Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b9f858-170f-4e66-8d4d-515e5f3bfe0f.roa
File: 83b9f858-170f-4e66-8d4d-515e5f3bfe0f.roa (raw, json)
Hash identifier: 4Zq6fKq7YAE6+iFlwhyXQROcM3BW167P4DQtHB/8SbM=
Subject key identifier: 2B:43:8E:2F:5F:94:7A:EC:06:74:B8:22:A2:C5:EF:A2:C5:53:0A:CB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 39E7169DA1382505B251E128BD50058E3497ED72
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b9f858-170f-4e66-8d4d-515e5f3bfe0f.roa
Signing time: Tue 09 Apr 2024 00:00:00 +0000
ROA not before: Tue 09 Apr 2024 00:00:00 +0000
ROA not after: Tue 14 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d076:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e7:16:9d:a1:38:25:05:b2:51:e1:28:bd:50:05:8e:34:97:ed:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 9 00:00:00 2024 GMT
Not After : May 14 23:59:59 2024 GMT
Subject: serialNumber=3a43a9d1a7eecd6d4ab241a489d763a8ea436570580fafd542b30254ebf3d515, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:77:27:a9:fc:83:f9:02:f7:18:bf:20:f7:
de:fa:02:28:df:02:a7:e4:02:aa:c4:16:8c:6d:06:
11:0d:0b:cf:f0:87:dc:01:92:77:17:b7:0d:f9:7c:
f7:bb:12:52:72:58:78:e3:bb:6a:81:86:16:24:5e:
f6:85:1b:d9:70:f7:f9:0c:b2:8a:2d:60:39:ad:35:
77:d1:71:35:97:84:e0:1b:83:79:e5:78:bf:47:09:
f7:82:8b:74:59:52:d5:39:6a:c0:89:f2:15:f5:74:
b1:77:09:4f:4c:27:c5:02:d9:02:3e:a2:f4:f0:9c:
87:39:05:2a:73:7d:03:f4:ed:e5:63:34:9c:2a:ae:
8f:7a:11:ef:a2:5c:d4:06:ef:70:39:0f:e8:af:00:
a9:ed:5f:85:f5:d9:42:f5:10:2e:46:07:aa:94:e5:
cb:1c:5c:55:de:7f:a6:27:f0:de:3b:ce:16:c9:b4:
51:92:4d:4c:7c:ab:6e:a9:70:aa:1e:a9:c9:6e:59:
07:f6:b9:4e:6a:31:40:d3:a1:2e:c0:0e:71:01:df:
7f:7c:51:ac:02:09:79:7c:5f:98:70:66:d2:db:6f:
ab:59:31:0b:3b:af:2d:eb:31:7b:ba:1a:6f:db:24:
d9:84:9d:98:1a:02:40:ab:18:ac:ac:0b:06:d4:c9:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:43:8E:2F:5F:94:7A:EC:06:74:B8:22:A2:C5:EF:A2:C5:53:0A:CB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83b9f858-170f-4e66-8d4d-515e5f3bfe0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d076:a000::/40
Signature Algorithm: sha256WithRSAEncryption
17:87:50:03:be:72:08:1d:be:20:2c:67:11:38:cc:e5:97:2b:
51:6b:04:86:81:b7:0d:12:f5:89:06:06:97:47:cf:5c:a5:73:
50:45:b4:52:23:84:e3:2d:f5:85:cc:1d:28:e5:ae:5d:3c:f3:
2d:e4:c6:19:71:38:92:84:bb:93:5f:2a:20:f7:98:9f:c5:fe:
af:a6:7c:68:bb:7f:73:ac:bd:6e:55:33:fa:85:33:7c:40:2f:
a7:9b:b0:f2:c3:4f:44:f1:7d:68:cb:0a:17:d7:1a:d9:39:c0:
ff:99:c6:fe:31:a4:5a:2e:dd:63:ac:31:d5:4c:7f:ae:9f:3d:
06:18:fa:84:14:35:70:d1:1e:49:2e:ed:76:f9:3b:25:bd:44:
3d:4d:1a:8f:14:85:c1:25:e6:35:4e:43:4e:bb:ae:3a:42:f0:
91:e1:de:f5:73:4d:15:92:35:bf:c9:d8:1f:40:9c:42:1a:37:
fa:13:ec:13:71:76:27:e4:b0:ef:85:11:79:bc:e0:47:10:9f:
f2:2b:b1:05:db:33:ed:e6:6a:e1:0c:0b:0d:55:83:ed:53:42:
e9:ab:eb:e3:d0:cd:08:27:5b:d3:ab:14:79:a1:13:9b:e6:db:
33:fa:f3:6d:be:86:37:bb:4f:07:c8:0e:3b:84:02:65:79:9c:
f3:38:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:54:24 2024 by rpki-client on console-ams.rpki-client.org