Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ccce899e-b2d3-4749-b479-a9cbcc58923f.roa
File: ccce899e-b2d3-4749-b479-a9cbcc58923f.roa (raw, json)
Hash identifier: 9UoHgmt1jtOBCbsWYEZZzb48jwWB7+xe4fWMRB+KrDg=
Subject key identifier: D6:18:D4:FD:42:2C:41:E1:63:95:EE:86:8D:95:F6:05:C2:5C:09:9C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 695C4DE97200EF35FD7DC7A70A73FA33863BFBE5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ccce899e-b2d3-4749-b479-a9cbcc58923f.roa
Signing time: Tue 03 Sep 2024 00:00:00 +0000
ROA not before: Tue 03 Sep 2024 00:00:00 +0000
ROA not after: Tue 08 Oct 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d031:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5c:4d:e9:72:00:ef:35:fd:7d:c7:a7:0a:73:fa:33:86:3b:fb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 3 00:00:00 2024 GMT
Not After : Oct 8 23:59:59 2024 GMT
Subject: serialNumber=3df13ef39c85c53c63b9f5d8f88d5bc19b27177f96f11eb8d04856714b7113ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:f7:58:74:d6:11:60:19:7f:f3:ce:bc:ec:
59:c1:2e:d1:4e:c6:95:a3:8d:2d:12:90:36:43:a4:
6e:ac:25:47:63:5c:07:3c:16:a0:1b:31:fd:aa:75:
70:87:ef:b8:8f:52:c1:15:d1:39:2d:f7:9b:c1:63:
85:b3:0c:d4:75:7d:1c:0e:96:bb:7e:03:f1:34:57:
70:1f:d7:13:bf:28:c0:d0:4b:23:1f:f0:5a:56:7e:
5d:02:56:3c:09:eb:ed:5e:21:6f:51:50:b0:ee:bf:
7d:ae:11:bc:ee:17:fe:8c:5d:00:7c:11:8a:77:cf:
01:16:2a:fb:e0:92:75:49:67:85:7f:c2:7a:93:0d:
79:cf:4f:0a:64:02:5f:16:f8:99:b3:bb:5c:a2:3b:
5b:a2:e8:6f:fd:a6:81:f4:74:87:76:aa:1b:91:11:
79:63:0f:60:e2:09:21:8e:60:c4:9f:94:4a:81:cd:
80:38:3e:d9:04:61:d2:09:2e:1e:5a:6c:da:e2:f5:
a4:09:af:70:a6:10:24:cb:08:a6:24:ea:86:2e:0e:
33:b7:94:c7:7c:8c:c9:31:d1:40:c6:9f:6b:25:12:
3c:26:cb:ca:61:16:6e:ad:12:57:e2:c6:9a:9d:9a:
1e:b6:33:ac:03:07:4a:38:61:b6:63:36:12:4b:53:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:D4:FD:42:2C:41:E1:63:95:EE:86:8D:95:F6:05:C2:5C:09:9C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ccce899e-b2d3-4749-b479-a9cbcc58923f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d031:4000::/40
Signature Algorithm: sha256WithRSAEncryption
57:24:18:0a:10:10:0c:ea:e3:a8:33:89:be:04:58:e1:5f:e6:
bd:1d:15:f1:31:61:af:8f:5d:c2:36:38:d1:d9:97:57:ba:e1:
c4:98:16:7a:32:e5:d2:44:7a:00:78:90:05:80:9a:67:16:44:
f8:53:60:9e:45:fc:7e:c9:b8:78:e2:a9:c5:cd:8d:e1:77:9d:
ea:d7:2c:af:84:f6:50:5d:a7:1d:d5:b1:67:1e:95:27:1c:90:
55:82:22:36:32:ef:6d:49:2d:7a:38:92:0d:4e:0a:98:a4:21:
b1:c3:26:68:a6:1c:a8:49:6a:36:76:ad:f9:1f:e2:6a:9e:c5:
a3:ec:ca:f8:62:7b:bf:59:8f:19:c5:c4:b4:e7:1f:c9:97:c0:
ea:68:b5:55:11:d5:b4:23:d0:e2:cf:a0:0c:11:1c:a3:d4:0c:
46:27:57:46:d0:5a:a2:1b:2e:74:50:9b:69:53:22:5f:c1:f3:
12:6b:ad:c0:cd:05:84:64:34:75:56:54:37:ce:f3:7f:f4:85:
fe:2e:ad:1e:0e:ea:53:94:6b:d6:46:ff:1a:ff:18:fe:82:ab:
fe:f6:62:7b:ee:4e:18:6a:53:97:65:c0:aa:f5:c1:6b:f0:4f:
b1:aa:18:5e:bb:8a:db:39:c0:3d:a5:b7:ce:a9:36:94:21:60:
c6:20:52:a3
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUaVxN6XIA7zX9fcenCnP6M4Y7++UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDA5MDMwMDAwMDBaFw0yNDEwMDgyMzU5NTlaMHoxSTBHBgNV
BAUTQDNkZjEzZWYzOWM4NWM1M2M2M2I5ZjVkOGY4OGQ1YmMxOWIyNzE3N2Y5NmYx
MWViOGQwNDg1NjcxNGI3MTEzYWMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALr691h01hFgGX/zzrzsWcEu0U7GlaONLRKQNkOkbqwlR2NcBzwWoBsx/ap1
cIfvuI9SwRXROS33m8FjhbMM1HV9HA6Wu34D8TRXcB/XE78owNBLIx/wWlZ+XQJW
PAnr7V4hb1FQsO6/fa4RvO4X/oxdAHwRinfPARYq++CSdUlnhX/CepMNec9PCmQC
Xxb4mbO7XKI7W6Lob/2mgfR0h3aqG5EReWMPYOIJIY5gxJ+USoHNgDg+2QRh0gku
Hlps2uL1pAmvcKYQJMsIpiTqhi4OM7eUx3yMyTHRQMafayUSPCbLymEWbq0SV+LG
mp2aHrYzrAMHSjhhtmM2EktTFF0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTWGNT9
QixB4WOV7oaNlfYFwlwJnDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2NjZTg5OWUtYjJkMy00NzQ5LWI0NzktYTljYmNjNTg5MjNmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DFA
MA0GCSqGSIb3DQEBCwUAA4IBAQBXJBgKEBAM6uOoM4m+BFjhX+a9HRXxMWGvj13C
NjjR2ZdXuuHEmBZ6MuXSRHoAeJAFgJpnFkT4U2CeRfx+ybh44qnFzY3hd53q1yyv
hPZQXacd1bFnHpUnHJBVgiI2Mu9tSS16OJINTgqYpCGxwyZophyoSWo2dq35H+Jq
nsWj7Mr4Ynu/WY8ZxcS05x/Jl8DqaLVVEdW0I9Diz6AMERyj1AxGJ1dG0FqiGy50
UJtpUyJfwfMSa63AzQWEZDR1VlQ3zvN/9IX+Lq0eDupTlGvWRv8a/xj+gqv+9mJ7
7k4YalOXZcCq9cFr8E+xqhheu4rbOcA9pbfOqTaUIWDGIFKj
-----END CERTIFICATE-----
Generated at Sat Sep 14 17:31:10 2024 by rpki-client on console-fra.rpki-client.org