Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
File: ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa (raw, json)
Hash identifier: 34tJugeim/j4s/NfP0ysGr2aTt8yN6OvjLq+6FR8sjA=
Subject key identifier: 85:DD:CA:B2:21:18:CF:B3:D1:A3:56:D3:B9:C1:D1:E4:88:28:84:3F
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 024A671B45F0B28B959E011660B66D9055DED7E8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
Signing time: Mon 13 May 2024 00:00:00 +0000
ROA not before: Mon 13 May 2024 00:00:00 +0000
ROA not after: Mon 17 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 87.238.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4a:67:1b:45:f0:b2:8b:95:9e:01:16:60:b6:6d:90:55:de:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 13 00:00:00 2024 GMT
Not After : Jun 17 23:59:59 2024 GMT
Subject: serialNumber=a0419c6ea247f484cc638154fb7cec2df20a8a38737f6f4e31852d161f129555, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:a1:29:d3:63:21:8a:97:39:5f:91:b8:9a:
b2:df:ca:3d:fc:b2:1c:e0:73:e0:01:ca:e3:fe:0f:
d4:99:59:f9:49:7c:78:36:e0:cf:78:0e:29:6c:3a:
76:82:ec:82:28:2d:ac:85:e2:1b:8b:39:e6:08:de:
07:dd:86:0b:c0:2d:5b:20:9b:66:3b:1f:83:12:55:
ef:1a:7a:00:04:67:af:14:7c:40:83:6d:7c:db:bd:
25:ce:50:57:7d:4a:c4:3f:1f:55:d5:c9:05:68:8b:
bd:7d:05:62:8b:8c:4a:2a:94:9a:43:bd:ca:58:fe:
ab:8d:0d:79:72:96:3d:f3:39:61:34:ed:16:f8:4d:
a0:ca:e1:02:6d:14:de:cf:f7:6f:c9:83:b1:6a:97:
a8:62:83:9a:3f:a3:b4:89:b0:91:48:1a:85:98:54:
82:3d:ae:76:da:57:65:f0:b3:14:16:49:b0:3b:2e:
58:84:e0:dd:4a:68:11:75:07:b1:fe:1f:62:be:7d:
d8:4a:75:93:cc:14:bc:f1:51:49:1d:9c:44:78:dc:
fa:1d:b9:e9:ed:8e:9f:d3:48:a2:d4:38:e8:89:99:
5a:39:94:d2:eb:7b:70:5a:21:0c:fa:ec:0f:01:eb:
10:2a:e6:39:9a:03:9a:c2:07:24:7f:11:7d:d2:db:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DD:CA:B2:21:18:CF:B3:D1:A3:56:D3:B9:C1:D1:E4:88:28:84:3F
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.80.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:35:c3:03:d4:a9:99:0a:2f:9c:d9:94:b7:d7:aa:65:75:35:
58:67:44:e3:b0:28:15:5e:4c:d8:39:7d:b6:0d:f6:f5:ce:60:
43:62:1c:a0:f7:1f:47:0c:a7:62:49:17:6c:a8:a1:6e:a2:c7:
5e:72:86:35:40:bf:12:4f:59:ec:4d:69:ad:c1:e5:8e:0d:a5:
6f:ab:3e:50:b5:a6:02:30:5b:39:78:65:f8:1a:d7:e9:a7:25:
95:db:73:ed:29:95:2a:4a:ed:6d:31:71:1a:b5:3b:71:ea:02:
55:1f:c1:a9:9f:e5:61:39:d7:b7:3c:66:5e:ad:9e:2a:b6:cd:
26:f9:85:2c:26:1a:77:03:5b:65:eb:4b:2f:fd:af:32:f5:cb:
ba:c8:4c:52:d0:55:c5:fa:75:81:27:86:da:01:ce:fc:cb:40:
b3:52:fd:02:d6:9d:c5:aa:50:b9:99:16:36:81:79:53:77:5e:
5e:37:8f:76:ca:eb:de:54:2d:d4:42:a5:d1:5f:8d:97:92:ed:
dc:cc:02:25:a5:2a:cf:c2:06:fc:05:e2:19:c9:69:ed:81:d5:
43:5a:5c:d9:20:8b:6a:ed:7d:e7:9c:f5:c8:41:ba:aa:36:15:
fb:83:e4:10:e8:59:3f:12:c6:a7:29:28:ca:eb:2f:85:e1:3d:
89:47:d0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org