Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8876a4ac-b484-42e6-9d3d-babfed60f0a2.roa
File: 8876a4ac-b484-42e6-9d3d-babfed60f0a2.roa (raw, json)
Hash identifier: NY4qfKhsG9q0J9eSiBp9zTgVIfFtud/Jk0kSNmEv7s8=
Subject key identifier: 01:88:A1:94:A3:A0:CD:12:43:3B:78:59:B1:F6:A6:E8:36:98:88:6F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6CC0A6C69312AD817CF0AF86ED3C351943734B1D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8876a4ac-b484-42e6-9d3d-babfed60f0a2.roa
Signing time: Fri 15 Nov 2024 00:00:00 +0000
ROA not before: Fri 15 Nov 2024 00:00:00 +0000
ROA not after: Fri 20 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d03a:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c0:a6:c6:93:12:ad:81:7c:f0:af:86:ed:3c:35:19:43:73:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 15 00:00:00 2024 GMT
Not After : Dec 20 23:59:59 2024 GMT
Subject: serialNumber=c48c47fbdf0467817baea7d453ac67488bc0394345e9b821ca9356ade426d9ec, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:6c:88:9c:e2:ef:3b:db:52:6f:c0:7a:27:
72:d8:8f:b0:08:d9:23:09:e8:a9:96:2d:b5:c4:9d:
bc:16:46:ed:d9:11:0f:24:41:04:fb:38:a5:58:90:
02:26:bd:56:e7:6a:4a:c1:1a:b5:44:aa:3d:25:30:
15:43:5b:46:d8:bd:62:6e:47:1f:ec:d1:95:39:70:
66:60:16:6b:11:a3:3d:81:64:e6:ea:1c:26:33:bf:
fd:ae:32:66:22:97:5f:e2:8a:9f:91:e8:1a:48:cb:
92:71:a8:ed:c8:4a:f6:52:df:48:c8:e0:f0:5f:ed:
17:b2:b0:49:b0:28:a8:f1:a7:b9:23:31:e0:24:a5:
77:ae:64:69:fa:b4:3c:af:35:4b:94:62:70:0c:b3:
66:a1:d2:1d:5d:01:42:83:cc:9a:70:ab:41:9c:2e:
c6:30:c5:51:23:e0:f3:14:a9:68:45:d1:d1:56:20:
50:37:d5:fc:03:16:c9:d9:a4:1c:4b:35:d5:38:0e:
4d:df:1e:81:90:6c:aa:6d:c2:35:b5:35:1c:bf:d1:
b0:23:30:e0:50:cf:ed:f8:aa:c3:29:e9:13:70:a2:
65:d2:fc:f9:97:eb:50:6e:4a:67:9b:49:63:33:83:
dd:a7:1f:be:49:78:92:9c:d4:34:26:b5:b4:b3:d3:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:88:A1:94:A3:A0:CD:12:43:3B:78:59:B1:F6:A6:E8:36:98:88:6F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8876a4ac-b484-42e6-9d3d-babfed60f0a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d03a:b000::/40
Signature Algorithm: sha256WithRSAEncryption
20:51:03:58:9a:ff:b2:7a:87:2f:d8:ad:69:55:63:39:93:bf:
b1:6e:4a:d3:2a:81:19:06:2d:06:71:e2:b6:5d:15:24:cf:20:
54:6b:af:8d:19:73:92:27:75:ba:60:c2:cb:27:a8:c1:fa:a2:
2a:b7:52:8f:1d:fc:63:c4:a2:94:03:8c:09:63:92:fa:d3:84:
c3:07:90:eb:60:d2:31:20:1b:34:e9:aa:89:84:fc:21:97:db:
b6:f2:32:36:5c:8b:e9:f2:ff:d6:72:cc:e6:48:28:82:09:37:
65:d5:d4:64:c4:13:83:ac:46:eb:65:cc:d5:7f:46:24:6c:5c:
e3:08:9c:3a:23:9f:53:91:f0:90:48:d3:a3:6a:30:b7:f8:61:
61:41:d2:18:ec:80:f6:63:b3:df:87:a3:a1:1f:5e:80:c2:6e:
b5:ce:54:e6:3b:b7:d0:f3:57:d3:89:04:c3:1b:0c:e8:38:cc:
a8:a0:cb:56:a6:3b:b6:b6:58:8a:5b:5b:fc:2f:26:0f:69:b8:
7f:41:84:ac:35:96:ce:64:e5:de:c9:11:8a:71:a0:68:9c:3c:
e7:c3:d4:f6:40:9c:46:53:59:c3:f2:0a:63:38:41:90:0f:9f:
d7:b4:59:73:82:37:67:f2:34:87:e2:c5:cf:3e:2b:7c:68:1c:
bf:83:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:40 2024 by rpki-client on console-fra.rpki-client.org