Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ded87780-8d32-4658-b132-90994e702ed1.roa
File: ded87780-8d32-4658-b132-90994e702ed1.roa (raw, json)
Hash identifier: Zr98wVSQSl2kwiR+CBsQNm1bCcvv9/1sIxJYrrQnUgw=
Subject key identifier: 02:B9:90:89:1F:A7:B1:17:B9:05:11:7F:71:EE:09:68:6F:2C:9C:60
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2E16DB6416946B2B4A01B68AA2203492C5CA70E0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ded87780-8d32-4658-b132-90994e702ed1.roa
Signing time: Fri 22 Nov 2024 00:00:00 +0000
ROA not before: Fri 22 Nov 2024 00:00:00 +0000
ROA not after: Fri 27 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:16:db:64:16:94:6b:2b:4a:01:b6:8a:a2:20:34:92:c5:ca:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 22 00:00:00 2024 GMT
Not After : Dec 27 23:59:59 2024 GMT
Subject: serialNumber=fd9e624418ba019cb2dfe3a705cea7e6d09db590b7f2863616afec57404cb3c9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:42:bd:dd:2c:e1:96:c1:25:d3:dc:16:73:
33:21:3e:6e:4e:57:6a:75:13:0c:19:e8:cb:55:01:
c3:8b:21:3e:0f:13:40:24:d4:4f:58:e4:85:64:37:
cd:94:35:23:85:89:99:6b:9f:55:67:b3:78:a5:d9:
a0:7f:45:b3:f9:69:db:0e:58:c5:4b:28:0d:50:a9:
44:fd:ac:d1:8b:9e:1b:94:32:34:64:4c:8d:6f:df:
5a:cd:c0:69:39:10:3f:bb:da:b7:ea:54:ec:2f:f7:
1a:8e:eb:fc:24:06:95:19:36:4d:ea:5b:0c:6d:a0:
eb:2a:42:50:76:2a:2b:33:13:d7:55:91:f4:4f:bc:
10:74:70:66:b6:50:50:09:9e:91:cf:11:71:36:2b:
c2:e8:a0:2d:8d:d4:b8:e0:8f:7f:9d:db:42:3a:c8:
0a:24:f4:c0:61:e3:81:a0:97:aa:b9:d4:6c:fb:e4:
3b:76:47:a2:41:d9:f6:39:a1:f0:94:c7:bc:86:1c:
7f:3d:c8:9c:13:5e:d6:6c:e2:9a:32:8f:24:44:79:
c7:be:8c:ac:02:00:82:1e:d1:4d:10:13:06:be:1a:
88:41:78:e7:9c:81:5d:b3:d2:6e:68:ca:a4:89:5a:
6b:9a:7e:ae:53:2e:1e:7f:45:c5:6c:1c:97:ce:3a:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B9:90:89:1F:A7:B1:17:B9:05:11:7F:71:EE:09:68:6F:2C:9C:60
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ded87780-8d32-4658-b132-90994e702ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036:e000::/40
Signature Algorithm: sha256WithRSAEncryption
10:d6:4a:48:ba:d4:ee:84:9e:ab:64:52:01:f8:3f:07:29:be:
5b:b5:c0:ed:e7:ca:83:1e:42:ca:8a:cd:f0:4e:e1:30:d6:1d:
12:46:27:71:28:84:cb:53:d8:98:46:d0:0e:e7:dd:f5:c1:48:
76:09:c7:44:2a:1b:5f:43:eb:53:b0:a3:7f:2b:c5:d0:eb:cc:
51:13:59:6b:ea:f5:66:b6:f4:74:7f:27:38:16:9f:7c:d8:0a:
ce:eb:d9:0f:70:0b:48:63:b1:10:a1:ab:b1:bc:83:75:02:d0:
70:e1:7e:79:58:73:f8:a4:14:7e:1f:9d:1f:c5:2e:b5:11:6f:
9d:44:88:26:0c:bb:8b:a0:66:b9:dd:b4:42:fd:56:74:09:e4:
04:8d:24:8f:ed:2b:8d:da:ee:81:01:5d:6b:62:c1:ec:86:60:
73:1f:07:95:69:1a:5b:b0:72:4e:f1:d0:9d:2f:8f:36:8d:3e:
18:66:c3:f1:77:97:c2:85:00:20:77:94:9a:b7:b3:54:8f:4d:
69:09:3f:e0:a6:24:b6:b6:28:12:d4:42:19:48:39:8d:cc:e9:
fd:e9:b0:b7:d2:1e:6c:64:a8:d7:70:4c:72:0e:e1:9d:02:e8:
58:f4:66:21:fc:09:b2:c8:73:40:a9:0a:c2:43:97:d1:15:7f:
5a:cc:bf:4f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULhbbZBaUaytKAbaKoiA0ksXKcOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDExMjIwMDAwMDBaFw0yNDEyMjcyMzU5NTlaMHoxSTBHBgNV
BAUTQGZkOWU2MjQ0MThiYTAxOWNiMmRmZTNhNzA1Y2VhN2U2ZDA5ZGI1OTBiN2Yy
ODYzNjE2YWZlYzU3NDA0Y2IzYzkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3EQr3dLOGWwSXT3BZzMyE+bk5XanUTDBnoy1UBw4shPg8TQCTUT1jkhWQ3
zZQ1I4WJmWufVWezeKXZoH9Fs/lp2w5YxUsoDVCpRP2s0YueG5QyNGRMjW/fWs3A
aTkQP7vat+pU7C/3Go7r/CQGlRk2TepbDG2g6ypCUHYqKzMT11WR9E+8EHRwZrZQ
UAmekc8RcTYrwuigLY3UuOCPf53bQjrICiT0wGHjgaCXqrnUbPvkO3ZHokHZ9jmh
8JTHvIYcfz3InBNe1mzimjKPJER5x76MrAIAgh7RTRATBr4aiEF455yBXbPSbmjK
pIlaa5p+rlMuHn9FxWwcl8463dECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQCuZCJ
H6exF7kFEX9x7globyycYDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGVkODc3ODAtOGQzMi00NjU4LWIxMzItOTA5OTRlNzAyZWQxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dbg
MA0GCSqGSIb3DQEBCwUAA4IBAQAQ1kpIutTuhJ6rZFIB+D8HKb5btcDt58qDHkLK
is3wTuEw1h0SRidxKITLU9iYRtAO5931wUh2CcdEKhtfQ+tTsKN/K8XQ68xRE1lr
6vVmtvR0fyc4Fp982ArO69kPcAtIY7EQoauxvIN1AtBw4X55WHP4pBR+H50fxS61
EW+dRIgmDLuLoGa53bRC/VZ0CeQEjSSP7SuN2u6BAV1rYsHshmBzHweVaRpbsHJO
8dCdL482jT4YZsPxd5fChQAgd5Sat7NUj01pCT/gpiS2tigS1EIZSDmNzOn96bC3
0h5sZKjXcExyDuGdAuhY9GYh/AmyyHNAqQrCQ5fRFX9azL9P
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:41 2024 by rpki-client on console-fra.rpki-client.org