Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcea9873-8a30-48f9-9cf3-50c2726833ff.roa
File: fcea9873-8a30-48f9-9cf3-50c2726833ff.roa (raw, json)
Hash identifier: 4sPjoa44MhlvyBMsZj5z6UYAspegnpxD0FjA0mEpEdU=
Subject key identifier: 8A:E9:4D:CE:0C:4A:9E:08:AF:E7:EE:56:16:BE:97:3E:B4:35:CD:5B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 221F8FDA4F74C8F3A984E046DD891478D90D9598
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcea9873-8a30-48f9-9cf3-50c2726833ff.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d077:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 14:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1f:8f:da:4f:74:c8:f3:a9:84:e0:46:dd:89:14:78:d9:0d:95:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=2351d0317b900c70ac871a3344b897401ae39995a4985e9b6d50d341a894d12c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:cd:25:28:70:9c:4e:e3:3c:fd:b0:87:b1:
14:9e:70:2e:51:43:7b:71:9d:d2:f1:c0:98:6a:1f:
83:30:92:11:c3:0c:c9:8a:ec:b2:b3:e8:69:1a:b8:
08:f0:a9:c9:b3:8e:6c:c4:de:19:f2:67:ce:9b:18:
9f:9a:6a:41:2d:90:60:b0:f5:57:78:b6:6e:d4:30:
83:61:7e:c2:1b:c5:ca:cf:d2:c7:f2:6e:f6:86:cb:
75:ea:07:4c:50:b2:f0:2e:d6:dd:26:f6:c8:07:81:
d6:7d:25:77:05:17:4f:cf:84:75:ef:e2:7d:4e:7e:
35:c9:7b:81:61:f6:0b:49:57:58:22:78:7a:ff:53:
6e:74:43:c4:9b:68:b5:e5:57:b1:6c:34:9a:0e:3b:
b4:4d:11:23:b0:d6:98:18:4c:d1:a9:57:90:22:77:
6d:87:ff:a9:b6:94:3e:bf:df:07:40:e5:df:c9:2a:
fe:ff:be:fd:3a:b5:40:6e:4c:2c:8b:88:ce:ac:33:
0e:aa:d3:ad:3b:48:85:27:40:43:58:73:79:b3:0e:
7c:71:5e:84:66:4d:9c:26:8b:4e:ba:bc:4b:31:fd:
cc:50:75:99:bf:ce:f0:36:a1:64:59:ec:26:e5:47:
4e:bd:b4:16:6d:75:12:2c:15:21:70:ad:c6:6e:b2:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:4D:CE:0C:4A:9E:08:AF:E7:EE:56:16:BE:97:3E:B4:35:CD:5B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fcea9873-8a30-48f9-9cf3-50c2726833ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d077:e000::/40
Signature Algorithm: sha256WithRSAEncryption
35:f1:87:68:bb:09:0f:07:18:6b:50:66:fe:83:4e:f5:3f:1a:
57:57:27:4e:61:75:5e:50:60:bb:28:71:b9:71:48:59:cc:2e:
35:aa:e9:d3:70:9c:a1:72:8c:9b:81:2d:38:d6:db:81:32:7f:
ab:ef:a9:54:3e:6f:14:14:e3:24:fd:63:b6:fc:42:44:59:16:
0a:e7:69:73:33:c7:e6:7d:c5:97:d1:4a:cc:3e:e8:d2:d1:bf:
26:8e:eb:dd:65:9b:10:51:5d:cf:a5:aa:d4:3a:a9:c4:55:57:
01:b6:59:7d:9f:62:e6:93:87:d4:7f:2e:10:80:bd:a4:f9:ef:
21:b2:dd:22:36:46:30:fd:f5:53:cb:ff:ad:d0:ed:d3:82:22:
7e:c7:d4:61:29:e8:98:37:88:e3:87:c9:c2:90:ef:c6:de:2d:
e8:4d:01:17:02:c8:49:1d:fe:5a:ab:bc:80:85:8c:46:c1:a8:
17:5f:d4:4b:8f:f0:c3:c5:5e:fc:63:c3:d0:47:76:bd:dd:5c:
7d:51:8f:57:d2:38:51:ee:45:65:4d:25:6c:ee:b9:9b:48:bb:
68:82:4a:c9:1c:85:b9:4f:af:b0:47:fa:46:f4:e4:38:b3:da:
9b:2d:b9:69:6d:f0:98:f0:2e:e5:ce:d9:c0:da:40:9a:2a:f4:
b0:76:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:40:29 2024 by rpki-client on console-ams.rpki-client.org