fd:9e:46:67:77:25:69:d3:0c:9d:06:ad:ba:57:5b:86:f1:06:
21:d3:f9:cc:39:34:e9:b4:0c:5f:bc:3c:31:16:2e:98:e4:5c:
9f:78:e0:9a:cc:a8:ed:fb:ef:bb:c3:32:43:36:f2:c1:7c:dc:
d2:1c:22:60:cc:2a:8c:14:e6:27:3a:fb:d2:04:3c:03:20:ca:
a6:3c:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:27 2024 by rpki-client on console-ams.rpki-client.org