Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86f9f321-0423-4a3c-8481-9118cd38fde4.roa
File: 86f9f321-0423-4a3c-8481-9118cd38fde4.roa (raw, json)
Hash identifier: dq9Y8GWJO2VdmnLx4L9cyjq6tSgCpr1d2gDJVtuzIZw=
Subject key identifier: DE:B4:33:E2:50:2C:AC:91:74:C1:BB:67:DE:C2:0B:E6:C6:F1:4F:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 76B2EE69D7AF3FC88A03A248C8D93A6F662A7374
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86f9f321-0423-4a3c-8481-9118cd38fde4.roa
Signing time: Mon 13 May 2024 00:00:00 +0000
ROA not before: Mon 13 May 2024 00:00:00 +0000
ROA not after: Mon 17 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 185.48.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b2:ee:69:d7:af:3f:c8:8a:03:a2:48:c8:d9:3a:6f:66:2a:73:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 13 00:00:00 2024 GMT
Not After : Jun 17 23:59:59 2024 GMT
Subject: serialNumber=1526ebfbd69d214518461d9a01af7bd8314460f5de782bcc535049bb7552b60d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:de:21:b8:17:ba:c2:41:00:f4:60:44:10:
5b:1c:d9:d7:8e:4f:a5:fe:22:41:23:b0:da:08:ad:
a5:0e:a7:30:9e:d9:be:f0:58:fc:77:57:d3:76:11:
0e:5f:d2:e6:9d:41:72:b1:a2:c4:0e:c9:c3:bd:87:
2f:87:ee:86:06:e5:a6:52:55:20:52:2f:a9:03:37:
85:07:16:1c:c9:4b:b6:c5:f5:8b:06:31:bc:dc:25:
ff:c5:a4:27:2b:0b:1f:cc:75:78:ce:5e:7b:2a:0f:
b7:ca:74:04:36:25:2b:8b:23:37:0a:83:3a:d9:23:
43:da:81:0f:c9:2b:ad:af:89:08:9c:3c:9f:50:f5:
06:c1:f6:88:a7:40:6f:68:b7:b4:dd:31:55:ed:0a:
04:bf:53:81:7e:b3:e6:2b:e6:db:28:ea:a1:98:e9:
95:4f:af:3c:5a:0a:99:75:f4:9e:ce:d6:9c:62:f5:
c4:db:e3:16:d7:3c:ec:33:21:03:05:df:32:28:79:
d8:d9:29:b1:ef:fc:2f:1d:59:be:07:ef:2b:b3:04:
23:1d:a7:7a:69:8a:12:59:40:c4:cc:0f:06:17:99:
b9:31:db:30:17:74:c8:4e:0b:39:ff:e6:63:b1:29:
d3:b5:95:af:b2:cb:fb:46:d2:da:a6:46:6b:91:e7:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B4:33:E2:50:2C:AC:91:74:C1:BB:67:DE:C2:0B:E6:C6:F1:4F:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86f9f321-0423-4a3c-8481-9118cd38fde4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.120.0/22
Signature Algorithm: sha256WithRSAEncryption
88:30:5c:cf:da:fc:0a:fe:79:5f:74:88:58:44:7c:f8:aa:d1:
17:2a:61:d1:69:61:a2:be:82:f1:bb:d0:76:54:92:ac:21:69:
1a:a4:b3:96:51:a6:2c:ad:26:ef:11:ca:14:1d:2d:2e:d7:90:
a4:27:b9:a8:d4:7c:aa:44:dc:e8:fc:39:45:2c:5d:d6:5a:bc:
65:8a:5f:33:73:5f:d6:9b:7a:b5:82:1a:cf:b5:e4:95:b3:19:
6f:da:59:35:fa:13:ba:cf:72:0d:f8:03:c0:67:9d:cd:72:0b:
72:58:42:5f:03:10:6d:e7:57:22:26:6a:00:48:09:37:af:96:
6c:04:03:e0:12:d0:bf:4f:4f:9e:92:91:84:6e:c5:de:01:c0:
00:4a:ca:22:c8:c2:5c:d8:50:f6:d8:96:7c:9a:69:00:24:27:
ce:b0:c9:54:eb:5d:1d:57:32:c7:2c:4c:c6:a4:01:3a:81:72:
57:8d:4c:fb:70:68:8b:7d:e1:1c:ec:fd:e4:66:78:5f:09:ea:
fc:b5:e6:f0:91:9c:bc:84:9f:ff:b6:a0:92:10:42:0f:60:61:
aa:7e:5d:93:dc:4c:7d:79:1c:55:fc:4c:7e:71:04:d5:78:a7:
c7:7e:16:4e:51:8b:5b:14:44:b4:d2:6f:95:17:90:ef:87:d3:
7a:de:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org