Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcea9873-8a30-48f9-9cf3-50c2726833ff.roa
File: fcea9873-8a30-48f9-9cf3-50c2726833ff.roa (raw, json)
Hash identifier: XOxlSyYpStqOV3dMWDsJ0A0AFFYi0+GSoumWSxfriVQ=
Subject key identifier: FF:86:EA:12:39:71:67:32:EA:C9:39:EC:53:D9:BF:9E:4F:1B:D6:F5
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 020C60059662364CDE5BA96D5A1C8BAA16A60704
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcea9873-8a30-48f9-9cf3-50c2726833ff.roa
Signing time: Mon 18 Nov 2024 00:00:00 +0000
ROA not before: Mon 18 Nov 2024 00:00:00 +0000
ROA not after: Mon 23 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0c:60:05:96:62:36:4c:de:5b:a9:6d:5a:1c:8b:aa:16:a6:07:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 18 00:00:00 2024 GMT
Not After : Dec 23 23:59:59 2024 GMT
Subject: serialNumber=69d2916b272521e2f6c4b8781ab6a2fab444285cbb71ee2130f15f0228d910e3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:9a:f5:5e:58:86:6a:fe:cb:69:dd:26:29:
1a:1f:d6:5d:cb:83:26:a3:b9:ee:c1:83:1d:9d:37:
80:ff:fe:ca:16:85:cc:f5:25:20:64:3b:f2:64:c9:
cb:c3:d9:07:86:14:58:56:a1:cb:bd:b6:d0:83:91:
0b:88:1f:c9:b0:a1:04:32:07:3a:c4:d4:5a:8a:b6:
a0:5d:49:15:4a:9e:51:ee:cc:76:49:11:6b:38:3a:
6a:9e:a0:e2:08:e5:4f:a0:d8:b8:d3:0b:cd:3e:b8:
8a:18:bf:11:20:d9:7e:63:a5:2a:51:56:a8:98:ee:
01:44:40:f1:af:72:09:08:0a:ce:41:d0:f0:2d:6c:
75:13:fd:79:0e:d6:78:3a:df:3f:b3:21:a7:35:25:
76:1f:5d:bc:c5:81:90:bf:1f:ec:b5:32:0d:70:c0:
b8:fb:59:d6:0a:6e:8b:d3:77:ac:bb:5b:62:4c:e3:
c3:41:5d:43:75:a4:32:41:22:62:28:5c:65:59:2d:
1f:9f:bf:c0:37:75:88:36:7b:f8:d9:55:0b:5e:96:
fc:b9:4b:a5:26:e6:00:e6:c7:49:77:4c:d3:fd:2c:
f2:7a:22:1f:20:28:b1:69:74:6a:29:5b:42:f4:4a:
1f:d5:26:ab:3f:24:2f:fe:57:08:e8:8f:8b:b8:6f:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:EA:12:39:71:67:32:EA:C9:39:EC:53:D9:BF:9E:4F:1B:D6:F5
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcea9873-8a30-48f9-9cf3-50c2726833ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:e000::/40
Signature Algorithm: sha256WithRSAEncryption
06:84:fd:7d:da:65:a8:86:ae:e5:b7:1d:57:8f:bc:69:1a:d1:
78:02:4b:5b:37:a5:c9:96:02:e1:99:ad:a1:92:c5:30:26:cb:
87:0b:48:0c:9e:d6:1c:00:23:e1:db:f0:63:5d:7f:1a:09:7f:
37:5b:d4:9e:af:bc:c8:4b:ce:b2:00:86:39:f5:0e:ec:75:5a:
dd:20:30:5f:cc:8d:b9:10:34:47:cf:62:45:66:ba:b5:89:0e:
c1:7b:f2:36:33:b4:cc:4f:56:af:a3:1a:6a:a9:7a:09:19:c3:
62:a9:b2:55:ac:96:b3:48:31:c0:f7:7d:c1:ca:97:32:ef:ff:
33:ec:a3:9d:57:9b:9a:dc:d3:d5:88:67:0f:1d:c2:26:9b:20:
3b:5b:51:1b:a3:aa:35:86:cc:0b:78:36:be:81:2c:8b:8a:a3:
53:60:2a:bd:3c:38:89:5d:98:b4:c2:a7:c0:19:d4:07:0b:f8:
5f:1b:3d:da:54:10:1c:ac:0c:18:a9:bc:1b:03:21:78:ef:0f:
be:5b:19:e9:b4:7b:af:27:fd:e9:51:06:65:02:29:4b:c0:43:
37:35:d7:f1:93:b2:ed:ed:67:94:f4:6d:11:e2:e3:09:1a:e7:
86:7e:ca:0e:46:d3:0c:63:68:53:14:2b:18:a7:bf:4f:48:b1:
91:90:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:46 2024 by rpki-client on console-ams.rpki-client.org