Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75eda97-cc53-4a04-9991-af2bfeeed825.roa
File: a75eda97-cc53-4a04-9991-af2bfeeed825.roa (raw, json)
Hash identifier: QVBtJxeVU1TUvU5RHhI8jrxlt/62iq0TTY4uDO6C8iE=
Subject key identifier: EC:7A:56:F1:E2:4E:91:A8:AC:83:39:B5:DF:1B:C7:68:23:CF:E9:05
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1FED3D5E4BF3C02E15E962225502F5E82EC252A7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75eda97-cc53-4a04-9991-af2bfeeed825.roa
Signing time: Mon 15 Jul 2024 00:00:00 +0000
ROA not before: Mon 15 Jul 2024 00:00:00 +0000
ROA not after: Mon 19 Aug 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:9000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jul 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ed:3d:5e:4b:f3:c0:2e:15:e9:62:22:55:02:f5:e8:2e:c2:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 15 00:00:00 2024 GMT
Not After : Aug 19 23:59:59 2024 GMT
Subject: serialNumber=37a6cac3405f22cd5802a3342dc0e0324942db6dc36968aac35606c1de9e2f06, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:f5:91:19:21:f3:d9:ac:74:c0:80:9b:4a:
22:99:cf:65:0e:61:2c:7e:d7:6e:bc:3e:46:ed:c5:
28:21:c2:97:5d:83:d3:75:fe:44:aa:0d:42:6a:00:
a0:d8:4f:01:b7:c2:e0:2f:69:f9:12:fc:6d:1a:4b:
77:8c:77:5d:72:81:a9:74:e1:a1:1b:a3:3c:ce:3f:
05:9e:d4:9a:b2:07:4a:a6:5d:13:5c:d0:a5:d5:3b:
4f:e2:4e:1b:b0:b5:8f:15:1a:86:43:ae:02:82:c9:
91:82:36:72:15:3c:c6:f2:da:b6:6e:4d:71:70:ec:
e6:08:ea:76:74:55:db:cd:61:88:ad:d5:4c:6c:45:
c0:89:52:48:c9:ee:70:db:96:82:b6:1a:be:64:52:
99:ee:4c:86:18:1d:74:04:28:8f:59:95:c6:f4:c3:
f7:ca:1a:7e:2e:57:8d:6a:bc:15:61:2f:93:ae:45:
c5:11:a6:0b:43:e6:f4:90:d9:63:50:99:41:8d:a2:
bc:43:52:47:33:a8:1d:9a:01:e5:ac:7c:f5:3e:97:
f7:99:92:68:d7:1c:74:22:74:58:a1:db:0a:0a:7b:
eb:df:a8:2e:85:19:bf:99:97:6f:4d:96:ea:8f:fe:
a5:ab:00:b3:24:3a:38:0d:11:f6:1f:94:d9:e6:6f:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:56:F1:E2:4E:91:A8:AC:83:39:B5:DF:1B:C7:68:23:CF:E9:05
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a75eda97-cc53-4a04-9991-af2bfeeed825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:9000::/40
Signature Algorithm: sha256WithRSAEncryption
bc:69:bb:d1:6c:d6:a5:64:a3:0d:8f:a7:44:0e:ce:b6:c2:8e:
92:84:62:b2:36:85:1a:ba:0a:34:9c:b3:98:34:6c:8c:26:49:
d8:7a:13:a0:ef:9c:73:5a:eb:2f:41:76:4e:e5:a1:25:a3:bf:
34:28:6b:b4:0a:61:52:b8:5a:d9:eb:e2:08:0d:45:2a:6f:bd:
46:ce:b8:eb:1b:aa:70:21:78:1b:a8:d7:d5:e7:74:38:7c:df:
b5:89:ac:dc:2c:d8:20:5c:14:fc:86:4e:53:35:60:a1:1c:86:
66:f9:09:50:46:48:03:d5:f7:10:3f:19:ce:cb:03:29:ad:f6:
d6:8c:28:91:aa:d9:1e:ea:6f:53:51:0c:ed:78:69:24:48:dc:
e1:4a:98:c0:9b:df:5d:56:a4:b5:a4:95:80:9d:70:83:b6:74:
35:47:31:45:75:a7:09:50:e8:ed:e9:d2:33:94:ea:96:6b:d2:
eb:22:31:4b:b1:18:d1:2e:5c:be:a9:b5:34:7a:ca:fe:e8:36:
15:c8:3f:d9:6a:e6:24:12:69:1d:5f:fd:64:d7:0f:18:47:71:
54:a7:fb:30:9c:2a:58:9e:6c:43:a9:41:39:ad:34:0b:12:05:
f0:b1:9a:ae:24:da:dd:4d:2c:03:d9:03:07:8c:c1:1b:77:5b:
df:7f:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 17:47:22 2024 by rpki-client on console-fra.rpki-client.org