Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9ce0383-18b8-447e-83fd-284827aa20cb.roa
File: c9ce0383-18b8-447e-83fd-284827aa20cb.roa (raw, json)
Hash identifier: 4HfSVaUyfYxtAwEU6CDD4+Z4TtEKTs0dX+RCDkFHKEk=
Subject key identifier: 4B:3D:50:E6:22:2F:F3:AA:FF:78:2A:8E:23:CD:57:B6:CC:54:E5:ED
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 7CE9D72B8562F30A0D6AEF0AB7A4DD75232D7FFD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9ce0383-18b8-447e-83fd-284827aa20cb.roa
Signing time: Tue 23 Apr 2024 00:00:00 +0000
ROA not before: Tue 23 Apr 2024 00:00:00 +0000
ROA not after: Tue 28 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e9:d7:2b:85:62:f3:0a:0d:6a:ef:0a:b7:a4:dd:75:23:2d:7f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 23 00:00:00 2024 GMT
Not After : May 28 23:59:59 2024 GMT
Subject: serialNumber=43f1de78562cde3b91e6fc0ee3325e84181ef861bd086f9a979fd3c8e5f46a98, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:27:59:72:6d:00:a3:43:59:04:7b:49:b7:
44:e2:82:ea:74:f6:7d:08:ac:fc:81:86:76:1e:20:
b3:d8:3b:cc:94:16:56:50:bf:9c:20:1d:12:1d:71:
ef:6e:c3:b2:a8:5d:c8:cb:9d:8b:ae:ff:ca:6c:8b:
fa:f7:0a:db:ab:1b:0e:44:ac:bf:a9:c7:d9:43:2a:
e9:cc:40:a8:4a:2d:a0:6d:e4:1e:b3:2e:b0:e9:49:
6f:48:1b:2b:50:7c:7a:c5:44:4f:82:58:5a:16:7a:
2a:87:e2:ff:7a:91:0b:10:b5:69:a0:93:1a:a1:3e:
82:5e:c0:0b:0e:60:07:c7:dd:93:eb:12:cf:2a:6d:
e7:e0:41:70:fc:9f:13:18:9f:06:98:aa:ff:9b:37:
36:4f:cd:03:f3:95:1e:4e:0e:e2:ac:98:5a:f4:20:
19:dd:0f:7b:fe:8e:98:70:30:98:af:bb:d5:fd:3b:
2a:b9:c6:29:f5:fc:17:08:2b:e3:bf:2e:57:fc:2b:
7f:83:8e:21:13:0a:75:ed:db:b4:63:16:41:4b:e1:
c2:96:06:44:2b:bf:87:db:a2:39:9e:46:53:1d:8b:
e9:42:30:0b:c9:d0:6e:be:18:75:59:0f:b1:d8:93:
0f:80:b1:df:c0:4e:e3:0e:35:9a:f5:47:aa:a3:69:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:50:E6:22:2F:F3:AA:FF:78:2A:8E:23:CD:57:B6:CC:54:E5:ED
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9ce0383-18b8-447e-83fd-284827aa20cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:01:03:a0:ca:bd:b4:80:54:39:c6:cc:e4:c7:8e:15:9d:2a:
32:dd:d9:5b:12:52:a2:ed:3a:f3:ca:cd:0b:e7:ba:af:58:a4:
4d:1b:de:a5:2e:cf:96:9e:8b:30:cb:45:cd:c9:dd:7e:b7:96:
5a:be:db:49:2f:c9:38:54:55:4d:33:6f:f9:f2:01:10:67:78:
f3:4f:81:36:a5:1f:ad:78:3d:2c:9d:e0:73:8b:91:3b:1a:f2:
df:07:31:eb:8f:94:04:27:11:6e:e1:fd:af:27:5b:ad:cd:4a:
23:d3:20:ce:a5:73:2a:d0:2e:94:1e:26:6b:32:6e:5c:e9:27:
50:89:f3:98:9e:d2:25:16:65:a8:52:47:e3:65:22:cc:ba:75:
e2:f6:da:26:20:69:94:9d:e3:39:39:0e:73:cc:a5:ec:36:0b:
95:d5:d4:3b:ae:52:a3:2f:a6:e9:cb:1a:bc:45:56:64:51:fe:
9e:2b:51:c5:98:a7:9b:c5:dc:a6:4e:1a:b5:a8:cb:9f:29:19:
21:df:19:2c:4c:49:83:83:df:c0:6c:fd:dd:19:fe:3f:25:e2:
7a:fd:a5:1a:22:c1:dc:c2:e4:0e:66:3b:1d:46:d0:c3:8b:ef:
3c:06:d9:f1:1b:c6:36:6e:b7:75:74:b1:ce:c9:fa:62:37:46:
6d:19:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:32 2024 by rpki-client on console-fra.rpki-client.org