Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
File: 84b89066-b432-45c3-befb-ffa2b4be3b71.roa (raw, json)
Hash identifier: tG4F3hjjMMhrGYQap8oVS/I0XJ6y2Hi+cF3ZhR/rfaw=
Subject key identifier: 0D:D3:0B:F6:75:EB:6B:7E:7D:36:2C:6F:61:0A:CB:F1:20:34:46:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4A10420673A6CCCCE388A208544B37265FDCD84C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d078:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:10:42:06:73:a6:cc:cc:e3:88:a2:08:54:4b:37:26:5f:dc:d8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=06251f74b754ae9cdf219b427e6cf0f1dd65f66b50e4df75c55d24f86c3e1524, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:50:18:49:13:6b:53:17:87:c7:b5:50:ad:
dd:bc:dc:7d:10:4e:0b:9f:45:53:22:06:99:84:2b:
3e:d2:5b:93:25:92:30:5d:43:7d:4c:24:bf:f2:30:
9a:ac:c6:df:ad:fd:4a:a2:22:81:ae:67:6e:bf:bd:
4f:70:07:54:b9:19:ea:5f:f5:ce:1b:ef:a4:ca:ff:
b1:c2:87:9b:47:2f:3a:2a:97:6d:09:26:c2:fe:ce:
93:e4:fd:08:68:36:df:09:f4:9f:98:21:5c:db:89:
00:e1:43:18:0e:12:0b:5a:aa:99:ad:37:82:e6:33:
d8:50:21:5e:57:39:42:42:4a:32:01:f7:5b:c4:72:
36:aa:22:5e:27:9c:e5:a2:0a:c0:f1:46:3e:05:3a:
1b:b7:b6:1e:35:5c:6b:4f:c8:f0:6a:e2:79:58:20:
7f:10:94:7d:a3:99:c6:87:98:c4:4d:b0:81:c3:c0:
80:fc:81:b9:2f:89:b0:01:61:7a:03:ef:c3:0a:38:
2c:08:99:5a:80:06:6c:74:b9:9c:57:88:6e:7e:e4:
2d:e0:3e:54:d5:7a:71:9e:b8:ad:ec:d4:21:5d:33:
23:52:aa:5a:01:5f:63:c3:f5:10:73:6c:d7:f2:53:
c6:15:d6:68:d7:5b:c0:a8:18:36:fb:1a:87:82:ea:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:0B:F6:75:EB:6B:7E:7D:36:2C:6F:61:0A:CB:F1:20:34:46:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/84b89066-b432-45c3-befb-ffa2b4be3b71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d078:4000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:ce:7f:ff:80:21:29:dc:c9:18:7d:12:82:ff:ca:3d:0d:a6:
2e:c7:fe:56:ba:dc:d5:64:bf:a2:88:cc:19:4e:cd:e8:27:e9:
81:02:d6:c1:3f:61:ab:74:96:f2:07:62:5e:da:a3:1f:5e:37:
65:57:6c:31:89:f7:e2:40:ce:fc:db:61:6a:1a:fc:c7:9b:58:
0b:de:e2:5e:00:35:4b:dc:fd:3a:dd:ff:08:20:aa:7f:83:b9:
40:42:53:93:e6:cd:a9:82:8d:db:44:62:f1:a6:0e:68:0a:a7:
b7:f5:1c:3d:f2:15:a6:5f:be:d0:cf:d4:88:a8:13:a6:22:a9:
53:8b:b9:41:30:0c:da:3d:1b:b5:1d:24:43:68:e0:de:3e:ce:
a2:eb:66:49:4f:8d:26:4c:a9:a4:ce:35:6c:02:b6:71:c9:52:
e5:c3:a5:17:e3:42:d2:ff:09:20:e4:f9:7d:62:33:df:1a:41:
fc:1f:e5:9e:c9:1d:b7:22:26:c5:bf:87:1a:fe:18:57:32:74:
a9:82:ca:08:00:ac:8f:54:35:bd:0d:f0:b2:f6:7f:fd:d8:ea:
c0:d6:3b:34:aa:86:80:66:eb:bf:7a:d6:af:ad:cd:b8:cd:7f:
84:85:49:fa:f8:bf:cb:65:3c:df:3e:d5:1c:dd:69:d4:f9:57:
5e:80:27:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:32 2024 by rpki-client on console-fra.rpki-client.org