Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa62015a-a5e6-4da6-b304-69d543bb9c8a.roa
File: fa62015a-a5e6-4da6-b304-69d543bb9c8a.roa (raw, json)
Hash identifier: /1rE2W1LbCDdWprcr2hCYklig824zMH1/u4g0Bn3sfo=
Subject key identifier: C1:23:7A:91:14:A4:D5:3B:B1:E3:36:8A:45:5D:55:7F:81:ED:70:1A
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1BB051D533CDB7AF15E65DECDEB4C2F457863A77
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa62015a-a5e6-4da6-b304-69d543bb9c8a.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d070:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 18:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b0:51:d5:33:cd:b7:af:15:e6:5d:ec:de:b4:c2:f4:57:86:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=263102c8fa7f5cb18814b97eb3dafe8cf88e6b7180d3ba494982878194288e26, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:e0:c6:ce:2a:e1:e6:5a:54:a6:43:43:74:
d2:a3:46:e8:f5:dc:7c:12:5b:2d:bd:40:96:89:4d:
64:f3:a9:6f:cd:b4:55:e5:d6:02:5f:95:a6:b9:ff:
ba:38:ba:73:ea:c8:56:3e:f0:b6:db:1a:00:4c:c9:
66:8e:6b:cf:ae:bf:39:24:0f:70:d3:04:4e:8c:b8:
69:dc:b2:82:b3:55:a5:8a:f9:e7:db:a2:fe:b6:ec:
ac:af:30:73:ad:ae:cb:88:1c:9b:6e:71:20:58:63:
1e:fe:33:8a:a3:a8:dc:f6:56:a6:0b:54:56:e7:13:
25:f8:64:63:b6:4f:71:b3:68:f6:b7:7b:c6:51:14:
a2:7c:02:89:de:43:e8:76:25:8f:ff:36:d9:d4:87:
b7:7d:cc:6c:0c:f5:83:b3:01:bd:ce:9a:64:68:05:
b3:fc:6b:b5:1c:46:ae:29:10:0c:67:23:8c:98:31:
95:49:3c:50:48:e0:b1:1e:58:23:c2:80:46:5f:3c:
c0:09:af:25:d8:2b:c9:2d:9e:b0:8e:5a:49:89:40:
15:b9:eb:0d:51:71:28:2e:2e:42:dc:8a:93:63:90:
ea:ff:f9:25:7c:e6:0c:a7:44:08:7c:7e:aa:d2:be:
1c:71:4f:12:f9:9f:d5:b3:2a:22:9f:84:71:e5:16:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:7A:91:14:A4:D5:3B:B1:E3:36:8A:45:5D:55:7F:81:ED:70:1A
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa62015a-a5e6-4da6-b304-69d543bb9c8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d070:8000::/40
Signature Algorithm: sha256WithRSAEncryption
13:91:5a:6e:37:fc:48:8b:3d:48:ee:a9:71:38:41:fe:4b:94:
2e:67:ec:87:a0:21:20:4a:5c:97:50:bc:0c:8b:ba:59:88:fa:
bb:f6:62:ea:3c:e2:99:fa:e7:f9:c8:f9:af:ce:33:a4:65:55:
ff:71:d0:0c:15:1d:9b:23:f5:f7:db:e4:03:f5:8c:41:e7:35:
28:4a:33:7e:e0:b3:b1:23:b1:74:d4:7c:cf:e8:5a:72:12:d0:
73:7a:72:92:6b:f6:6a:b9:47:51:97:41:e7:69:9f:12:f5:17:
ff:98:ab:8e:52:fc:fe:3a:f1:97:5b:7c:ec:26:d9:48:f4:15:
c8:e5:86:1b:1c:b3:16:11:27:1a:7c:e7:bc:13:35:c9:b3:fa:
05:92:13:11:85:61:91:9f:15:35:52:8c:e7:3d:5a:60:c2:95:
e8:ae:ba:7d:6e:81:6c:15:0b:04:75:88:ee:a8:10:e4:f7:1e:
4c:6d:b2:5b:26:f2:cb:1a:c8:22:5c:04:d5:4b:30:71:0a:45:
e8:a1:88:92:78:32:97:ba:a1:e7:93:d3:07:2e:d3:9e:9b:be:
90:c7:24:97:61:9f:34:5b:1e:67:18:50:fe:b4:ef:83:6f:b3:
87:61:bb:f5:51:80:31:8f:8e:d5:5a:5e:d1:be:a7:3b:ba:ad:
28:d4:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:44:16 2024 by rpki-client on console-ams.rpki-client.org