Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f44e2851-6844-4150-9985-f362e9ff240c.roa
File: f44e2851-6844-4150-9985-f362e9ff240c.roa (raw, json)
Hash identifier: N+G5lgd577gGi5MAuj3ErLJTFne3KeN5pMF9p4eCKVk=
Subject key identifier: BD:E7:F4:DA:9E:4B:6A:56:09:05:90:89:D6:DA:43:80:B5:BE:D2:BA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1EEDD2ABC856826FF8DE175C2EABB14B91EF6A7B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f44e2851-6844-4150-9985-f362e9ff240c.roa
Signing time: Mon 11 Nov 2024 00:00:00 +0000
ROA not before: Mon 11 Nov 2024 00:00:00 +0000
ROA not after: Mon 16 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d032:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ed:d2:ab:c8:56:82:6f:f8:de:17:5c:2e:ab:b1:4b:91:ef:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 11 00:00:00 2024 GMT
Not After : Dec 16 23:59:59 2024 GMT
Subject: serialNumber=d56268fde0be5a193e3924928228ef8da4378cf429dd2f52ff4431739e8089c4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:d0:b3:af:a1:c1:85:bf:7b:b7:42:c2:25:
32:99:e3:87:e6:92:c1:1d:0f:e0:19:0d:5e:3f:bc:
70:71:49:bf:14:cd:4d:11:46:28:50:99:37:4b:d2:
68:48:3a:7c:25:95:5c:5e:12:70:2b:f3:3f:c5:4a:
de:ab:bb:5f:d5:19:65:3a:ec:c2:8b:b4:f9:f1:59:
2b:04:14:44:ea:3a:9d:55:76:de:20:46:21:60:f5:
f9:52:6a:c0:61:b9:03:96:e2:e9:55:79:34:ed:eb:
32:24:04:44:22:e2:28:a8:a8:aa:51:f4:15:fe:65:
06:3b:70:37:87:53:ea:b8:2f:d3:fd:e8:00:fd:0d:
60:e1:b1:15:ef:29:20:fd:79:29:2d:89:ec:6b:48:
41:8a:98:c3:10:39:4c:fd:90:71:8e:7e:9d:0b:77:
a1:72:e6:be:8d:e0:fe:ab:1f:37:24:6c:d4:e2:a3:
94:04:0c:06:42:ad:9f:ad:0d:80:b0:1e:bf:af:77:
11:03:01:ef:a3:b1:a0:6a:72:f8:13:45:3b:f1:82:
d5:05:95:56:4c:5d:87:64:8f:64:17:4c:82:aa:ba:
e4:38:9a:fa:22:0c:c4:55:c0:8a:a4:26:54:dc:26:
51:5a:cf:1c:f8:00:41:cd:8c:e3:24:41:b7:13:fb:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E7:F4:DA:9E:4B:6A:56:09:05:90:89:D6:DA:43:80:B5:BE:D2:BA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f44e2851-6844-4150-9985-f362e9ff240c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d032:6000::/40
Signature Algorithm: sha256WithRSAEncryption
17:1d:be:4b:94:d0:ad:90:02:88:cb:f6:37:74:97:6c:2a:fc:
51:8c:d6:02:98:51:d5:b5:c6:3e:14:c1:b3:e5:ba:c2:a7:b3:
c3:14:fa:1d:15:2b:a5:99:b5:9e:0e:11:43:ad:7e:86:69:ff:
ea:96:ff:8b:43:9c:63:fc:0b:6a:fe:af:5a:6b:b6:5b:7d:8f:
c3:b4:a2:ee:85:2e:b9:b2:f7:da:ce:8a:91:b9:51:03:3e:da:
68:46:1b:77:79:ed:98:f4:b5:04:bc:05:2b:53:ff:bf:f0:17:
f1:5c:2f:e0:0a:76:f1:49:8c:21:e5:18:b1:97:2c:2b:79:cf:
c3:28:1f:04:fa:49:3d:dd:01:0b:13:c3:67:b3:f8:73:52:8c:
70:c2:5e:cf:ae:fb:95:6c:f0:d1:91:bf:d2:85:46:9f:ca:40:
19:7f:2c:03:07:6e:ff:0a:40:30:19:5c:85:92:57:76:05:2e:
76:3a:c4:c8:d7:6c:f3:8f:45:a5:b2:d3:d0:13:c5:93:90:d3:
08:2e:e4:d9:35:49:e1:7b:73:67:fc:1d:9f:22:f5:cb:46:01:
c3:33:fc:e7:47:84:27:49:b2:8d:a6:18:69:2e:90:90:49:d6:
b5:b1:fe:7f:eb:cc:cd:2c:d1:08:7b:e4:fb:8a:ed:e5:29:25:
f4:17:7d:c6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUHu3Sq8hWgm/43hdcLquxS5HvanswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDExMTEwMDAwMDBaFw0yNDEyMTYyMzU5NTlaMHoxSTBHBgNV
BAUTQGQ1NjI2OGZkZTBiZTVhMTkzZTM5MjQ5MjgyMjhlZjhkYTQzNzhjZjQyOWRk
MmY1MmZmNDQzMTczOWU4MDg5YzQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKKM0LOvocGFv3u3QsIlMpnjh+aSwR0P4BkNXj+8cHFJvxTNTRFGKFCZN0vS
aEg6fCWVXF4ScCvzP8VK3qu7X9UZZTrswou0+fFZKwQUROo6nVV23iBGIWD1+VJq
wGG5A5bi6VV5NO3rMiQERCLiKKioqlH0Ff5lBjtwN4dT6rgv0/3oAP0NYOGxFe8p
IP15KS2J7GtIQYqYwxA5TP2QcY5+nQt3oXLmvo3g/qsfNyRs1OKjlAQMBkKtn60N
gLAev693EQMB76OxoGpy+BNFO/GC1QWVVkxdh2SPZBdMgqq65Dia+iIMxFXAiqQm
VNwmUVrPHPgAQc2M4yRBtxP7H5kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS95/Ta
nktqVgkFkInW2kOAtb7SujAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjQ0ZTI4NTEtNjg0NC00MTUwLTk5ODUtZjM2MmU5ZmYyNDBjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DJg
MA0GCSqGSIb3DQEBCwUAA4IBAQAXHb5LlNCtkAKIy/Y3dJdsKvxRjNYCmFHVtcY+
FMGz5brCp7PDFPodFSulmbWeDhFDrX6Gaf/qlv+LQ5xj/Atq/q9aa7ZbfY/DtKLu
hS65svfazoqRuVEDPtpoRht3ee2Y9LUEvAUrU/+/8BfxXC/gCnbxSYwh5Rixlywr
ec/DKB8E+kk93QELE8Nns/hzUoxwwl7PrvuVbPDRkb/ShUafykAZfywDB27/CkAw
GVyFkld2BS52OsTI12zzj0WlstPQE8WTkNMILuTZNUnhe3Nn/B2fIvXLRgHDM/zn
R4QnSbKNphhpLpCQSda1sf5/68zNLNEIe+T7iu3lKSX0F33G
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:33 2024 by rpki-client on console-fra.rpki-client.org