Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbb4489e-e204-425d-985d-41d46f882454.roa
File: dbb4489e-e204-425d-985d-41d46f882454.roa (raw, json)
Hash identifier: i/pWhR6FmIvV2AKbkWtJ3KxmDx7jkpreo+ar8sKwAGk=
Subject key identifier: 4B:DF:44:C4:2C:D9:DA:C5:D4:B6:12:09:73:42:71:98:F9:0F:63:FB
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 53B0DBF177FC0B7DCC1B8544453E4190E5FF9468
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbb4489e-e204-425d-985d-41d46f882454.roa
Signing time: Mon 28 Oct 2024 00:00:00 +0000
ROA not before: Mon 28 Oct 2024 00:00:00 +0000
ROA not after: Mon 02 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d038:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b0:db:f1:77:fc:0b:7d:cc:1b:85:44:45:3e:41:90:e5:ff:94:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 28 00:00:00 2024 GMT
Not After : Dec 2 23:59:59 2024 GMT
Subject: serialNumber=fcb2d98710b1c08ef76272d97079116a32062369531c11518147aad644c85fda, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5a:48:88:62:3f:de:57:67:90:84:c0:b1:47:
75:c4:67:d8:bb:63:20:5d:ef:dd:40:e1:21:4a:4f:
2e:9b:a8:07:a4:cf:70:5f:80:73:e3:a1:e9:59:1d:
6a:86:a4:07:d8:84:31:96:2a:d1:3d:43:74:27:1a:
18:6e:40:f1:2c:d5:0b:38:2b:63:c5:26:0f:91:32:
3b:8e:51:3e:84:31:f1:b3:0c:ac:f3:fc:0e:4d:54:
eb:9d:51:fe:79:09:7c:52:a7:36:d4:77:b2:b2:19:
42:fa:01:59:29:34:d2:a3:18:78:f3:87:43:b2:17:
72:08:70:a4:72:bb:1e:8a:4f:b6:3d:79:fa:0b:0a:
ca:da:0f:21:bf:10:ae:8d:43:4f:17:87:de:9b:a8:
17:a9:a2:db:1c:67:cd:34:c0:30:c8:16:63:38:01:
3b:b6:a0:2f:61:19:4b:31:44:2f:40:d1:86:05:ec:
54:5b:bc:89:47:13:af:64:d9:7c:ed:dc:0b:ad:7a:
41:92:de:ab:60:bf:38:e5:93:92:e8:59:e5:11:43:
32:81:81:86:3d:69:ec:98:5c:95:81:78:ff:00:d0:
12:95:9b:25:56:d3:05:3e:59:2f:c4:b8:95:75:ac:
79:69:ea:4b:99:3f:26:d1:a5:6d:91:c6:44:00:f2:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DF:44:C4:2C:D9:DA:C5:D4:B6:12:09:73:42:71:98:F9:0F:63:FB
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbb4489e-e204-425d-985d-41d46f882454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d038:8000::/40
Signature Algorithm: sha256WithRSAEncryption
21:d2:d9:7b:05:08:b6:fb:d2:71:86:d2:34:ba:00:ef:48:5a:
73:c0:91:e4:96:2a:2d:80:a5:2c:de:77:19:e6:8a:20:b6:ad:
c5:bd:98:55:1e:20:f4:e1:d2:ba:98:35:e1:a0:6c:9c:4d:c9:
2e:2e:b9:9b:72:f4:05:42:82:b0:1d:7a:35:60:64:37:57:31:
07:e2:2d:50:1c:e2:c7:e8:b2:92:93:62:fa:3d:c5:78:05:b6:
8f:aa:d0:c5:ea:3f:65:25:ac:9d:80:3f:44:7d:40:76:3b:0f:
ee:12:9a:04:2c:19:b2:d7:9f:41:0a:1d:30:bd:40:47:7a:24:
45:89:7c:d2:12:ab:0e:31:7d:25:7f:43:e6:5b:f9:d0:9f:d2:
61:42:eb:ef:93:60:79:6c:81:a8:6e:7a:79:54:2f:8c:c1:b8:
f1:12:50:5e:0c:5c:54:2c:35:f0:41:48:d7:02:7a:51:2e:95:
58:df:4d:a2:ce:48:a8:6f:8c:cb:4d:49:f5:0c:c3:21:81:4e:
ff:4f:16:65:e1:d9:f0:4b:a0:00:48:fe:6b:7c:2f:fe:60:00:
31:61:88:e8:3c:0c:5d:af:ce:ae:32:fc:08:00:49:b5:52:e5:
fd:5d:a4:cb:cb:2f:76:bf:9f:62:94:a8:65:a1:db:58:e3:ec:
ec:7b:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:33 2024 by rpki-client on console-ams.rpki-client.org