Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/930d7941-ad20-4348-94b1-5c8d5e9e016c.roa
File: 930d7941-ad20-4348-94b1-5c8d5e9e016c.roa (raw, json)
Hash identifier: TLHBNSnysPcjubwFRFl7p6Xg19Yeh1OPmT+GzEPMXM0=
Subject key identifier: 04:94:35:1A:D4:94:86:B9:20:FA:09:FB:2A:ED:F0:85:05:69:90:0C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7E2085D77B0F061AC47218AAA9C58E332B6C9931
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/930d7941-ad20-4348-94b1-5c8d5e9e016c.roa
Signing time: Fri 22 Nov 2024 00:00:00 +0000
ROA not before: Fri 22 Nov 2024 00:00:00 +0000
ROA not after: Fri 27 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:20:85:d7:7b:0f:06:1a:c4:72:18:aa:a9:c5:8e:33:2b:6c:99:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 22 00:00:00 2024 GMT
Not After : Dec 27 23:59:59 2024 GMT
Subject: serialNumber=7d11f354ce3e1be330529fd3883cc07547eb120b1f51e34cbd6cc657f15f2308, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:3f:62:47:4d:6f:4d:36:09:c2:25:f8:e6:
97:4c:59:74:fe:79:c1:88:28:86:42:8e:d3:bf:6e:
0b:82:a6:d2:d1:c0:c8:b9:57:99:25:0d:ea:2c:fe:
f0:b3:c8:f0:df:30:08:11:6b:3b:42:cb:36:b2:0f:
bc:d8:ce:e3:30:fe:f4:b5:65:10:6e:ff:f5:3d:f7:
82:78:21:09:b8:30:4c:15:33:82:16:e5:da:5e:36:
44:2a:cd:99:45:de:b2:ff:dd:53:c2:cb:b8:9b:01:
6e:b2:af:ad:43:50:27:ed:27:c7:e5:dc:24:cc:da:
79:3b:92:c6:7c:44:58:2f:25:0e:a7:df:8b:1d:7b:
92:0b:1d:d1:f1:44:8d:04:43:0d:41:b4:2a:19:57:
cd:38:95:12:01:89:20:79:86:fa:7a:57:04:93:f9:
32:fd:5c:ea:46:3e:a4:30:ab:c5:fa:7f:8f:6a:18:
c7:7f:b3:ac:95:a6:6c:92:19:05:be:18:09:02:0d:
68:c2:5d:65:b6:c6:c1:85:ce:67:d4:82:9c:47:3a:
76:a7:1d:ac:cb:90:04:85:39:67:18:1a:c9:77:d1:
59:37:76:2c:d7:1b:df:c0:a9:db:ad:1b:f8:1a:f4:
49:5f:29:72:d0:66:b6:f0:36:a2:80:ea:99:d3:85:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:94:35:1A:D4:94:86:B9:20:FA:09:FB:2A:ED:F0:85:05:69:90:0C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/930d7941-ad20-4348-94b1-5c8d5e9e016c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:2000::/40
Signature Algorithm: sha256WithRSAEncryption
c5:7d:94:da:aa:4d:68:28:3c:28:c6:e5:06:0c:b9:4d:75:fc:
4d:31:b8:8d:ea:b1:63:45:da:de:28:f8:a7:cc:a3:c1:6b:09:
40:97:bb:90:7c:a3:f8:8a:fd:22:39:a7:f2:7e:c1:ee:4b:b6:
3f:d3:f2:aa:0b:dc:15:28:fe:56:95:12:c5:34:70:82:5d:50:
0f:e9:96:f3:a2:7b:e4:99:05:a4:15:a8:15:82:5d:ca:80:03:
dc:2f:00:3a:64:b2:c5:19:84:a0:d8:0d:01:a8:35:10:aa:03:
6a:72:09:b5:46:3c:59:d6:b4:b6:93:7b:25:a3:ba:fa:d6:3d:
48:d4:3b:cc:ff:a2:ce:6e:06:bb:a4:c2:ab:ff:75:6c:c5:5d:
a3:92:37:da:62:b2:30:8f:72:c4:47:13:08:c6:2d:98:4f:f3:
37:2e:82:0e:48:e8:4c:a8:1b:84:09:f0:4f:58:c0:f3:62:67:
67:5e:ec:c1:cf:9c:72:6a:87:e2:3a:82:00:13:ea:a1:f0:95:
c0:35:66:72:84:a0:cd:cd:86:e9:d3:0b:0e:77:93:49:86:cc:
41:af:5d:a8:bd:79:a3:43:6b:60:bf:55:d9:ea:01:c1:19:be:
5c:b5:37:91:dc:ac:7b:01:e0:54:c7:5d:4c:0e:91:5b:65:e4:
d3:ed:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:45 2024 by rpki-client on console-ams.rpki-client.org