Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
File: dedc9540-e267-4454-a449-e65933af6f0f.roa (raw, json)
Hash identifier: SaBXOEtF8U+pyUrKMgv2ho21K1wN1Bi3g+M/XjMs5yo=
Subject key identifier: D4:72:0C:A1:03:BC:44:2A:2D:EB:5D:57:FD:1F:3E:9D:CA:28:CB:52
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BE579AD14E7F9EE9519DF828AADD71E3A8BF698
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
Signing time: Mon 15 Jul 2024 00:00:00 +0000
ROA not before: Mon 15 Jul 2024 00:00:00 +0000
ROA not after: Mon 19 Aug 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d034:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jul 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e5:79:ad:14:e7:f9:ee:95:19:df:82:8a:ad:d7:1e:3a:8b:f6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 15 00:00:00 2024 GMT
Not After : Aug 19 23:59:59 2024 GMT
Subject: serialNumber=def29e55f858c312b93b9bc23ea4c298b61d33f5cbdd906b0195772ef0c28396, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:6f:b6:80:a4:b8:a7:aa:8b:ec:7e:35:63:
87:84:c3:47:85:ad:d5:22:74:47:60:f3:aa:b3:40:
9c:08:01:f8:69:61:82:af:f3:65:fa:e6:9a:a5:9d:
ba:6c:d3:5b:5d:62:e3:a5:bc:98:35:84:47:f0:ca:
aa:bb:e2:21:ce:b4:18:bc:81:d3:15:4b:f8:35:b8:
d8:2a:7f:62:f4:06:35:94:04:31:92:75:f4:8d:e6:
10:83:cd:0d:ad:bd:13:a1:7f:30:1d:b7:60:98:60:
91:9d:44:15:57:18:6d:57:98:24:bb:c7:ea:e7:09:
d8:07:75:25:8c:c6:3e:2f:31:db:07:a3:12:ea:d2:
62:b6:67:9d:1e:5f:b7:f7:e8:6c:45:2a:8e:aa:f3:
16:08:53:84:27:21:01:e5:60:f9:5a:db:4b:39:29:
31:95:30:49:6a:28:f5:c2:06:53:8a:be:ff:41:36:
40:9c:c4:a1:57:69:00:ed:17:85:81:76:6b:64:b1:
1d:91:0b:4a:dd:2a:79:b8:ee:02:19:74:53:a6:d8:
8b:ec:f4:28:fe:cc:73:2d:6e:7c:7e:fa:75:d0:32:
a2:45:3a:b2:e5:8d:67:17:73:61:30:d1:40:56:5e:
c0:cb:47:1c:dc:1b:04:ba:8b:94:51:dc:a7:db:1a:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:0C:A1:03:BC:44:2A:2D:EB:5D:57:FD:1F:3E:9D:CA:28:CB:52
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dedc9540-e267-4454-a449-e65933af6f0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d034:1000::/40
Signature Algorithm: sha256WithRSAEncryption
5e:53:44:25:1e:3d:0a:4e:c8:74:f1:36:6f:95:e9:39:e8:b4:
16:ee:fc:e0:6b:b5:d5:6e:c5:a0:b7:07:2e:2a:16:aa:60:e5:
0e:53:8f:ce:8d:ff:91:a1:3c:f7:18:0a:c6:44:b4:25:33:f7:
f3:89:a0:d9:00:57:df:a1:7a:5f:52:5b:04:b8:91:7b:93:9e:
1f:64:1a:a9:79:78:39:4d:93:6d:be:24:bc:5f:95:bc:84:35:
31:a8:33:44:61:b4:87:a6:65:a8:93:31:9b:a7:06:25:d4:8b:
a3:36:42:14:e7:b2:ce:05:43:2b:b2:e8:f7:e6:e6:c1:e9:b4:
53:10:8e:c9:2c:f1:1c:80:99:f3:65:c8:a3:a8:3d:10:e5:60:
40:7f:8f:ac:cd:95:81:78:bc:a3:b5:60:c0:dd:05:0e:bd:b6:
d5:d2:3c:79:69:30:aa:01:82:54:65:89:5c:b2:c3:18:fa:50:
32:b5:a6:c3:7b:38:7e:26:0c:6a:3a:a6:fb:47:fc:15:c5:e2:
74:b8:8c:ec:31:ad:ec:7e:52:6d:35:9f:ba:de:b0:ce:ee:df:
44:6d:63:3f:c7:e2:38:60:7e:05:47:90:59:fb:aa:91:4b:3c:
46:e5:5e:04:b9:fb:3c:64:af:74:4a:35:5a:46:a7:ad:48:12:
7f:8b:a0:47
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUG+V5rRTn+e6VGd+Ciq3XHjqL9pgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDA3MTUwMDAwMDBaFw0yNDA4MTkyMzU5NTlaMHoxSTBHBgNV
BAUTQGRlZjI5ZTU1Zjg1OGMzMTJiOTNiOWJjMjNlYTRjMjk4YjYxZDMzZjVjYmRk
OTA2YjAxOTU3NzJlZjBjMjgzOTYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJXeb7aApLinqovsfjVjh4TDR4Wt1SJ0R2DzqrNAnAgB+Glhgq/zZfrmmqWd
umzTW11i46W8mDWER/DKqrviIc60GLyB0xVL+DW42Cp/YvQGNZQEMZJ19I3mEIPN
Da29E6F/MB23YJhgkZ1EFVcYbVeYJLvH6ucJ2Ad1JYzGPi8x2wejEurSYrZnnR5f
t/fobEUqjqrzFghThCchAeVg+VrbSzkpMZUwSWoo9cIGU4q+/0E2QJzEoVdpAO0X
hYF2a2SxHZELSt0qebjuAhl0U6bYi+z0KP7Mcy1ufH76ddAyokU6suWNZxdzYTDR
QFZewMtHHNwbBLqLlFHcp9saEA8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTUcgyh
A7xEKi3rXVf9Hz6dyijLUjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGVkYzk1NDAtZTI2Ny00NDU0LWE0NDktZTY1OTMzYWY2ZjBmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBeU0QlHj0KTsh08TZvlek56LQW7vzga7XVbsWg
twcuKhaqYOUOU4/Ojf+RoTz3GArGRLQlM/fziaDZAFffoXpfUlsEuJF7k54fZBqp
eXg5TZNtviS8X5W8hDUxqDNEYbSHpmWokzGbpwYl1IujNkIU57LOBUMrsuj35ubB
6bRTEI7JLPEcgJnzZcijqD0Q5WBAf4+szZWBeLyjtWDA3QUOvbbV0jx5aTCqAYJU
ZYlcssMY+lAytabDezh+JgxqOqb7R/wVxeJ0uIzsMa3sflJtNZ+63rDO7t9EbWM/
x+I4YH4FR5BZ+6qRSzxG5V4Eufs8ZK90SjVaRqetSBJ/i6BH
-----END CERTIFICATE-----
Generated at Fri Jul 26 17:47:22 2024 by rpki-client on console-fra.rpki-client.org