Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa
File: be992706-c3d6-44a9-a546-5fdf15912be4.roa (raw, json)
Hash identifier: Hr2PXpIwasoJ92dIjPCG92MTpguUgli8fJucvtwgQwM=
Subject key identifier: 8C:0B:45:A8:C7:6C:57:F1:48:00:CC:75:E6:FD:A6:94:46:04:D4:0B
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 116FCD16BE366D4AB0B7CAE94DD38A2D26F0EBC1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa
Signing time: Mon 13 May 2024 00:00:00 +0000
ROA not before: Mon 13 May 2024 00:00:00 +0000
ROA not after: Mon 17 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 176.34.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6f:cd:16:be:36:6d:4a:b0:b7:ca:e9:4d:d3:8a:2d:26:f0:eb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 13 00:00:00 2024 GMT
Not After : Jun 17 23:59:59 2024 GMT
Subject: serialNumber=b11a9d57b754c20d8ec54061ff6b2b3d6a91789d691bae70bdb71900e3b6f22b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:4f:5a:79:ac:c8:fa:b4:bc:f0:f4:5e:11:
84:8b:a2:34:51:30:b2:5f:3c:12:bd:ba:2a:c7:cb:
07:34:95:f3:24:5c:d4:2b:40:fc:fd:18:3e:5f:77:
61:af:12:68:21:56:d8:f5:59:a2:ac:69:a3:7d:21:
6c:3c:0c:dd:4b:3e:3b:ea:ad:9d:c7:1c:04:13:9f:
46:1e:2a:e6:96:9c:44:ca:57:84:c3:ad:0e:2c:3b:
5e:2e:6b:75:0b:d9:3d:60:2a:71:d8:85:d1:83:bb:
1f:96:48:65:f0:16:af:20:e0:b0:f0:5d:9f:a4:4b:
47:14:f7:2e:2d:65:4b:a9:e2:c0:a6:0a:03:06:68:
94:6b:5e:16:90:fa:3e:47:57:30:67:43:01:63:71:
8f:7c:6b:63:19:f0:1b:22:5d:a1:1a:06:02:4e:ac:
91:df:f0:f4:14:e0:3e:93:45:bd:60:09:76:41:b4:
86:64:06:dd:82:76:d3:b1:f2:95:c8:4d:0d:f4:6f:
d6:5c:b9:c6:1d:16:c2:04:8c:34:c2:99:d9:b2:a0:
c5:7a:69:da:d2:02:c8:c5:ac:70:76:a8:53:d1:d9:
58:6a:89:e3:ff:dd:06:31:15:e3:e7:a8:98:fb:31:
93:14:73:02:49:05:6a:81:02:c4:02:e5:32:96:70:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0B:45:A8:C7:6C:57:F1:48:00:CC:75:E6:FD:A6:94:46:04:D4:0B
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be992706-c3d6-44a9-a546-5fdf15912be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:e2:f6:86:d4:60:7c:17:2b:41:a8:01:a8:53:bf:a2:4e:40:
25:af:6d:2d:72:e1:45:0c:2e:0d:c3:03:fe:f9:4a:35:a0:3a:
25:7b:4d:f0:3c:95:71:12:01:52:b0:c4:1e:f4:b8:92:76:13:
45:51:90:fa:84:9d:aa:98:a9:f5:e6:14:20:94:6d:30:2b:d2:
d2:3a:cd:39:6b:5d:3a:ea:84:16:26:a6:35:f8:92:6b:a2:30:
b6:b2:ab:e7:84:bd:3d:73:ab:b4:85:2d:43:19:30:60:66:45:
31:69:61:0b:93:e7:95:ba:31:10:78:71:7b:5b:54:34:15:93:
53:32:12:28:04:9a:7c:50:63:3d:4e:18:d7:f1:bd:5c:51:3f:
86:0d:c3:2d:6a:12:2c:2a:d7:21:35:5a:98:03:28:41:bc:f1:
74:7b:c6:9f:cd:f1:dd:52:94:83:f4:d4:86:0b:f1:03:44:99:
c0:cd:0a:e2:fc:cc:1a:d8:bb:f2:28:ac:05:26:96:c8:78:9e:
fc:4d:9e:98:b3:ae:73:85:f3:42:55:cd:3d:0a:7a:80:1a:8d:
c5:24:2f:ef:12:62:fb:9c:e2:bd:aa:ad:db:7f:fb:6c:f2:2d:
c4:da:25:f8:be:20:83:73:a1:e6:10:82:5f:41:d9:0b:83:59:
cc:83:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:00:50 2024 by rpki-client on console-fra.rpki-client.org