Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af9121-2fa0-422d-9c11-2e15bcdcdd17.roa
File: c8af9121-2fa0-422d-9c11-2e15bcdcdd17.roa (raw, json)
Hash identifier: r0rJqwcPoKN0HU8rsJGqhFK8Ta196hL+TCPUXeJzHbc=
Subject key identifier: ED:94:04:D7:6F:5A:F0:E2:0F:1B:C6:C5:59:52:83:42:F5:0F:05:CA
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4EE885596B53EAFFE52B10313B75EBAE7BA20303
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af9121-2fa0-422d-9c11-2e15bcdcdd17.roa
Signing time: Mon 13 May 2024 00:00:00 +0000
ROA not before: Mon 13 May 2024 00:00:00 +0000
ROA not after: Mon 17 Jun 2024 23:59:59 +0000
asID: 8987
IP address blocks: 178.236.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e8:85:59:6b:53:ea:ff:e5:2b:10:31:3b:75:eb:ae:7b:a2:03:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 13 00:00:00 2024 GMT
Not After : Jun 17 23:59:59 2024 GMT
Subject: serialNumber=1664a9488a53fab5502db0c2053fe1f708b7a6e1ec35bbe036d65b719a1168de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:bc:a0:2f:a5:d6:18:cb:8e:f0:e4:44:92:
aa:ab:d3:a7:60:e5:53:9b:3f:b9:20:e4:53:55:02:
1f:8d:78:bb:10:49:bc:e5:c0:03:a6:f1:e7:57:06:
42:e1:6a:fa:1e:4d:c8:6d:59:c3:be:33:04:82:70:
a4:bc:88:2b:47:62:ad:7b:50:59:30:0a:6f:9d:0e:
82:e8:af:eb:1c:e1:f7:8a:d7:6f:34:9e:b1:97:25:
e9:fd:62:45:2a:e8:12:23:5f:8e:c2:1f:2f:9b:2c:
39:ba:cc:81:ae:04:25:7c:3a:43:ba:8f:e5:26:7c:
68:12:66:97:95:cb:55:a0:59:0d:75:e3:e7:2e:0f:
9d:64:f7:38:56:2e:6d:ce:f2:e2:e0:be:29:1d:81:
5f:08:cf:b3:3f:57:75:27:ab:33:7a:3a:b4:40:a8:
75:58:ee:6e:61:83:59:23:b3:45:18:b0:18:8d:ff:
14:e3:86:e0:b2:59:84:11:4e:4d:b0:45:55:a7:03:
4b:27:33:d7:9e:7a:fd:f0:82:be:f2:73:71:8b:c6:
5f:7b:02:0c:38:04:0e:dc:11:67:93:b0:cf:e5:46:
75:f7:68:fe:4a:74:68:08:3c:ba:89:61:47:8f:0e:
cb:c8:ce:05:c4:23:ad:1c:b6:51:56:70:c4:90:ed:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:94:04:D7:6F:5A:F0:E2:0F:1B:C6:C5:59:52:83:42:F5:0F:05:CA
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8af9121-2fa0-422d-9c11-2e15bcdcdd17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:c8:0d:7c:a9:2f:e1:7c:f1:a1:93:eb:4b:ee:cf:72:22:4a:
e0:37:24:1c:06:af:a6:a1:87:39:18:15:b0:87:61:53:6c:8b:
a7:a0:5e:91:fb:43:59:be:c0:fe:5b:83:f1:5a:e4:e5:7f:66:
94:65:cc:ca:52:a5:36:76:aa:47:69:a2:6c:dd:c9:d6:2d:57:
30:c9:97:d0:38:10:5b:42:c5:92:be:3a:42:f7:f7:30:74:13:
e4:4d:7d:e5:78:90:75:72:64:14:e2:cf:76:dc:57:10:71:3e:
02:3e:8d:ec:1d:c8:8a:cf:7e:e8:93:b4:68:f7:38:c0:7c:ac:
10:97:14:03:de:b6:b9:b8:8d:d4:ca:82:48:68:b3:de:fc:8a:
94:e4:d5:13:81:f0:53:c0:38:74:96:92:5a:25:5b:66:cd:fc:
c8:6e:77:86:60:18:1a:5a:00:e8:ef:ef:d9:b8:bc:63:c7:87:
3c:c9:e2:3e:7d:97:f2:c9:25:7d:2e:22:9b:ee:56:2c:ce:e5:
ab:8c:33:56:aa:97:48:c5:84:47:f0:65:45:61:db:55:9d:b2:
c9:2c:52:21:a0:4e:cd:50:44:50:d8:2b:f6:a8:89:36:32:d5:
dd:c8:ce:66:14:0f:d7:65:9c:2c:a5:f6:c6:ab:6f:99:59:6c:
89:21:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:38:09 2024 by rpki-client on console-ams.rpki-client.org