Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e683859-27be-4b82-96fb-96b0f22c410a.roa
File: 9e683859-27be-4b82-96fb-96b0f22c410a.roa (raw, json)
Hash identifier: U+58ooaggUoB84l2AHcIxRMxNl/l5CvkciMEnQROvGw=
Subject key identifier: EC:C3:B5:60:29:1E:EE:EE:3B:36:EC:05:FA:91:94:D1:B7:DF:54:92
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 108391354E16215344CCC7D15E1354099F0278A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e683859-27be-4b82-96fb-96b0f22c410a.roa
Signing time: Fri 01 Nov 2024 00:00:00 +0000
ROA not before: Fri 01 Nov 2024 00:00:00 +0000
ROA not after: Fri 06 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d027::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:83:91:35:4e:16:21:53:44:cc:c7:d1:5e:13:54:09:9f:02:78:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 1 00:00:00 2024 GMT
Not After : Dec 6 23:59:59 2024 GMT
Subject: serialNumber=6e0e1578aeb34343767f1773680e80c577001b8fc847981dc24a3f4511ffd63c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:2e:d4:d2:db:fc:1b:20:1d:48:41:7e:aa:
76:71:cd:10:7d:86:d8:e9:90:44:1d:85:6e:69:a6:
2a:e0:7a:3e:b9:c3:91:ce:4a:a1:78:3c:db:f5:83:
ac:6b:f4:bb:ca:fe:1f:f3:7e:0a:47:0e:d9:50:52:
a5:12:d0:aa:24:2b:10:0e:e5:c9:e8:7b:53:33:7c:
66:c4:f7:8b:bb:ce:4c:a1:ee:80:6d:56:54:3c:bf:
bf:dc:3d:6a:88:9c:30:81:1f:e1:f7:6d:9e:9d:a9:
29:df:95:cc:40:2d:2b:04:87:25:26:b2:ea:aa:ad:
d5:bc:ab:09:a7:68:b5:43:1f:d2:61:27:2e:3d:fe:
91:94:b5:4b:34:f7:fb:18:e2:38:3a:bb:2d:ff:df:
a6:18:f3:25:a0:5c:04:e5:ad:65:7f:59:a5:b5:c8:
9f:ca:b0:06:44:71:76:c0:c4:fd:d0:ec:ed:32:84:
7f:ae:5e:9a:89:72:db:fb:a4:db:af:0a:d2:e4:98:
d8:fd:cd:4a:a9:3a:7c:67:59:93:49:84:7a:6d:0c:
e0:78:b7:c7:15:09:69:ea:c8:44:ac:63:f9:4e:f8:
10:9c:5a:6d:73:81:75:01:ef:3c:b6:a6:9d:de:9c:
93:6f:7c:20:13:69:03:c5:1b:0c:38:91:3f:aa:6c:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:B5:60:29:1E:EE:EE:3B:36:EC:05:FA:91:94:D1:B7:DF:54:92
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9e683859-27be-4b82-96fb-96b0f22c410a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d027::/36
Signature Algorithm: sha256WithRSAEncryption
41:2c:4c:12:ad:dc:07:43:36:92:73:da:04:55:c1:43:93:ac:
14:ce:c4:27:60:6c:02:57:45:b5:3a:8f:01:11:bb:7f:0f:9f:
a8:d3:ca:b2:ed:07:61:50:ce:c8:07:ed:73:ce:d5:a0:16:80:
25:3b:ef:f2:81:db:f9:01:f2:bf:a8:04:ce:24:a7:73:66:f9:
fd:01:9c:4e:29:d5:02:72:cf:2c:af:ad:75:8c:41:8a:a8:af:
7a:0c:3e:f1:95:18:00:b0:66:1f:7a:9b:1d:a9:a3:11:f6:61:
9a:7d:b6:4e:05:2d:55:c8:e2:2a:a3:1c:f1:e9:e8:30:08:1a:
3b:fa:a9:f5:4f:a4:31:37:c8:ec:91:16:37:9f:ba:9b:ba:29:
aa:b9:eb:2a:55:8e:ef:bf:70:14:17:21:16:4d:ce:8e:ff:8f:
45:ae:e9:c1:74:6b:f3:a8:12:73:34:e5:b4:28:65:cd:c5:40:
1b:de:b0:29:eb:6b:d2:82:31:6c:ad:20:a4:9d:83:97:b2:bc:
5a:8a:54:55:ba:35:aa:af:c1:47:56:52:69:14:23:8c:eb:de:
be:82:1c:bc:40:0a:09:83:bf:8f:3f:22:d1:74:a5:c3:04:b9:
49:d8:82:49:e1:f9:02:10:97:f5:f5:9e:1b:87:44:81:3c:e3:
f2:d3:53:fc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEIORNU4WIVNEzMfRXhNUCZ8CeKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDExMDEwMDAwMDBaFw0yNDEyMDYyMzU5NTlaMHoxSTBHBgNV
BAUTQDZlMGUxNTc4YWViMzQzNDM3NjdmMTc3MzY4MGU4MGM1NzcwMDFiOGZjODQ3
OTgxZGMyNGEzZjQ1MTFmZmQ2M2MxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMAxLtTS2/wbIB1IQX6qdnHNEH2G2OmQRB2FbmmmKuB6PrnDkc5KoXg82/WD
rGv0u8r+H/N+CkcO2VBSpRLQqiQrEA7lyeh7UzN8ZsT3i7vOTKHugG1WVDy/v9w9
aoicMIEf4fdtnp2pKd+VzEAtKwSHJSay6qqt1byrCadotUMf0mEnLj3+kZS1SzT3
+xjiODq7Lf/fphjzJaBcBOWtZX9ZpbXIn8qwBkRxdsDE/dDs7TKEf65emoly2/uk
268K0uSY2P3NSqk6fGdZk0mEem0M4Hi3xxUJaerIRKxj+U74EJxabXOBdQHvPLam
nd6ck298IBNpA8UbDDiRP6psuZsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTsw7Vg
KR7u7js27AX6kZTRt99UkjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OWU2ODM4NTktMjdiZS00YjgyLTk2ZmItOTZiMGYyMmM0MTBhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF0CcA
MA0GCSqGSIb3DQEBCwUAA4IBAQBBLEwSrdwHQzaSc9oEVcFDk6wUzsQnYGwCV0W1
Oo8BEbt/D5+o08qy7QdhUM7IB+1zztWgFoAlO+/ygdv5AfK/qATOJKdzZvn9AZxO
KdUCcs8sr611jEGKqK96DD7xlRgAsGYfepsdqaMR9mGafbZOBS1VyOIqoxzx6egw
CBo7+qn1T6QxN8jskRY3n7qbuimquesqVY7vv3AUFyEWTc6O/49FrunBdGvzqBJz
NOW0KGXNxUAb3rAp62vSgjFsrSCknYOXsrxailRVujWqr8FHVlJpFCOM696+ghy8
QAoJg7+PPyLRdKXDBLlJ2IJJ4fkCEJf19Z4bh0SBPOPy01P8
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:45 2024 by rpki-client on console-ams.rpki-client.org