Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/822a5092-b328-41ee-aa0b-069e1f3b6354.roa
File: 822a5092-b328-41ee-aa0b-069e1f3b6354.roa (raw, json)
Hash identifier: 1YIrqnZBKDfhDuUAtkjSCLCM+gSQsQHGIUDfbDkwrJs=
Subject key identifier: 1C:21:BD:3B:E3:D7:F4:50:45:CD:54:F6:39:F9:D7:D6:86:32:CF:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 558B0C18730572759D61599813250F0310690495
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/822a5092-b328-41ee-aa0b-069e1f3b6354.roa
Signing time: Tue 03 Sep 2024 00:00:00 +0000
ROA not before: Tue 03 Sep 2024 00:00:00 +0000
ROA not after: Tue 08 Oct 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Sep 2024 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8b:0c:18:73:05:72:75:9d:61:59:98:13:25:0f:03:10:69:04:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 3 00:00:00 2024 GMT
Not After : Oct 8 23:59:59 2024 GMT
Subject: serialNumber=6b831198060981c54aa7b7db2bb2d5e8cf32c0cea7eb86e4f266386e45ffaa77, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:41:06:12:20:b0:5c:3f:22:64:aa:f3:d2:
6b:55:20:4a:79:c3:3f:53:52:5c:83:28:99:6e:e3:
b0:5f:db:21:4b:12:ec:9c:7b:8c:ab:6f:ae:b4:91:
01:4c:e7:d5:b4:b4:92:5f:8b:3e:49:8a:da:72:71:
b8:53:30:3e:7d:aa:6e:73:4b:04:6d:38:ce:ce:1a:
2f:8a:62:b4:19:50:57:27:b2:47:df:fe:25:19:98:
aa:07:27:ae:e0:c4:66:84:44:77:54:fb:11:46:cd:
e9:ab:f1:be:d9:f5:3d:7c:5b:19:53:5a:51:1b:d9:
d9:48:73:b5:40:74:29:1f:c4:47:a3:82:da:c5:bd:
92:ce:61:cf:3e:e3:11:58:3a:f3:c7:b9:91:35:91:
e1:bd:38:c4:63:43:93:9e:f6:e1:ef:f9:1e:a9:3a:
ae:22:47:68:89:44:76:78:3b:54:2e:56:fc:7d:6d:
49:06:d7:04:c4:f8:e3:7f:98:f8:60:3d:5a:b9:c8:
09:a9:e9:9b:62:ea:ba:a2:34:f2:06:7c:93:aa:58:
4b:a0:e4:85:5e:0c:9e:ab:05:de:43:e7:3a:4d:91:
e9:1d:15:f3:fc:15:26:0d:a7:52:e8:0c:87:eb:c7:
ad:50:dc:e9:63:e5:d4:29:e7:2f:43:66:7a:64:4a:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:BD:3B:E3:D7:F4:50:45:CD:54:F6:39:F9:D7:D6:86:32:CF:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/822a5092-b328-41ee-aa0b-069e1f3b6354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:4000::/40
Signature Algorithm: sha256WithRSAEncryption
67:ae:3b:16:01:0e:e7:cb:4f:bd:39:3e:f2:6d:98:3a:54:2e:
61:77:45:4e:c9:bf:5c:a2:63:a3:2f:7a:f7:97:da:7e:a2:31:
37:f7:a6:a2:87:32:4a:76:61:85:85:06:3d:ff:fc:9b:d0:3e:
09:e1:69:3b:6d:72:90:e5:b1:aa:e4:83:ee:60:eb:2e:3d:2e:
ce:03:05:3f:f8:02:f4:2c:78:aa:f6:5a:38:28:ae:6e:10:4b:
a1:c3:8d:78:93:d9:e6:d4:26:e9:af:22:72:8f:b9:de:22:a2:
7f:9b:79:a0:0c:3b:6a:0f:3a:8d:1b:e7:99:16:f2:c3:7f:c4:
d9:90:23:6e:12:38:f7:a3:f8:eb:28:43:60:4c:83:9d:71:3a:
a6:c9:dc:b6:42:6e:b5:8d:78:a4:6b:6f:fb:de:16:52:82:68:
83:98:4e:12:a3:af:f8:6a:d5:3f:ea:a8:63:d1:f2:c6:7a:c9:
d7:17:52:cf:85:55:bc:62:07:b2:c3:6b:99:9e:81:cf:78:dd:
46:48:bb:9c:14:be:54:07:9d:34:27:50:08:22:c1:81:a7:d1:
92:38:b1:79:0c:ad:3a:3c:d1:70:b6:8a:e3:37:98:de:b6:eb:
d8:e5:5e:3d:2e:a9:04:1b:8a:63:b9:b0:a7:21:4e:51:e9:c6:
2f:0f:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:49 2024 by rpki-client on console-ams.rpki-client.org