Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dd76c15-3765-4341-a0f2-8b0872cdedb8.roa
File: 9dd76c15-3765-4341-a0f2-8b0872cdedb8.roa (raw, json)
Hash identifier: EVyaAZdmatMaqQq7pPSWRt5FVpHg3jCgAEHEXDhNDfk=
Subject key identifier: 21:64:76:D9:70:68:9E:AC:3A:AA:46:A5:6B:91:04:21:49:86:92:CE
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 358DD1019987A42FF96AB8F2EF0213F68E1B1ED5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dd76c15-3765-4341-a0f2-8b0872cdedb8.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d030:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8d:d1:01:99:87:a4:2f:f9:6a:b8:f2:ef:02:13:f6:8e:1b:1e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=21316e7150d3f1290667c52c2edd2966554566568a780891f3ff40e88901f0f9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:2a:52:26:2d:54:31:35:3d:b3:7f:38:62:
66:97:bf:89:1f:bf:40:2a:9e:0b:3a:69:b8:16:64:
93:4a:2b:58:6a:0c:f4:13:06:1e:24:8b:ad:0e:e6:
d8:4f:14:4d:56:5d:23:bd:ec:5d:8c:61:51:8c:a6:
f3:f4:18:e4:87:ba:0d:e3:e6:96:56:7b:1b:83:a7:
5a:f7:29:84:0f:ad:33:fd:73:13:bd:0b:34:45:fd:
47:fc:4d:fa:c2:9b:87:13:b8:49:ca:bd:33:6e:f5:
59:60:60:98:6f:b1:b6:4b:91:40:9e:1e:a8:cc:0c:
95:83:a5:55:d3:93:22:2b:11:d5:6b:d5:af:c4:52:
7c:d1:92:c1:2a:7c:cf:d5:a8:ce:fc:93:c6:54:65:
92:cb:84:bc:c3:ce:db:ff:3e:d3:a8:eb:52:a2:08:
b7:aa:00:5e:a6:d4:0a:02:d7:d7:35:df:68:e4:32:
48:c2:eb:32:4c:d5:c9:57:04:1a:e8:98:f2:b1:c9:
7b:a8:8e:82:46:00:5b:f4:a2:67:41:ea:c3:e3:1c:
ae:96:35:73:c5:b0:2e:53:76:f3:97:36:93:49:d9:
eb:41:3c:c2:36:54:e4:ba:37:a0:66:07:ca:6d:e5:
22:91:07:a3:a1:43:ad:5d:d3:1d:2f:0f:f6:e1:c0:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:76:D9:70:68:9E:AC:3A:AA:46:A5:6B:91:04:21:49:86:92:CE
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9dd76c15-3765-4341-a0f2-8b0872cdedb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d030:6000::/40
Signature Algorithm: sha256WithRSAEncryption
7b:05:75:ee:8d:dd:2c:8a:82:6b:70:d9:be:dd:48:8e:2e:14:
1e:80:b7:7d:13:c6:83:65:8d:a7:47:68:7e:33:32:6e:8a:05:
ed:90:7c:bd:5b:40:3f:e0:5c:b9:6c:64:43:87:54:8c:74:4a:
d2:ee:13:01:8e:59:f0:2a:de:64:ca:51:ab:86:0d:0c:26:12:
a5:5f:16:d6:9a:61:39:56:e6:9e:79:4f:8a:40:2d:7c:3a:cc:
73:fb:4b:df:f8:db:dc:25:ee:c1:4f:07:05:6a:5a:b1:5c:0f:
eb:4f:a2:95:93:b8:c7:28:d7:02:45:f8:3a:bb:54:2e:91:34:
62:2d:92:bb:13:b5:af:0b:7b:9c:f0:bf:bb:b7:00:e1:24:23:
f3:76:69:e2:59:e2:4b:8c:70:e6:79:23:09:7e:ab:c6:0a:46:
a4:9e:7d:06:5f:be:4f:7b:11:8e:84:ee:ef:ec:dc:b2:38:ea:
f1:d0:c2:ae:9f:e1:49:53:43:5e:74:5d:24:e1:ae:1c:21:7a:
7b:c3:46:7e:1f:34:c5:e9:01:7f:02:3b:74:ce:03:e4:6f:0b:
a7:04:59:e4:0f:a7:3c:b6:22:dd:6c:8b:3b:e8:46:e1:fb:2e:
64:59:2e:c7:c0:47:63:a5:31:37:2c:02:52:01:60:ec:ef:b0:
cb:e3:f0:5d
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNY3RAZmHpC/5arjy7wIT9o4bHtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDA0MDIwMDAwMDBaFw0yNDA1MDcyMzU5NTlaMHoxSTBHBgNV
BAUTQDIxMzE2ZTcxNTBkM2YxMjkwNjY3YzUyYzJlZGQyOTY2NTU0NTY2NTY4YTc4
MDg5MWYzZmY0MGU4ODkwMWYwZjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCeKlImLVQxNT2zfzhiZpe/iR+/QCqeCzppuBZkk0orWGoM9BMGHiSLrQ7m
2E8UTVZdI73sXYxhUYym8/QY5Ie6DePmllZ7G4OnWvcphA+tM/1zE70LNEX9R/xN
+sKbhxO4Scq9M271WWBgmG+xtkuRQJ4eqMwMlYOlVdOTIisR1WvVr8RSfNGSwSp8
z9WozvyTxlRlksuEvMPO2/8+06jrUqIIt6oAXqbUCgLX1zXfaOQySMLrMkzVyVcE
GuiY8rHJe6iOgkYAW/SiZ0Hqw+McrpY1c8WwLlN285c2k0nZ60E8wjZU5Lo3oGYH
ym3lIpEHo6FDrV3THS8P9uHA3NUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQhZHbZ
cGierDqqRqVrkQQhSYaSzjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWRkNzZjMTUtMzc2NS00MzQxLWEwZjItOGIwODcyY2RlZGI4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DBg
MA0GCSqGSIb3DQEBCwUAA4IBAQB7BXXujd0sioJrcNm+3UiOLhQegLd9E8aDZY2n
R2h+MzJuigXtkHy9W0A/4Fy5bGRDh1SMdErS7hMBjlnwKt5kylGrhg0MJhKlXxbW
mmE5VuaeeU+KQC18Osxz+0vf+NvcJe7BTwcFalqxXA/rT6KVk7jHKNcCRfg6u1Qu
kTRiLZK7E7WvC3uc8L+7twDhJCPzdmniWeJLjHDmeSMJfqvGCkaknn0GX75PexGO
hO7v7NyyOOrx0MKun+FJU0NedF0k4a4cIXp7w0Z+HzTF6QF/Ajt0zgPkbwunBFnk
D6c8tiLdbIs76Ebh+y5kWS7HwEdjpTE3LAJSAWDs77DL4/Bd
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:11 2024 by rpki-client on console-fra.rpki-client.org