Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/811e1107-f622-4010-94d3-9b3720991059.roa
File: 811e1107-f622-4010-94d3-9b3720991059.roa (raw, json)
Hash identifier: IUQgymoD/Ks4C6OYyTAFaA91wuYMaCnAHdqMayS/Lag=
Subject key identifier: 5E:1E:F5:33:40:C4:63:E1:1D:4F:93:E1:1A:AB:76:BE:E9:47:4B:59
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 42F121DC43D1235F9EEED76F1BF7A16CBDB77B2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/811e1107-f622-4010-94d3-9b3720991059.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d075:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f1:21:dc:43:d1:23:5f:9e:ee:d7:6f:1b:f7:a1:6c:bd:b7:7b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=de76d6b8876be3fa1ed56596f0d6b8079f4c20b4c3d940a820e7058204015777, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:2a:38:cf:13:64:0a:80:98:20:1d:22:85:
ce:9e:54:6b:b3:07:f5:72:78:59:00:1e:7a:75:9c:
61:87:9d:f7:b6:17:ea:85:66:7b:31:d2:fa:af:e9:
e7:d4:f8:b6:e3:4d:d9:c4:a2:9d:ed:59:4e:8b:da:
5e:7b:51:44:a6:ad:6e:04:55:5e:c9:2b:7c:4c:da:
7d:54:d4:47:3e:23:8f:2a:c4:48:ca:e8:4b:a9:9d:
b6:ee:db:96:9b:95:7a:f1:44:6a:90:a9:3f:e9:fe:
00:0c:ae:fb:d0:74:64:e4:78:fc:d3:f2:8f:32:82:
f3:08:ed:a8:44:12:2b:4b:0e:7c:4e:26:64:6b:aa:
30:e0:8d:88:07:dc:3c:43:80:b4:2a:ac:8f:b8:9b:
40:21:d5:5d:ca:16:39:cd:7d:40:b8:cb:61:d9:97:
6b:e4:6c:67:25:10:28:67:34:81:a4:00:47:79:37:
75:74:58:96:52:fe:78:dd:c2:fe:94:f8:39:f3:bf:
c0:18:4c:88:ca:b8:d1:21:42:3c:44:f5:68:44:5b:
ae:eb:e3:b5:f4:f4:75:09:a5:5d:79:0e:8f:de:63:
a2:d6:4f:7f:fe:ae:de:dc:2f:21:1c:74:9d:61:15:
cc:d5:1a:b8:18:4d:99:59:fd:cf:c6:01:92:a3:90:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1E:F5:33:40:C4:63:E1:1D:4F:93:E1:1A:AB:76:BE:E9:47:4B:59
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/811e1107-f622-4010-94d3-9b3720991059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d075:b000::/40
Signature Algorithm: sha256WithRSAEncryption
15:fe:4d:5d:99:08:53:36:89:91:d6:0f:df:61:96:5d:c8:af:
75:5f:ce:1a:ef:56:62:14:d5:24:db:1d:d5:c4:9e:50:72:c8:
0f:35:d4:b8:6f:56:f2:ad:4a:0b:1b:9a:a6:2e:b7:49:c2:2d:
87:21:3c:15:af:1c:45:a7:d7:34:d0:fe:0f:03:f0:30:57:7f:
d0:99:75:cf:bc:a7:5d:78:1e:8b:73:4e:0c:8a:43:0e:42:ac:
d9:1d:6f:15:6d:d5:4b:c4:64:40:d8:b9:3e:6f:d6:ea:4f:82:
7a:82:af:fd:fc:01:0f:de:2b:92:cc:5f:e7:f7:0f:6f:4f:95:
b1:f7:65:3d:66:e0:b7:85:a7:5a:f7:7e:7e:69:12:4f:c3:7a:
cc:c3:9f:3c:04:88:f6:19:fa:57:de:bd:9b:41:2d:5f:cf:9c:
48:a6:0c:1e:b8:0a:c0:4f:77:6b:09:5e:f4:b5:a9:fc:52:21:
06:0a:9d:12:d9:ba:13:b9:8a:cb:07:84:b8:c9:3c:8f:43:21:
fe:ec:21:7d:1f:47:d1:0f:c7:d8:8e:70:91:fc:a4:de:fb:7a:
60:29:af:e9:ec:35:e1:6e:1d:d3:5e:3c:40:f2:4d:24:b9:e7:
b7:2d:df:26:c9:4a:68:2d:fe:3d:ec:1e:93:b7:44:7b:87:44:
f9:7b:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:40 2024 by rpki-client on console-fra.rpki-client.org