Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6b35020-2615-41db-b75f-38aa81de54cf.roa
File: e6b35020-2615-41db-b75f-38aa81de54cf.roa (raw, json)
Hash identifier: y/sFzkWamsU2VUGNujSUA69Io5IWSj7Up55YepKR3Ck=
Subject key identifier: F3:11:A6:66:EA:8E:06:CE:19:A6:F3:3E:08:8E:3F:AA:0D:3B:EE:31
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6BD05CF7083E6C5AF18E0C16D7B6A7AD94AC24A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6b35020-2615-41db-b75f-38aa81de54cf.roa
Signing time: Fri 06 Sep 2024 00:00:00 +0000
ROA not before: Fri 06 Sep 2024 00:00:00 +0000
ROA not after: Fri 11 Oct 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d074:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Sep 2024 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d0:5c:f7:08:3e:6c:5a:f1:8e:0c:16:d7:b6:a7:ad:94:ac:24:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 6 00:00:00 2024 GMT
Not After : Oct 11 23:59:59 2024 GMT
Subject: serialNumber=c64e49cfd9920d194b80e4a6e720bd0485de8ab4e45a8acfce4c655189620643, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:8e:3c:36:f2:aa:aa:09:53:78:a4:9f:7b:
99:0f:2c:05:18:23:ad:ed:63:fc:90:16:1c:59:34:
3a:1e:d1:04:1b:8f:e6:a1:1e:d1:a7:f7:a7:64:41:
5b:2f:74:4a:97:ec:bd:e9:2c:ec:e1:48:3c:3d:3e:
6d:99:12:39:e1:c6:b6:61:08:8a:d9:9e:78:51:16:
16:39:bf:ae:25:bb:b7:84:7b:1d:61:68:39:75:94:
e9:fe:7e:f5:58:38:85:ed:f1:77:b5:b8:ff:23:7e:
06:60:c6:b1:fc:a5:6d:1c:51:f7:a0:4b:15:7d:98:
4b:7b:83:a3:25:2b:2e:7f:44:46:b0:4c:fe:86:55:
33:0f:94:a3:bc:21:0e:53:f0:20:3d:62:4d:d3:32:
d9:b6:3f:1a:af:bd:c9:b1:c7:6e:05:77:79:c4:57:
c2:e4:8e:bb:a9:43:77:c4:df:15:52:16:cd:fb:5a:
5d:7f:02:89:4d:3c:37:4e:c1:ff:26:65:ba:81:f0:
3b:ef:db:46:3e:90:cd:1c:a4:c7:94:dd:8c:c9:1d:
d5:01:11:c5:7b:5a:72:a8:c4:eb:27:14:46:0c:43:
7d:a6:46:25:b9:0c:1a:51:77:f8:8f:6d:f7:74:ac:
a6:56:ac:6b:26:ec:fc:a0:c1:95:7b:06:36:f8:31:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:A6:66:EA:8E:06:CE:19:A6:F3:3E:08:8E:3F:AA:0D:3B:EE:31
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e6b35020-2615-41db-b75f-38aa81de54cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d074:c000::/40
Signature Algorithm: sha256WithRSAEncryption
69:f8:86:8f:8b:0a:0a:45:23:34:38:e4:e0:79:d4:c7:fb:31:
45:80:83:0f:61:3a:1e:57:b5:41:68:e9:b3:49:c3:d3:29:e9:
de:a8:e5:53:55:b5:71:f8:39:56:48:e1:79:77:46:c3:dc:07:
a9:f6:c1:25:69:8f:03:ed:a3:55:9e:9b:2e:4a:bc:e4:b2:84:
35:4d:ef:92:ca:a4:9d:cb:fc:73:8c:de:0d:71:a9:f3:6f:ff:
ac:9d:5f:34:e7:6e:69:ee:7d:c8:19:f3:df:55:67:74:56:9c:
00:92:6a:4b:1f:75:ee:53:df:ce:a3:43:c6:86:cb:76:a0:05:
ae:41:63:2e:81:1e:5d:0f:c9:e6:d5:49:42:98:a7:30:e4:37:
62:53:42:b1:45:e3:5c:87:14:a0:c9:12:1a:ce:61:6c:e9:1e:
30:66:80:c6:ed:bb:b9:1f:64:35:6e:d7:4e:23:31:49:65:67:
36:93:92:e1:76:ba:bc:95:cf:d3:20:97:2d:74:48:2a:4c:00:
b8:b7:22:59:47:16:03:fc:6e:fb:45:0c:1c:f9:8d:97:5f:6f:
d6:4d:01:50:26:7b:64:51:d2:4b:0b:ae:e3:6b:12:dc:35:d5:
9a:fa:30:e4:db:4a:7f:d8:9c:da:83:90:e3:28:d7:b7:0d:3a:
76:2f:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 01:39:50 2024 by rpki-client on console-ams.rpki-client.org