Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d0fec325-7c8e-4af1-bf98-70b567f223e8.roa
File: d0fec325-7c8e-4af1-bf98-70b567f223e8.roa (raw, json)
Hash identifier: JmiUYAUhFpiH6VAoKVW08KdyCzcfeLzcQAjhrHYgS0Y=
Subject key identifier: C4:00:62:49:91:20:7D:D4:6C:65:48:12:C8:A8:EE:75:A8:5B:2E:99
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3D10A5C186641FAD9F287004ABFFAA13D9E8E7DC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d0fec325-7c8e-4af1-bf98-70b567f223e8.roa
Signing time: Mon 28 Oct 2024 00:00:00 +0000
ROA not before: Mon 28 Oct 2024 00:00:00 +0000
ROA not after: Mon 02 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d040:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:10:a5:c1:86:64:1f:ad:9f:28:70:04:ab:ff:aa:13:d9:e8:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 28 00:00:00 2024 GMT
Not After : Dec 2 23:59:59 2024 GMT
Subject: serialNumber=05ab09bb3349a03a8e9cfd2ab6c9160c7aeba88c3af0c6876e6c9252257b3952, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:a3:ed:50:32:30:05:12:99:98:6a:9b:0f:
86:66:97:5b:17:a8:66:9f:fe:91:ef:10:06:03:48:
65:82:3f:07:57:37:2b:7f:07:be:65:fb:c1:0a:5b:
07:fa:a0:89:da:fc:4e:00:c6:49:af:8f:81:c6:c0:
c5:ed:53:c8:7d:f1:29:27:68:aa:17:10:a6:92:31:
10:7a:cd:62:ef:cb:49:9d:a2:4f:22:cb:c4:57:3d:
35:3c:91:37:b3:e9:09:69:31:8b:32:83:eb:41:df:
0a:22:3f:f7:e9:63:f8:88:82:ff:5e:93:7f:16:94:
35:9d:bb:ca:18:f9:3a:d5:a8:f6:b1:ec:38:75:a7:
62:a4:a8:09:d0:a0:16:cb:b8:32:69:82:57:58:32:
71:81:49:95:62:7c:c7:0c:99:a9:aa:7d:c6:a4:f7:
44:4d:d5:2a:2a:ae:32:d9:33:8c:67:74:90:a5:c0:
10:e4:33:af:1e:32:f3:0e:22:26:80:6d:a2:45:30:
a7:91:34:d7:d7:09:e1:1a:d8:18:cf:47:41:fe:93:
5b:5e:c4:87:01:22:33:17:60:a4:2e:84:15:71:06:
bc:86:b9:cf:ba:a7:53:55:9e:44:8a:aa:5b:ea:d3:
83:ea:a2:e6:55:77:9d:69:90:85:18:ee:21:c3:58:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:00:62:49:91:20:7D:D4:6C:65:48:12:C8:A8:EE:75:A8:5B:2E:99
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d0fec325-7c8e-4af1-bf98-70b567f223e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d040:8000::/40
Signature Algorithm: sha256WithRSAEncryption
73:42:a9:35:96:36:d5:ce:da:73:0e:6a:e9:4c:ef:6a:40:3c:
11:bf:3e:7f:6c:86:74:d7:3c:84:aa:7f:2b:c1:a9:8b:82:e6:
ad:ef:d2:56:34:77:4c:cf:24:a8:ed:99:24:e3:b9:30:3b:4f:
13:9c:50:56:60:62:e1:e5:7e:f5:3f:65:b8:d2:8e:e5:68:bb:
71:cd:c8:59:62:29:2f:df:2e:87:40:d9:5a:d9:3e:8f:4a:23:
b2:0f:35:3e:b1:3d:9e:28:70:fe:4c:b2:38:4f:f7:f2:f2:83:
4e:51:fc:5f:1a:04:42:bd:c4:8e:0f:86:b0:41:8a:97:19:fb:
f6:36:e7:64:d8:4a:74:76:19:db:22:8e:46:94:d8:23:f9:07:
0a:96:bc:44:2b:0e:f6:67:9e:c8:eb:4a:ac:fb:af:6c:47:96:
10:df:74:be:7a:65:a1:9f:fc:a6:3d:ca:dd:fe:37:04:e6:1f:
76:eb:49:17:d5:b7:27:cf:8b:3f:26:dd:94:ab:f5:f5:3a:be:
3d:15:98:30:92:2c:51:6e:57:51:96:5b:e9:5c:de:b8:b3:32:
cb:a3:e5:b5:c0:13:8e:43:46:61:5d:1b:b0:30:f3:c2:52:be:
cf:d9:3a:91:7d:db:05:d9:00:04:eb:62:16:6a:25:7b:3c:63:
ca:ec:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:33 2024 by rpki-client on console-fra.rpki-client.org