Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
File: 85151a34-1ac3-4b9b-801b-33bd153ac88d.roa (raw, json)
Hash identifier: sUAMYADnDEGeE+sZcQzgL8XRccLUCu+zP0/OoOcYmkM=
Subject key identifier: 6C:35:15:A6:61:4F:87:D0:BD:7C:FB:4E:57:6B:95:93:15:44:AB:0F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3BA9679747F40FA9C08401E26A11E67EBEC4801D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
Signing time: Tue 23 Apr 2024 00:00:00 +0000
ROA not before: Tue 23 Apr 2024 00:00:00 +0000
ROA not after: Tue 28 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d050:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a9:67:97:47:f4:0f:a9:c0:84:01:e2:6a:11:e6:7e:be:c4:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 23 00:00:00 2024 GMT
Not After : May 28 23:59:59 2024 GMT
Subject: serialNumber=9c068fcdd5e5185ae844339adcc18835281f2d925dfb4b4e93a51e433e7a3e89, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:3b:62:ad:e3:92:72:f7:5f:e8:a5:e4:84:
fa:29:c6:b1:e9:a6:34:b4:d6:13:4e:71:74:5e:db:
9b:9b:e2:88:96:19:33:6a:b2:1c:e8:9a:26:17:4f:
61:0d:cd:b0:42:cc:6a:81:9d:ea:fc:80:83:31:82:
0e:0c:e8:21:5e:fb:ab:48:fb:e5:90:8a:72:bd:3a:
de:86:44:48:35:bc:8b:7a:61:44:0a:e7:42:0b:00:
f2:0c:25:9d:2d:97:b9:34:45:e1:d0:db:8c:69:76:
58:71:0e:52:58:6e:ff:d6:a0:21:ec:63:28:31:34:
02:0d:d5:2d:a1:9f:9d:1d:5b:73:a7:13:8b:2e:64:
ac:9e:e7:34:f6:85:30:de:0c:ae:a5:ea:00:13:45:
d4:54:24:5e:65:5b:fe:42:bc:cf:8b:b9:4c:31:28:
20:49:1e:59:36:45:08:b7:2e:fe:f0:c8:2b:f7:a0:
01:0f:b0:c3:a9:af:c8:de:f1:9b:f9:a3:a5:2a:26:
1b:a4:ce:ff:40:08:48:fa:1a:d2:95:05:64:65:4b:
28:3e:90:ce:a0:1b:d1:a0:8d:ed:5a:38:3f:1a:d3:
cd:c4:d7:05:23:9f:ac:8e:8f:d3:10:e7:1e:a5:13:
87:c4:f7:04:e7:d9:39:85:53:4b:98:e1:e8:05:c0:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:15:A6:61:4F:87:D0:BD:7C:FB:4E:57:6B:95:93:15:44:AB:0F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/85151a34-1ac3-4b9b-801b-33bd153ac88d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d050:1000::/40
Signature Algorithm: sha256WithRSAEncryption
91:68:2e:af:13:3c:ce:44:0f:c7:26:91:6f:5d:6b:a9:df:18:
d1:c4:75:25:ba:43:1f:de:36:3a:69:8b:60:dd:78:d4:01:ea:
f2:1f:ef:50:d6:6d:cb:ff:ae:0b:de:2f:b5:23:8d:fe:66:f2:
0c:b4:c6:6f:11:11:65:cc:01:c6:66:43:5b:90:17:fc:b7:ff:
4e:3b:3a:92:ee:64:ba:a3:40:b7:3b:36:a0:df:5c:83:5c:f3:
fd:8c:39:ba:e1:9b:0b:55:47:23:5d:a7:db:f5:5b:fb:b4:c5:
0e:94:b5:f1:31:d8:00:88:04:fa:5a:ef:6f:6b:4e:97:fc:79:
57:d8:ae:ea:89:97:51:2f:34:87:fa:b5:6c:68:12:ae:81:eb:
24:d3:94:3a:ed:27:d1:9b:84:34:30:96:89:6f:12:f0:8d:3c:
c8:66:df:d1:53:a4:72:a5:9c:8e:c5:92:96:78:36:83:ad:d2:
58:b6:11:7c:da:17:4a:ac:f4:16:3f:45:7b:c1:12:a0:68:19:
59:51:46:0f:eb:09:ba:ee:18:bb:95:0c:ef:89:9b:b5:ce:68:
24:17:bf:8a:38:e4:b6:f9:b6:28:e5:de:43:05:d8:6c:30:55:
1f:f1:48:13:68:98:48:25:1c:cc:37:8d:4a:d3:a4:77:32:26:
56:f9:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:04 2024 by rpki-client on console-ams.rpki-client.org