Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa
File: 73cde438-0645-4a6f-883e-f9a7517dde97.roa (raw, json)
Hash identifier: VHvABxownrdmGkvSdfHbbJxmFmTBRSDKCYIvB3Pqsw0=
Subject key identifier: 42:3C:2D:89:F4:73:12:96:26:EA:A2:09:F4:8E:50:99:E2:0A:53:B4
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2671D609D1419386E5BF25BB657E86721DEF43A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa
Signing time: Mon 01 Apr 2024 00:00:00 +0000
ROA not before: Mon 01 Apr 2024 00:00:00 +0000
ROA not after: Mon 06 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d072:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:71:d6:09:d1:41:93:86:e5:bf:25:bb:65:7e:86:72:1d:ef:43:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 1 00:00:00 2024 GMT
Not After : May 6 23:59:59 2024 GMT
Subject: serialNumber=70d98b22fae1e913872d34da14927ae2ec9e81f331486d484806128abb288914, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:c6:d4:c7:46:ba:11:29:14:86:c9:1f:74:
47:ea:b8:f2:98:92:45:25:e1:59:b6:68:7d:5d:15:
b7:7b:a5:55:fd:f9:a8:ad:df:b8:a0:1b:1e:c6:59:
b5:01:ca:f5:0b:06:f2:82:5f:ed:34:ad:c8:6f:d3:
7e:7e:77:ae:15:30:d3:1b:3a:7a:f7:96:5a:ae:02:
e8:87:48:85:e8:52:0b:2f:75:5c:8a:d7:fb:ff:5a:
30:c3:f6:e3:13:75:31:e4:4c:22:ca:b3:f4:fa:db:
30:41:d7:e3:e5:4e:62:45:32:84:4a:e5:e9:48:59:
ac:08:5c:e9:b7:89:30:51:34:42:06:bf:07:92:f6:
41:75:c9:ce:9c:4c:9d:86:62:4e:56:46:3b:8a:86:
d0:aa:ea:dd:cb:bd:fb:34:fe:12:0f:5a:fa:34:28:
6f:dc:64:be:92:9e:40:cb:f0:9c:1a:26:bb:22:ff:
5a:2a:19:07:48:17:39:f3:03:e4:4f:01:ff:42:fc:
58:90:40:d7:78:58:99:5a:24:32:8b:b7:ad:2f:b7:
a3:39:44:0e:d0:d7:9f:51:c6:35:ea:da:a5:83:95:
dd:50:f2:88:be:77:c6:da:14:ff:8c:2c:44:15:63:
ce:69:14:46:71:7a:17:dd:05:e6:8c:ce:58:75:98:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3C:2D:89:F4:73:12:96:26:EA:A2:09:F4:8E:50:99:E2:0A:53:B4
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/73cde438-0645-4a6f-883e-f9a7517dde97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d072:c000::/40
Signature Algorithm: sha256WithRSAEncryption
51:f0:c2:f9:21:81:bb:ef:43:10:e1:58:9e:b8:08:e5:b9:2b:
ef:be:63:d5:36:44:18:a2:98:17:e0:f6:50:3d:b0:3b:0c:c0:
64:d9:2a:a6:e9:c8:50:59:d3:bf:a1:aa:95:2f:49:a2:37:b9:
95:d7:f9:a8:7e:bf:63:de:82:0f:51:61:e3:f0:eb:05:68:24:
f6:3f:80:57:67:65:cd:51:25:c4:9e:44:a3:a5:15:7e:f0:68:
34:88:2b:08:30:24:98:e5:17:82:c4:24:f8:c0:30:62:8a:8f:
4e:db:e5:09:9b:40:5f:c8:50:44:94:fa:9a:f4:08:05:ca:fe:
d4:e5:11:25:a3:33:71:09:a2:01:53:44:9a:32:2b:8a:54:3c:
40:2a:6c:45:80:e7:a7:0b:f0:30:89:9f:c3:b8:77:d7:88:d6:
c5:9e:3a:83:2b:0a:81:db:ba:a9:a0:dd:42:15:4f:4a:ff:d6:
bc:7c:a4:73:e8:a7:b7:cf:c9:df:e9:46:e8:0c:d7:dd:43:9e:
d6:00:a8:e2:55:c7:00:0d:6d:9c:37:cb:0b:95:62:6b:cf:ad:
2c:ee:61:c6:c4:34:83:d8:4a:7d:c7:23:00:9b:a8:aa:6f:13:
2b:71:3c:62:2f:0b:f3:7f:31:f4:b2:17:47:65:d3:02:0c:c9:
5e:a3:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:32 2024 by rpki-client on console-fra.rpki-client.org