Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b0e282b-3b78-4530-8323-91f35bf9b20b.roa
File: 9b0e282b-3b78-4530-8323-91f35bf9b20b.roa (raw, json)
Hash identifier: iHqCYeDVo5tQe40K3lhhJsWMfcWlmnItVW9jldoeBFg=
Subject key identifier: A1:F4:24:4C:82:AC:D5:3C:01:E5:1F:57:E6:4A:65:52:07:8C:26:7F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3930C2F092E3501D0159EEBF656FFF1C067049B8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b0e282b-3b78-4530-8323-91f35bf9b20b.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:30:c2:f0:92:e3:50:1d:01:59:ee:bf:65:6f:ff:1c:06:70:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=29aa2ce3dd26a6c921f9ba1b1f15fb656d7f6c3b2471f9e217b55cb4e611fbb6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:bd:86:24:c7:fd:bb:7f:c4:67:32:7f:60:
7f:1b:b8:cf:a5:76:9d:16:3b:b4:16:c5:b9:a8:fd:
3a:7c:71:65:2a:16:8e:ba:bb:8c:ee:b2:b3:eb:89:
b0:d4:d7:fd:88:22:a3:b1:22:c6:51:8f:69:f5:63:
70:88:ca:9c:de:63:54:c0:bd:85:5d:87:6a:c4:4a:
d9:99:f2:67:90:8e:a0:7b:4c:10:fe:22:79:65:35:
34:fa:d2:22:7b:61:a9:a5:5b:50:e1:20:74:39:64:
71:5f:27:34:41:e7:94:11:d4:b3:02:6d:23:fc:d5:
52:cc:39:6a:e1:dd:02:9b:32:14:47:89:f6:5e:3f:
51:93:57:97:63:7f:62:3e:d8:35:37:f5:a4:d3:59:
46:7b:56:77:66:ab:04:f9:5f:73:f2:3b:20:0b:d6:
59:d2:d4:0d:ce:d1:93:01:19:ec:4e:f2:32:81:9c:
33:5e:80:a5:e8:0b:b5:84:c0:2f:5d:b4:f8:49:26:
90:e7:a1:7d:90:83:22:e0:bd:d3:32:bc:60:01:4b:
e9:53:33:18:c8:03:49:ae:e2:e9:bd:cc:26:c3:f2:
e7:d6:c5:79:e6:3c:5a:4b:f3:64:0e:72:0d:b4:d7:
74:fd:57:bd:93:f3:d6:f8:7a:34:5d:9f:4d:62:4b:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:24:4C:82:AC:D5:3C:01:E5:1F:57:E6:4A:65:52:07:8C:26:7F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9b0e282b-3b78-4530-8323-91f35bf9b20b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:6000::/40
Signature Algorithm: sha256WithRSAEncryption
64:ad:5a:13:4a:f4:67:3d:d8:be:ec:e0:41:9b:d3:65:30:8a:
57:03:e2:1d:55:c4:cb:b2:ee:e3:e9:bc:2b:b4:e2:4b:ec:5d:
4d:a0:43:b6:9a:79:86:45:08:ea:42:30:63:25:ec:9e:96:8f:
f2:74:6f:c2:66:7c:98:40:70:17:db:f3:0d:db:f2:6e:59:00:
69:89:2e:12:7f:90:df:ba:d4:88:1f:f6:d3:dd:3a:e8:0a:0c:
5d:8a:f8:0c:87:7e:3e:19:bc:db:d2:9f:a8:ba:11:d4:67:c5:
d5:c4:f5:ec:f7:de:24:5a:f3:87:72:fe:19:52:78:48:96:7b:
06:ca:2d:c1:58:27:49:f1:c9:98:e9:e1:23:8d:45:24:01:9d:
d5:65:af:05:98:44:25:b0:19:cb:33:e5:5e:68:26:dc:1e:34:
e0:5f:29:e8:43:82:53:3d:d3:4c:96:05:7a:e2:f5:5f:c0:28:
32:f2:33:0f:ec:3e:87:5d:14:ab:6d:18:b0:bb:6e:26:5f:7e:
6d:0b:14:13:cb:b7:d0:12:61:92:15:c3:9a:be:7f:91:9a:b2:
14:77:74:e5:0a:6c:1a:c2:f6:3d:c7:34:30:f8:8c:bb:f4:b3:
fa:34:3e:36:17:cd:48:d1:51:3a:ca:be:16:5e:cf:4c:e9:72:
6a:8d:86:48
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOTDC8JLjUB0BWe6/ZW//HAZwSbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDA0MDIwMDAwMDBaFw0yNDA1MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDI5YWEyY2UzZGQyNmE2YzkyMWY5YmExYjFmMTVmYjY1NmQ3ZjZjM2IyNDcx
ZjllMjE3YjU1Y2I0ZTYxMWZiYjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJcJvYYkx/27f8RnMn9gfxu4z6V2nRY7tBbFuaj9OnxxZSoWjrq7jO6ys+uJ
sNTX/Ygio7EixlGPafVjcIjKnN5jVMC9hV2HasRK2ZnyZ5COoHtMEP4ieWU1NPrS
InthqaVbUOEgdDlkcV8nNEHnlBHUswJtI/zVUsw5auHdApsyFEeJ9l4/UZNXl2N/
Yj7YNTf1pNNZRntWd2arBPlfc/I7IAvWWdLUDc7RkwEZ7E7yMoGcM16ApegLtYTA
L120+EkmkOehfZCDIuC90zK8YAFL6VMzGMgDSa7i6b3MJsPy59bFeeY8WkvzZA5y
DbTXdP1XvZPz1vh6NF2fTWJLSZUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSh9CRM
gqzVPAHlH1fmSmVSB4wmfzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWIwZTI4MmItM2I3OC00NTMwLTgzMjMtOTFmMzViZjliMjBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hdg
MA0GCSqGSIb3DQEBCwUAA4IBAQBkrVoTSvRnPdi+7OBBm9NlMIpXA+IdVcTLsu7j
6bwrtOJL7F1NoEO2mnmGRQjqQjBjJeyelo/ydG/CZnyYQHAX2/MN2/JuWQBpiS4S
f5DfutSIH/bT3TroCgxdivgMh34+Gbzb0p+ouhHUZ8XVxPXs994kWvOHcv4ZUnhI
lnsGyi3BWCdJ8cmY6eEjjUUkAZ3VZa8FmEQlsBnLM+VeaCbcHjTgXynoQ4JTPdNM
lgV64vVfwCgy8jMP7D6HXRSrbRiwu24mX35tCxQTy7fQEmGSFcOavn+RmrIUd3Tl
CmwawvY9xzQw+Iy79LP6ND42F81I0VE6yr4WXs9M6XJqjYZI
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:11 2024 by rpki-client on console-fra.rpki-client.org