Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/808bef5c-0eaa-4e32-8b6f-c8ac65aeed88.roa
File: 808bef5c-0eaa-4e32-8b6f-c8ac65aeed88.roa (raw, json)
Hash identifier: gwuRlSn5x89wHZ5A1RlP743zEMR4Ma7PrS10gS7Ph/8=
Subject key identifier: 76:2B:BA:3C:FA:AC:9C:85:EF:0E:E2:F1:08:42:3F:A3:39:09:DE:C6
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 77A67DCEBB715AF39FE991F57576CD2EF464D1DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/808bef5c-0eaa-4e32-8b6f-c8ac65aeed88.roa
Signing time: Sat 07 Sep 2024 00:00:00 +0000
ROA not before: Sat 07 Sep 2024 00:00:00 +0000
ROA not after: Sat 12 Oct 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01b::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Sep 2024 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a6:7d:ce:bb:71:5a:f3:9f:e9:91:f5:75:76:cd:2e:f4:64:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 7 00:00:00 2024 GMT
Not After : Oct 12 23:59:59 2024 GMT
Subject: serialNumber=a129ba6714deb214de4082607ed763636e1fde79f69f794144ddad216ffeb10e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:2a:1a:fe:34:13:1d:4d:8f:e4:a8:dd:26:
95:b4:67:60:07:bf:2c:26:6f:ba:38:f9:70:74:64:
a4:c8:63:4b:2c:50:e1:e1:6b:9f:20:7e:ec:4f:f3:
cb:ad:5e:00:70:68:76:1f:17:3a:5e:34:af:5a:ac:
3b:e2:ee:95:b3:01:39:70:b4:8f:eb:38:2d:1c:9f:
a6:4c:70:8b:8c:a3:6d:69:3b:9e:a7:70:c2:53:c0:
d1:86:3c:ad:70:9b:6d:00:ba:d5:f3:e0:83:42:16:
28:a9:c8:c6:d7:3d:cf:10:b4:2b:93:64:51:be:c7:
fc:bc:2d:ef:36:fb:16:2b:8c:00:be:13:a7:80:bc:
42:ae:38:65:a3:6f:ed:ad:5f:f3:d2:0b:6f:3a:f4:
2a:5f:a9:a8:0b:55:e0:22:8e:9a:b8:8e:c2:8a:0b:
31:93:21:f7:d4:a1:07:a1:d3:ce:fd:3c:a8:f9:ca:
ab:d2:43:72:36:1f:28:c1:ee:e9:4f:b8:b3:9e:3c:
7c:c8:a3:a0:d3:e5:3e:dc:98:1e:d0:3c:86:bc:3a:
d4:ff:af:94:03:ad:41:f5:2c:7b:f6:b5:47:08:dc:
a6:ed:ba:f6:25:3f:eb:56:63:72:7e:06:b9:bb:bd:
e3:63:5f:16:5e:8b:52:f2:61:82:65:38:25:9b:83:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:BA:3C:FA:AC:9C:85:EF:0E:E2:F1:08:42:3F:A3:39:09:DE:C6
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/808bef5c-0eaa-4e32-8b6f-c8ac65aeed88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01b::/36
Signature Algorithm: sha256WithRSAEncryption
2f:d5:64:4c:ab:5b:99:14:37:71:ad:1d:ae:11:43:fe:c3:f3:
98:8f:76:67:9a:37:96:7b:20:b2:0f:94:dd:06:c6:11:35:52:
65:31:51:57:af:8a:0c:24:d4:80:66:fc:75:5f:56:5b:ae:f8:
6b:35:99:e8:cd:05:0c:49:af:df:e9:0c:c9:19:a8:01:5a:da:
ae:7a:76:72:95:49:80:d3:2e:b4:a6:fd:0d:b2:45:f7:7d:ae:
b9:81:27:80:32:a5:4f:62:00:c2:96:ee:60:b9:bd:42:54:c6:
67:74:9d:d6:40:28:13:35:7d:74:16:fe:a6:ea:1c:d8:5a:ff:
18:15:78:0d:d6:44:c6:50:3e:98:ba:2f:36:51:53:da:60:dc:
89:d1:f2:05:db:ff:85:86:c1:38:84:60:f8:f8:f4:87:5e:80:
07:5a:e2:b4:36:e6:21:4a:76:d3:06:48:ba:38:54:60:17:92:
f6:97:74:cc:12:aa:1c:4a:c4:c9:38:41:ef:b5:26:3f:35:60:
3e:3a:f9:5a:ae:fb:3e:b7:14:bc:68:5b:9f:a0:bc:7d:25:a0:
15:ed:da:e4:67:01:67:0a:b8:9f:c9:d3:48:02:7a:90:15:c4:
48:a5:9d:d5:15:ee:25:fd:19:19:35:0e:26:5a:dd:4d:c9:09:
7a:34:08:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:49 2024 by rpki-client on console-ams.rpki-client.org