Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
File: 8afa1c3e-762a-4db1-b600-92897f76c67e.roa (raw, json)
Hash identifier: tG9ZC6aVn0TEnXPNulu+mlVa83WGbbqVnvZE8xkIdyE=
Subject key identifier: 1C:9D:57:5F:4A:EC:9C:00:BB:76:B1:74:90:F6:24:7E:BD:3E:E1:8B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 65BEA60C6151F109812D029E3A3AB077A02D557B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:be:a6:0c:61:51:f1:09:81:2d:02:9e:3a:3a:b0:77:a0:2d:55:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=1b829a4bf4c8cb49cb44f2b4c62cac8f50c7f8dbcfe07184cc5759abc44dad2e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:df:53:b8:f6:c8:9e:95:5b:64:c5:f7:b2:
58:e3:02:4b:61:c5:ae:88:68:2b:72:29:0e:51:70:
d3:5d:ba:59:f2:82:c3:dd:6d:1c:be:37:92:20:57:
9c:30:93:66:88:e6:85:9b:5e:37:59:71:d0:37:4d:
dc:01:40:6a:cd:85:80:17:46:0a:ae:8f:59:ca:14:
7b:77:44:9d:ca:60:63:9e:19:ec:fe:4e:8a:c8:1c:
01:ea:3c:92:4e:e2:f0:0a:1d:b7:e0:0b:16:78:49:
bd:57:ec:b4:b5:d1:13:ee:81:e1:10:32:25:d2:37:
b9:ae:06:23:59:9f:59:49:ba:d8:ec:9a:fa:3b:f1:
84:b5:18:51:09:af:2a:61:f3:ac:77:a3:d9:b5:0c:
b9:39:ef:56:53:b8:17:8b:01:30:82:b8:02:6b:be:
95:32:23:18:33:0a:a9:10:0b:da:91:37:a3:8d:31:
0e:24:03:23:78:02:d1:85:97:59:bd:91:ec:18:81:
4f:fd:d3:2d:0e:27:9b:ac:50:ba:f9:bf:b2:cd:26:
50:ae:6d:e4:ef:99:15:c8:96:78:27:6c:eb:47:1d:
61:95:f8:5b:60:79:ff:54:04:d5:fc:43:84:0e:0a:
89:a0:f2:d8:e0:2f:14:90:4f:13:89:dc:30:9b:e1:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9D:57:5F:4A:EC:9C:00:BB:76:B1:74:90:F6:24:7E:BD:3E:E1:8B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8afa1c3e-762a-4db1-b600-92897f76c67e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c:9000::/40
Signature Algorithm: sha256WithRSAEncryption
a4:b7:15:e3:51:11:6a:7c:d5:b8:fe:57:05:9f:99:02:b9:a6:
96:11:b6:10:fe:af:61:e7:e6:b0:ac:77:33:04:eb:9a:f2:8b:
b0:05:7b:fd:7e:f7:40:78:d7:22:13:9d:22:4b:06:85:97:9b:
da:d2:2a:09:4d:cb:50:16:7b:94:b4:2f:72:8a:e6:da:85:ca:
8d:e5:82:88:19:c7:a3:3b:09:8b:2a:96:22:60:e7:00:c4:72:
b7:2f:2a:8b:33:9a:7a:18:61:a2:41:5b:f2:82:c8:dd:b6:c4:
1c:1f:60:78:bc:6b:50:5d:f0:59:0f:4a:be:23:c4:9e:d7:ae:
06:4b:88:4a:4d:5a:80:50:55:2d:ac:50:64:74:76:b2:9a:33:
a4:7d:33:65:24:1c:a0:52:bd:19:b5:df:2f:bd:65:42:9a:bb:
6a:ec:80:9c:75:0c:f8:61:a7:76:51:c5:c0:86:37:a5:ad:02:
a6:a1:ed:7d:8e:d1:78:75:e4:b2:fa:87:5c:dc:8b:91:4d:4d:
f5:90:34:a5:1b:d5:2a:59:11:41:b9:0b:23:50:d4:f6:29:4e:
c0:b9:40:22:7f:0f:5b:4c:fa:a2:86:1b:80:d5:22:43:98:67:
cf:ef:2a:8d:0b:85:9d:cd:bc:cb:1e:b9:02:52:6f:3b:09:36:
a9:ae:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:11 2024 by rpki-client on console-fra.rpki-client.org