Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9ce0383-18b8-447e-83fd-284827aa20cb.roa
File: c9ce0383-18b8-447e-83fd-284827aa20cb.roa (raw, json)
Hash identifier: RDt/S0HWmR2OWNUi+iG8nkDtL0hD1Kdw0SmBXVr9gq0=
Subject key identifier: 18:C8:A4:05:CA:89:F1:4E:44:A3:F4:D1:0E:58:86:CE:42:57:18:17
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 260EAF939E1CF6FEBC38BE832553527F5C0DE1BF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9ce0383-18b8-447e-83fd-284827aa20cb.roa
Signing time: Sat 09 Sep 2023 00:00:00 +0000
ROA not before: Sat 09 Sep 2023 00:00:00 +0000
ROA not after: Sat 14 Oct 2023 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d000:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Sep 2023 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:0e:af:93:9e:1c:f6:fe:bc:38:be:83:25:53:52:7f:5c:0d:e1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 9 00:00:00 2023 GMT
Not After : Oct 14 23:59:59 2023 GMT
Subject: serialNumber=0089c4ff25ae394dcf60fa342f5aafb25f50ab5a760ae43008595db92dc59ff1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:50:90:02:05:6c:99:ba:6a:80:de:8b:20:
bc:41:be:c4:14:21:80:df:79:6b:6a:42:a6:25:72:
8d:b6:68:9c:68:6c:f9:e0:a0:71:bb:d6:dc:4a:d1:
a4:83:39:54:39:c2:d3:2c:eb:e0:a5:66:d9:f3:28:
25:6f:08:21:f4:80:d5:ec:89:f7:38:85:f5:da:ca:
88:c6:13:6c:34:2b:c3:b7:f4:52:ec:72:d2:1d:eb:
7d:3d:b8:f9:c6:97:ea:db:a7:a5:fb:ff:c5:ca:f8:
9d:ca:98:d7:91:f4:36:c3:33:50:e8:19:ac:06:9f:
36:79:c1:43:3f:a8:cc:b3:3c:ad:09:3e:c1:f6:63:
be:fd:09:12:72:ab:55:f4:be:65:e0:00:27:ab:27:
ab:ae:77:56:35:31:02:ac:3e:49:3a:c7:4e:fe:db:
2d:46:c1:7f:ef:6a:c8:81:9a:84:9f:19:bf:38:a6:
21:db:7d:44:6b:7d:1d:0a:1c:48:31:55:c5:79:52:
a5:98:0d:e2:dd:4e:fe:b9:5e:d1:a2:39:6a:f4:0f:
0d:ee:77:d4:30:d1:c2:d1:d7:c9:0a:26:3c:84:20:
e4:19:72:a2:d2:9c:e1:b0:30:bf:71:b1:47:dd:fd:
f7:30:02:8b:27:90:80:e9:31:5a:43:34:a7:48:09:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:A4:05:CA:89:F1:4E:44:A3:F4:D1:0E:58:86:CE:42:57:18:17
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9ce0383-18b8-447e-83fd-284827aa20cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d000:4000::/40
Signature Algorithm: sha256WithRSAEncryption
a6:94:f4:7f:b2:b0:59:b8:c3:b9:ce:18:04:97:2f:d3:08:b5:
33:86:a8:b0:75:83:b1:c3:83:eb:83:1d:fb:d3:4a:fb:ce:12:
03:2e:30:09:79:b4:24:5f:ed:67:9d:87:44:5d:8d:37:33:31:
ec:2e:f9:8b:7c:48:1a:09:5b:db:a6:9b:f0:80:37:10:f7:71:
20:97:a0:55:f5:a6:6b:8b:ce:56:f4:8c:4f:50:cb:35:e0:fd:
31:f9:75:f3:cf:f4:07:f5:7c:34:14:fd:ec:66:d9:24:30:ab:
f1:c3:9a:e2:69:db:8f:30:f0:aa:9a:ab:c2:a0:9b:c6:2e:74:
a0:00:e9:22:de:16:65:7c:0d:26:86:e6:0a:2c:5a:99:d4:cf:
9b:a4:ab:f8:80:8d:85:9e:be:22:bb:96:9c:39:fa:77:db:79:
d8:5c:eb:3a:1d:af:ce:22:4a:cd:90:da:39:27:6c:b5:a2:3c:
7a:63:a0:b3:4b:55:80:ed:31:4e:09:a0:22:d6:73:4e:2a:a1:
c1:85:ba:34:6a:73:40:d0:b1:3a:af:87:e1:8a:0d:d4:c4:1c:
ae:18:8e:ab:0c:7d:06:bf:44:b1:d5:ca:e7:17:0a:ca:ac:55:
bc:84:04:9d:ee:b3:5f:fc:a2:21:69:33:c3:ef:ce:f2:8c:4d:
93:e8:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 00:26:30 2023 by rpki-client on console-fra.rpki-client.org