Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d580cc8-bbc1-409c-bd57-046c5b70250f.roa
File: 6d580cc8-bbc1-409c-bd57-046c5b70250f.roa (raw, json)
Hash identifier: Q8XhzyVRuYmzuSNGHXvOc5enj/kZ/wfeAbb+uAPoJys=
Subject key identifier: 67:A3:05:F4:36:0F:DC:E5:05:08:BF:9F:FA:71:27:B2:0E:F5:98:00
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 47D4499239CC3208499EDACD8AA637DE86CD700F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d580cc8-bbc1-409c-bd57-046c5b70250f.roa
Signing time: Tue 23 Apr 2024 00:00:00 +0000
ROA not before: Tue 23 Apr 2024 00:00:00 +0000
ROA not after: Tue 28 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 46.51.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d4:49:92:39:cc:32:08:49:9e:da:cd:8a:a6:37:de:86:cd:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 23 00:00:00 2024 GMT
Not After : May 28 23:59:59 2024 GMT
Subject: serialNumber=5423409729a5ff97af70af186d5e612569177729ae4ee3030416fda1dfda5bd1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:ec:31:42:aa:c2:bc:32:6a:53:5b:b1:b9:
80:ab:a9:b0:8d:b7:78:10:93:43:72:8d:9d:cb:f5:
5b:a6:6e:bd:68:fa:96:38:2d:d3:ea:37:99:11:ca:
87:00:bf:ab:66:5e:d2:46:73:b6:c7:ca:9a:ee:86:
1c:ee:b1:8d:be:a5:d9:84:93:ea:1b:e7:75:fb:05:
75:9d:c9:9e:11:d4:76:85:ea:78:1d:e5:7b:8d:ff:
63:2e:8e:ea:20:53:2a:73:94:da:ca:a3:8e:1f:80:
4d:f2:73:7c:35:a9:5b:35:8b:ec:11:15:7b:f8:2a:
43:7c:94:28:51:cf:4e:02:28:63:df:ba:01:02:f2:
c4:b5:69:e6:72:2b:8e:37:cb:ef:00:25:e0:81:79:
9f:51:9a:5d:34:6e:3a:3b:ca:23:6a:0d:43:7d:0a:
ec:53:82:02:2d:cf:00:b4:cb:c6:d5:9f:64:ef:ac:
46:02:2d:81:cf:55:96:bb:11:3b:b8:e8:fe:6e:6f:
89:34:76:f0:02:7a:4c:64:ba:ac:2e:6a:8b:31:84:
eb:39:bb:51:66:37:8c:1b:3e:68:7e:d0:53:d4:b2:
f5:5f:b4:5e:d4:9b:50:c4:45:84:1c:91:af:04:81:
95:13:17:0e:e8:c2:16:a9:ce:28:d6:63:4f:94:38:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:05:F4:36:0F:DC:E5:05:08:BF:9F:FA:71:27:B2:0E:F5:98:00
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6d580cc8-bbc1-409c-bd57-046c5b70250f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.208.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:19:31:30:94:23:e7:ee:82:df:19:61:6e:84:72:19:66:6f:
52:fa:38:2f:50:41:59:0c:12:d4:67:8a:f4:82:a7:ee:66:d8:
bc:d9:04:ca:15:be:33:71:46:60:bb:2e:48:7f:93:69:a1:d5:
fa:69:20:45:57:06:ec:a4:f3:40:07:32:a2:cf:26:8b:7a:0a:
c2:36:35:27:b0:21:8f:fa:bb:e5:90:5d:c9:12:17:4e:83:9c:
11:a6:4c:91:e8:28:7d:38:e6:6f:e5:84:9b:f2:a6:d8:c0:32:
42:e5:60:83:05:2a:42:38:dc:aa:16:ae:5a:70:ad:dc:5a:5b:
25:ae:14:2b:da:60:02:83:dd:91:72:e6:6f:a3:81:0b:47:b1:
cc:00:8d:70:74:e6:5a:ab:14:c2:4a:3c:aa:e0:67:88:77:6d:
5f:a9:a1:55:ab:8e:c8:cc:1d:82:0b:74:48:e5:41:a3:c2:53:
c8:4e:43:7b:f9:55:68:90:13:b2:25:46:62:a2:7c:4e:27:2b:
07:c6:e5:db:2c:12:2c:f8:1d:29:5e:46:70:e7:a0:8e:4d:fe:
c2:e9:85:bd:08:81:74:8c:9f:5e:fb:2d:a3:5e:a3:9f:55:9b:
03:1b:89:eb:39:e3:d7:31:9c:3f:2d:1f:91:92:10:9b:89:4e:
18:4f:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:46:55 2024 by rpki-client on console-ams.rpki-client.org