Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
File: c9759e38-7281-4188-858a-90f65ea06745.roa (raw, json)
Hash identifier: 8OvnYOj3RqflSdL6kFTQbO8EQezdhPqbdFigz9cc6M0=
Subject key identifier: A4:45:1B:6A:9C:85:78:D0:C1:64:AC:66:FD:29:A4:FF:DB:0E:8A:46
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1515221C0B671D54B6FA2F86B6AEAE91CAAA38A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
Signing time: Tue 21 May 2024 00:00:00 +0000
ROA not before: Tue 21 May 2024 00:00:00 +0000
ROA not after: Tue 25 Jun 2024 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:15:22:1c:0b:67:1d:54:b6:fa:2f:86:b6:ae:ae:91:ca:aa:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: May 21 00:00:00 2024 GMT
Not After : Jun 25 23:59:59 2024 GMT
Subject: serialNumber=53d5a32967b02cfdfc1d0b502eb2f6112daec8a16aa9d9bba9f899bbc09bbf6d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:d9:ea:9b:5b:29:82:e9:10:a5:97:c2:9d:
e8:5b:5e:eb:81:ae:42:7d:61:1a:d1:65:97:e7:ca:
a2:78:3e:be:08:7e:4c:66:cb:18:65:73:9e:7f:92:
d1:a3:96:e5:1a:08:ff:15:10:8c:b1:9e:5c:11:6b:
03:da:07:d3:ea:34:db:72:d4:41:ce:ca:e4:7a:a9:
00:00:75:7b:b9:38:b9:f1:ba:92:43:a8:98:e2:9a:
a4:bf:91:73:30:03:1d:c1:22:8d:19:02:37:a8:64:
43:11:0f:1c:ef:67:4c:22:3b:ac:8b:e7:a2:ed:ed:
f7:7e:64:8f:4f:bb:0c:64:df:4e:dc:d3:94:95:25:
14:da:65:e3:3d:ef:8a:67:d4:2b:e3:8e:ac:20:3b:
a0:fd:43:b7:ce:88:8f:2e:e9:7c:14:8e:b5:15:c0:
fb:ab:fe:7e:85:f4:50:d0:b5:57:f4:47:6c:5b:a4:
2b:3b:5b:54:56:b1:ed:41:50:23:da:2a:d4:6d:d5:
84:47:19:66:49:a3:16:4e:a9:40:c4:53:a6:42:fb:
6b:e0:f2:1e:90:6e:53:f1:e4:55:52:ff:b6:20:43:
90:4b:ac:f2:3a:32:cc:e4:3f:95:dd:30:be:a8:bd:
e0:5c:27:a1:e6:6f:58:4a:48:69:e0:08:3f:5b:db:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:45:1B:6A:9C:85:78:D0:C1:64:AC:66:FD:29:A4:FF:DB:0E:8A:46
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c9759e38-7281-4188-858a-90f65ea06745.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.224.0/19
Signature Algorithm: sha256WithRSAEncryption
64:ac:a3:8e:8b:7b:71:8c:87:a8:c5:45:b3:46:6e:20:f6:dd:
1b:61:64:c9:83:d3:e9:2c:bf:5b:2f:fd:4d:77:f4:41:28:5c:
49:e8:07:85:a4:48:db:90:94:19:73:df:96:2a:44:56:36:5c:
23:26:c4:62:f2:df:59:77:f4:11:92:fa:76:83:72:39:ed:08:
55:f3:40:20:92:19:79:b3:31:de:71:28:45:1b:55:1c:16:e2:
21:1d:8e:0a:09:5e:fe:5e:b3:01:3b:6a:0c:df:86:2b:0a:eb:
e8:5c:e9:a9:f9:e0:d3:b5:7d:41:48:78:09:64:85:4b:6e:f0:
80:b2:de:ce:78:21:b4:6b:41:92:97:93:dc:59:5b:a3:c9:4a:
f0:2b:55:e9:1a:9f:ef:23:49:98:be:66:22:c6:dc:2c:58:cf:
54:c7:ce:6f:aa:d3:18:2e:c4:69:25:04:ed:16:b8:f1:7c:c0:
a4:ef:86:f2:06:2e:35:1a:db:74:52:92:39:64:e4:ba:ca:6c:
1b:c1:85:d1:5a:aa:58:85:96:41:51:b4:b6:ea:f7:c5:9b:66:
3e:57:99:77:f6:08:9d:d0:6a:1f:75:29:08:85:11:10:76:63:
cd:3f:37:a7:21:82:7f:39:1a:b7:1e:91:88:3e:77:5b:79:ca:
f3:ea:a4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:38:09 2024 by rpki-client on console-ams.rpki-client.org