Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
File: 6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa (raw, json)
Hash identifier: aJ2x6IlHBwbnNutfez5fLoIFsvURVqciDffOCRofH1M=
Subject key identifier: CB:08:0F:32:11:0A:86:3C:52:2A:87:67:D7:CD:7B:8A:0E:ED:B6:A4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5EC73FF293B0DF8AF904D5C86C14F4D4A66294FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
Signing time: Fri 15 Nov 2024 00:00:00 +0000
ROA not before: Fri 15 Nov 2024 00:00:00 +0000
ROA not after: Fri 20 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d058:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c7:3f:f2:93:b0:df:8a:f9:04:d5:c8:6c:14:f4:d4:a6:62:94:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 15 00:00:00 2024 GMT
Not After : Dec 20 23:59:59 2024 GMT
Subject: serialNumber=5cc1230f8b4ddb9d8aec883bfdf618ab01cac06965f9b4a6ad96c53dde233d10, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:6d:24:31:7d:2c:ef:58:43:68:dd:f3:97:
08:23:6b:ad:ce:9b:f9:0b:51:1c:99:72:2f:a0:1c:
85:24:66:04:2b:ec:03:be:ac:d2:fa:d5:46:0e:19:
3a:10:58:b6:98:d8:91:bb:1d:30:84:a3:64:ab:6b:
af:21:64:7e:7c:1c:a7:db:17:4a:e9:74:fb:06:31:
3d:f2:24:60:80:d8:8c:db:3f:dd:95:7f:b1:21:8e:
a8:22:ba:cf:9b:48:42:ed:7f:ca:7c:6c:e9:6c:2a:
54:23:19:13:28:0d:bb:0e:71:fa:30:27:c7:a9:32:
c2:2d:84:51:35:d6:b9:3b:fa:4d:ea:d6:f8:78:34:
67:9d:1d:c8:0e:77:ba:40:1d:3c:9d:10:8a:8d:bc:
7d:0b:c1:e1:35:f7:04:9d:a8:43:b0:b0:88:28:e4:
b9:73:31:2b:6e:9e:68:56:b2:97:d8:d7:93:3c:4e:
18:6d:54:df:87:af:48:c7:b2:41:8d:0e:76:9a:98:
f7:f9:35:b5:2e:10:1e:52:15:f4:7d:ef:5a:1f:1c:
8c:01:77:d6:e9:cd:10:9d:61:25:4b:b0:e8:7a:11:
c0:86:7d:e0:a6:39:0b:37:af:1d:e2:a9:2c:5c:a4:
fc:ee:df:32:a9:54:49:9a:ed:b1:41:17:df:20:29:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:0F:32:11:0A:86:3C:52:2A:87:67:D7:CD:7B:8A:0E:ED:B6:A4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6ee424d6-a067-4fb9-a82e-05890cf8a88f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d058:c000::/40
Signature Algorithm: sha256WithRSAEncryption
52:b1:81:f7:ed:07:24:24:7a:32:ea:66:0a:f2:a1:f7:78:3e:
07:14:db:46:a1:13:88:16:38:a7:d9:8e:51:96:4d:2d:cf:73:
ae:1b:68:57:bd:16:be:b0:29:af:13:10:4d:70:ff:39:b8:f9:
b2:c4:16:51:78:62:da:42:dc:39:61:1b:a7:77:a9:58:7c:40:
0a:e4:3b:cd:aa:76:55:aa:08:7a:3b:05:6a:03:4d:cd:eb:7e:
5a:78:f5:a3:bd:96:fb:a3:2b:5a:91:cd:41:fd:cd:f5:81:79:
a6:36:22:51:64:b2:95:bb:d8:84:ed:ae:8a:31:7d:e1:5c:bd:
a6:24:1e:54:a3:43:54:ba:77:4e:0d:97:09:67:72:43:b0:15:
fc:03:29:96:42:50:cc:65:20:04:43:ee:2a:53:57:e8:c4:87:
c1:7e:36:50:3d:87:04:cf:89:b8:8f:63:40:af:55:82:b0:04:
29:c7:a5:7b:01:29:69:c1:83:ba:a9:b3:7e:03:a6:22:ee:1b:
b0:ee:08:61:2d:33:2a:e8:e5:cc:66:be:ce:58:5e:0a:0a:55:
30:92:c6:0e:48:d6:9b:0c:88:03:25:bf:73:70:23:ca:47:e4:
ac:83:94:38:5b:17:d8:82:6d:07:9b:27:82:38:23:2c:86:75:
3c:81:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:45 2024 by rpki-client on console-ams.rpki-client.org