Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6edff633-7cc0-4bac-8414-cdc1c17589dd.roa
File: 6edff633-7cc0-4bac-8414-cdc1c17589dd.roa (raw, json)
Hash identifier: r7PS7FTs68TcuO6B6x3OZpVXo9WycmpFiJo03ExcruM=
Subject key identifier: F0:26:17:91:BC:CF:A1:CE:37:94:FB:8B:C4:59:CA:50:60:AF:6D:B5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 536A2B8BAA9E32DBF5939ACFFBE882BE67FC7C03
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6edff633-7cc0-4bac-8414-cdc1c17589dd.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d035:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Apr 2024 19:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6a:2b:8b:aa:9e:32:db:f5:93:9a:cf:fb:e8:82:be:67:fc:7c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=122649555392652761324588ea78c71ed7fbfa5b6bb4e263ed49b944df22016f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:47:1d:6a:9a:08:e4:2e:75:9f:ef:0e:6f:
79:ba:1c:e9:41:27:65:6c:b0:73:d6:b9:b8:4d:9a:
17:2b:79:ad:af:90:3d:e6:25:f4:65:86:f4:fd:0e:
cb:e2:c3:f7:22:86:b9:d6:7c:bd:c9:b1:c5:96:87:
ab:68:82:72:49:0f:50:9c:82:1e:d7:e0:e8:31:3d:
7f:1b:fb:1f:84:98:8d:71:a1:c1:fa:47:7c:73:b2:
e8:11:cb:83:36:80:72:95:62:5c:64:78:2d:c5:d7:
47:0a:d9:5b:b2:88:01:bd:01:b3:90:a4:29:2a:84:
0e:38:8e:93:d7:a2:6f:36:bc:02:9e:85:ed:46:80:
e2:ff:04:9b:95:88:41:8f:cc:98:b7:95:b1:19:94:
15:0e:4d:2e:f4:be:19:43:38:a0:59:1d:1c:92:6f:
a3:14:c3:07:e7:e9:a7:05:b4:94:3c:3c:47:f5:a5:
ad:d1:46:70:e4:94:61:e3:42:6b:09:96:1b:74:96:
d8:db:98:41:de:ea:3f:61:7f:5e:cc:39:98:13:1a:
31:11:82:87:ae:16:1b:19:b8:87:a4:ed:a5:39:bb:
19:20:22:14:e4:08:23:9d:17:5c:0d:e4:62:f7:39:
dc:30:bd:cd:d0:eb:8e:ee:6b:a2:8a:e4:0a:87:2f:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:26:17:91:BC:CF:A1:CE:37:94:FB:8B:C4:59:CA:50:60:AF:6D:B5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6edff633-7cc0-4bac-8414-cdc1c17589dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d035:a000::/40
Signature Algorithm: sha256WithRSAEncryption
42:97:75:33:26:1d:57:fa:81:52:14:4c:7f:1e:35:4a:fe:2e:
7e:d5:61:96:97:98:74:81:a5:57:03:26:52:32:33:75:5e:fd:
01:40:15:fe:68:af:45:c7:9a:95:41:44:2e:1f:1d:1d:87:27:
f2:65:b4:9e:4f:00:9b:91:ce:0d:72:a2:2e:27:fe:f0:1b:ff:
8f:db:14:3f:2b:0a:7b:93:fb:69:26:32:39:22:61:c3:c0:ae:
db:50:cf:bf:ee:96:f3:ce:31:d9:54:0b:0b:89:e5:a2:4d:36:
9d:35:af:d7:d9:6a:2f:18:97:1b:18:8d:1a:95:e9:e2:5d:aa:
79:2f:d2:2c:47:ef:f8:6c:15:b8:80:9f:86:55:6b:f3:12:cb:
2d:9f:f6:e4:ee:12:35:31:14:64:b6:76:e5:28:5b:9c:74:83:
83:58:26:2a:80:11:a8:38:92:7d:db:01:70:c3:dd:7d:db:9c:
ad:8e:6d:81:de:79:09:04:49:ad:17:85:29:7f:8c:7b:dc:e6:
d7:e8:a7:0e:26:8d:ec:18:5e:f8:e9:90:b5:30:c9:ba:5f:ae:
52:de:2f:9d:19:50:c0:a7:4c:45:7c:fc:30:b1:73:f4:cc:bd:
b0:53:79:3b:da:9a:a3:12:be:ec:1c:22:df:b5:24:73:41:7c:
21:12:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 01:21:48 2024 by rpki-client on console-ams.rpki-client.org