Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f38a7e0-8c77-41da-b0a3-7ec66e06c125.roa
File: 6f38a7e0-8c77-41da-b0a3-7ec66e06c125.roa (raw, json)
Hash identifier: Ij6BWp2SIkPDilKUc0giqAIEWjy5VYC2qm+d+kZA1Ao=
Subject key identifier: C5:0A:F0:9B:DC:78:4F:20:E1:BA:47:B4:51:C1:5E:9D:7A:59:ED:47
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 13D5D1397A7FE0E4468E132FF66E390A36BB9950
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f38a7e0-8c77-41da-b0a3-7ec66e06c125.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d5:d1:39:7a:7f:e0:e4:46:8e:13:2f:f6:6e:39:0a:36:bb:99:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=eaddefe4119ef354b696defbe472c49f37d87cca1978c45c050e979767ab792f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:5b:17:ed:e9:c0:0f:54:95:0f:79:8f:66:
0d:11:f4:89:72:9c:af:9a:8c:f9:51:a6:63:5c:f7:
4c:fa:bc:81:d7:12:46:1a:6a:11:a8:0e:fb:4c:4d:
c5:c0:77:d1:9b:f1:d6:17:ca:d1:d0:22:34:bc:21:
22:40:a1:75:39:55:4d:fa:70:8f:d5:1c:47:53:aa:
d5:ba:13:b3:f8:1d:7e:30:a4:18:81:2d:86:c6:73:
d4:65:48:7d:bb:c0:fa:e3:90:58:a1:b3:48:6e:bb:
ed:38:d2:10:2b:7a:23:f4:c0:84:d0:a7:3d:1b:3a:
fd:97:08:59:37:ce:f1:e6:60:cd:ff:2c:93:64:b4:
f8:d7:7c:9c:e3:be:3b:b0:42:25:f4:47:15:1c:9e:
dc:2e:8a:41:1f:1b:be:8d:f8:97:21:f8:72:63:5b:
f7:65:95:bc:8a:61:80:fa:43:f1:4a:d3:2d:7f:3d:
53:63:de:40:a1:82:03:1b:ee:99:f8:2f:85:08:36:
b4:d4:0e:a4:ca:49:07:6d:1b:d8:82:e7:04:d4:23:
f0:f3:ba:ad:56:bf:64:b9:bc:c1:14:0b:25:13:e4:
e2:82:25:0d:71:77:8f:2d:f9:70:f0:b9:53:4d:bd:
bf:c8:6d:93:22:8b:07:61:4f:8d:aa:2c:e4:6f:9a:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:F0:9B:DC:78:4F:20:E1:BA:47:B4:51:C1:5E:9D:7A:59:ED:47
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f38a7e0-8c77-41da-b0a3-7ec66e06c125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:c000::/40
Signature Algorithm: sha256WithRSAEncryption
02:fd:05:80:25:e6:4e:c6:32:47:e1:7c:8a:70:f4:a3:9a:3e:
3b:30:de:ad:5c:b2:33:7e:80:43:d9:87:32:38:63:73:26:4f:
b8:54:83:e0:62:bd:4d:a3:25:e5:7a:90:2f:93:9b:ff:70:7d:
4b:3b:7e:ca:d1:76:94:da:20:06:b4:c4:3e:d8:e9:a9:7e:9e:
88:03:e0:0e:ac:13:81:a1:bf:05:1a:88:43:ab:8a:32:bc:1d:
66:fc:eb:22:66:e3:d2:d9:d7:25:96:c2:e0:d2:d1:a2:c7:24:
0f:d1:9e:87:82:cf:c6:0d:fb:10:23:4c:b2:a4:c4:f5:75:e8:
5f:9b:0d:54:92:8f:82:a9:9e:39:e2:c3:69:29:58:d5:e3:b1:
d9:8b:ac:64:19:05:9b:06:ce:84:31:8a:ba:64:19:b3:c9:3f:
db:1f:39:e3:23:2e:1d:07:09:3b:4c:b4:79:05:ff:80:3a:ae:
f0:82:6e:25:59:8e:c3:e0:46:b0:ea:ef:8f:a0:a7:3a:4c:0e:
0f:48:1a:e9:a7:a1:13:4b:fb:da:6b:3c:af:6c:57:08:50:15:
c5:82:ea:78:89:4b:d9:e9:93:f5:71:ca:4e:b1:dc:88:73:25:
f1:b7:2d:91:d6:dc:17:bb:54:a8:ec:3a:1b:72:c0:ea:b9:f9:
38:8e:31:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:11 2024 by rpki-client on console-fra.rpki-client.org