Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa
File: 7f410204-155a-436a-a343-5a74a7999df6.roa (raw, json)
Hash identifier: nbI7JQJoWUmN9Tk9Iujn+PTUneU20g+kNgY+/equgA0=
Subject key identifier: 4C:21:83:C0:B4:8C:9B:C1:13:8C:8B:FA:45:3B:55:3D:CD:57:80:28
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 210F5E5CD7C375115836EA11B43CF944E5D4FEEA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa
Signing time: Fri 08 Mar 2024 00:00:00 +0000
ROA not before: Fri 08 Mar 2024 00:00:00 +0000
ROA not after: Fri 12 Apr 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Mar 2024 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0f:5e:5c:d7:c3:75:11:58:36:ea:11:b4:3c:f9:44:e5:d4:fe:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 8 00:00:00 2024 GMT
Not After : Apr 12 23:59:59 2024 GMT
Subject: serialNumber=23e9b8b47e81a230d2836896fbf239f89d1e331ab3bdde607f61b875d7e4fd52, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:25:53:d3:c3:86:20:43:9d:c1:79:88:b8:
66:16:66:14:a9:99:23:a1:dd:91:e4:ff:16:6d:83:
55:23:1e:35:7d:3f:a9:18:37:8e:23:bb:ca:d0:8e:
91:fd:96:7c:05:f3:4e:1b:33:d8:b9:ca:e8:dd:8e:
e7:3f:4a:5d:84:6c:1b:0f:d2:28:fd:03:5f:b7:b8:
1f:ba:60:e8:d3:d6:91:09:17:2f:8d:61:e3:a1:cc:
c7:55:9c:a5:94:fb:ea:39:d5:10:56:18:6f:df:dd:
94:8d:90:b3:57:31:55:75:40:23:b7:d7:e5:71:2f:
12:ee:d2:c1:74:ac:f2:2c:c8:d5:9c:c5:a8:ce:23:
ed:15:61:76:18:8e:03:e0:2d:97:76:e4:d7:9c:19:
96:26:fd:b2:1b:e9:c0:91:72:05:d4:f8:da:b0:5d:
77:39:b6:71:4e:d4:7e:64:a8:9e:ed:a4:e7:0d:4e:
b2:14:7f:90:5b:f6:d7:9b:0c:d6:d1:94:ae:ce:3e:
3f:86:a6:26:53:1b:ae:1b:c2:7d:95:dd:64:f0:16:
8e:c8:dc:f1:61:e5:8e:3a:8f:e2:65:a3:7e:7b:3b:
d4:a9:52:72:76:a2:dd:06:43:17:a4:fe:9f:bd:4f:
96:2d:48:5b:2a:f6:fe:86:0d:ab:54:92:ec:f1:7b:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:21:83:C0:B4:8C:9B:C1:13:8C:8B:FA:45:3B:55:3D:CD:57:80:28
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f410204-155a-436a-a343-5a74a7999df6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:6000::/40
Signature Algorithm: sha256WithRSAEncryption
7e:12:cc:00:da:f0:37:0a:5b:68:36:94:76:6f:53:77:03:11:
b1:20:28:24:b3:2b:71:5e:ba:03:a3:16:44:38:45:af:2c:11:
af:b4:5a:ac:46:bf:f7:63:f8:6f:c1:e2:95:06:26:9b:8e:0d:
f9:a9:61:d4:4d:51:f9:52:a9:8c:8e:48:37:83:bd:b3:b8:45:
d5:10:f3:af:e3:20:bf:8b:45:b6:1e:09:c8:ba:7f:f9:53:1d:
7b:14:0c:d5:8c:6d:0c:be:7f:27:f8:14:2d:bf:91:7b:04:3c:
9a:3b:b2:8a:26:49:30:af:aa:11:14:95:32:e7:92:7c:98:f3:
00:0c:dd:97:e8:22:8e:fd:d7:0a:e2:61:8f:7e:96:60:2d:a1:
fa:05:76:d1:64:9e:c1:c2:d9:c8:22:1b:c5:0d:b8:42:14:d7:
0b:49:85:3a:eb:74:04:d5:57:6b:8b:2b:69:3c:3b:6c:62:c4:
f6:c6:6f:e3:d9:37:d7:3e:da:39:f8:82:17:a2:b4:be:09:a0:
dd:f8:a0:44:9b:2a:a1:c1:0a:50:76:5c:a7:c7:76:8a:5b:f7:
06:67:53:0a:0e:81:65:24:62:c8:b1:9d:be:26:28:e9:ca:bf:
69:3d:19:9c:02:4b:81:1f:d6:f5:eb:d3:af:46:ec:29:cd:5b:
6a:31:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:06:43 2024 by rpki-client on console-ams.rpki-client.org