Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
File: 0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa (raw, json)
Hash identifier: c/BFzUxODRtPIdGGc7Gi91XJPkjwBm0JiYuhpPcs69g=
Subject key identifier: 45:B3:68:45:26:DF:07:85:5D:72:91:0F:20:22:B2:6B:C7:29:02:24
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 3385DF8559F621269D584B94056E2812ADF64CC1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
Signing time: Wed 17 Apr 2024 00:00:00 +0000
ROA not before: Wed 17 Apr 2024 00:00:00 +0000
ROA not after: Wed 22 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 178.236.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:85:df:85:59:f6:21:26:9d:58:4b:94:05:6e:28:12:ad:f6:4c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 00:00:00 2024 GMT
Not After : May 22 23:59:59 2024 GMT
Subject: serialNumber=b39bb365d91c72a24f3b316eaf54e49f382fa2bf17f49a92321b50acbdd399fe, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:75:ab:b5:be:31:6c:50:9c:1f:df:aa:60:
9b:98:48:0f:5c:45:0e:04:4b:e1:1f:9a:af:07:84:
19:de:53:d5:3b:d3:8b:81:80:2c:87:1d:a0:4e:8f:
9b:55:06:77:3d:a1:54:a3:c5:70:e3:f2:d0:c7:17:
90:0b:ee:70:fc:5c:a0:97:86:69:76:9d:19:dc:f9:
54:ba:c8:a6:aa:f7:52:3f:70:4d:92:ae:12:b5:42:
26:f0:5a:ae:1f:cf:30:b9:38:a5:ea:03:7f:c1:30:
a3:56:c8:a0:c7:0a:ba:5e:86:27:fc:99:44:a1:03:
54:4d:2a:74:6e:2f:9b:da:2f:80:8d:12:4d:e4:49:
67:89:59:0c:e2:4c:04:07:58:22:ea:2d:75:c0:30:
81:2c:37:b7:3e:ec:3b:cf:30:09:5b:43:e5:97:c1:
2e:54:ca:dd:82:da:cb:82:71:f0:25:d8:ed:e8:c7:
6b:d7:5c:62:eb:fd:f2:3d:5d:c1:9a:8f:1f:df:da:
79:0d:ac:82:6c:66:b9:07:8e:44:a6:6a:29:ae:1c:
5f:0b:e5:3f:a1:ab:ac:28:04:93:d9:3a:07:b9:d7:
29:2d:ec:24:de:db:72:a0:be:48:8e:6c:f4:9b:75:
78:0f:c5:d5:bc:ec:d8:82:13:de:95:b3:a9:42:ef:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B3:68:45:26:DF:07:85:5D:72:91:0F:20:22:B2:6B:C7:29:02:24
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:97:84:fe:84:b8:f7:61:a4:a2:70:dd:f2:a3:11:90:6b:f9:
3f:cf:d3:38:2d:a6:c1:7e:d5:ab:52:b5:91:3a:6b:41:15:e5:
1d:37:a9:a9:38:3e:f8:36:4c:24:e2:31:c7:ee:95:3c:e9:f4:
dc:23:f3:82:d8:04:78:ba:95:39:a6:59:68:b9:0d:3a:66:75:
90:86:9c:05:65:fd:37:5a:a2:b6:c6:ca:7f:c9:83:8c:68:1b:
22:a5:14:38:cb:fe:3b:f9:31:b5:bb:87:fc:c2:1a:17:31:61:
a6:9d:7b:08:5b:20:19:e9:b6:86:ca:8c:c4:5c:c4:dd:69:a4:
69:8a:14:bc:1a:81:03:92:69:3e:b3:d8:32:52:54:98:3f:05:
7c:85:e0:9a:d3:8d:97:8c:83:ec:c0:fb:9d:a2:80:10:de:a6:
7f:5e:89:a9:45:71:64:23:14:2f:27:b6:34:b6:c1:b2:33:55:
57:03:a7:49:6e:ed:ac:86:3f:f0:12:59:ed:1b:cf:85:59:49:
f8:6d:9b:95:cd:bf:01:53:96:2f:f5:5e:4e:bf:08:99:9e:2c:
f3:c5:b7:4c:db:8d:8b:95:fe:ec:c9:29:dc:15:e0:62:95:8b:
82:4c:19:f6:c8:3f:d0:5b:05:76:b2:1a:40:67:5a:99:9b:53:
27:6a:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:58 2024 by rpki-client on console-ams.rpki-client.org