Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
File: 0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa (raw, json)
Hash identifier: AAH/XLR6QrZteL6OhI/qtRWjUjpMPXe+C2gK2wJ5DG8=
Subject key identifier: B0:27:34:6B:13:DC:A9:38:B9:FA:DB:48:22:43:30:2F:5E:D0:B8:1C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5A7DC6441137A142FE403A4C0B5C56C06893A3B3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
Signing time: Fri 24 Jan 2025 00:00:00 +0000
ROA not before: Fri 24 Jan 2025 00:00:00 +0000
ROA not after: Fri 28 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 178.236.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7d:c6:44:11:37:a1:42:fe:40:3a:4c:0b:5c:56:c0:68:93:a3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 24 00:00:00 2025 GMT
Not After : Feb 28 23:59:59 2025 GMT
Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:d4:98:c2:35:c9:38:5a:fa:6b:5e:cf:13:
d7:93:5c:82:ea:a8:1d:e6:50:af:16:63:2b:ca:b1:
d5:7c:1c:e6:34:ae:65:fa:8b:02:e6:8b:84:0b:30:
c5:63:06:e6:4c:d3:59:0d:5e:16:12:ba:cc:5f:de:
ea:63:a8:45:80:34:fb:1c:d0:89:07:a4:83:f1:27:
19:72:52:89:c1:ac:3d:5b:6a:ef:0c:81:bb:bc:f7:
24:8f:7d:67:d4:52:bf:c0:91:f4:a5:ae:81:11:dd:
33:bd:88:ca:62:85:06:95:e5:cc:68:98:51:31:e8:
db:2a:6c:fc:2d:d8:8e:a5:e6:50:2c:1a:04:f3:43:
31:2b:e2:28:10:a1:86:c7:28:84:3a:73:e8:b9:41:
40:9b:bc:bd:11:7c:b6:43:d5:41:c9:05:b1:85:d3:
51:ba:6c:96:ff:a5:40:6b:0e:49:53:6c:01:86:cd:
55:b8:18:40:7e:3a:32:75:cf:80:0c:9c:a5:18:93:
09:de:07:5d:a8:a0:6c:5d:47:b1:25:91:b5:88:5e:
2b:05:07:07:b6:61:fd:20:7a:e9:6b:f4:93:0f:ee:
8a:ad:bf:bf:41:6f:30:9d:50:e9:c0:c4:5e:9f:ef:
95:b9:ea:de:a2:e8:ac:34:5a:93:ae:93:32:46:59:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:27:34:6B:13:DC:A9:38:B9:FA:DB:48:22:43:30:2F:5E:D0:B8:1C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:e9:71:ba:4b:59:d8:13:ed:0f:45:92:ff:b5:bb:73:4d:51:
ad:ff:13:97:ff:a8:6e:51:53:70:96:86:7f:9c:02:5a:5d:19:
70:ed:24:4f:33:ac:49:11:0d:e3:ec:8d:4f:63:0e:28:54:c0:
a6:56:96:10:02:63:9c:19:c0:14:34:45:e7:86:bf:e9:1a:f0:
bb:3e:cf:ba:27:bd:23:fd:ae:57:18:64:84:b9:7e:a3:e9:5e:
7e:aa:61:b0:53:00:c4:2f:e9:25:23:03:a7:09:b7:39:eb:e2:
c0:30:f5:1a:f8:81:67:f2:f3:81:68:89:0e:db:29:50:f3:79:
0e:5b:ca:86:b9:73:63:8a:45:6a:ff:54:b0:45:36:b6:21:fb:
45:6a:6f:5f:36:88:f4:c8:a0:7e:5c:61:c6:88:2b:8b:8d:ec:
c0:7b:e2:48:42:e1:23:33:1f:e8:46:4b:3f:0e:ea:99:ed:8a:
96:4d:46:8c:a6:97:6f:5f:df:ca:ec:f9:e0:ad:75:ac:ed:5d:
cc:d2:89:01:5b:9d:2c:e0:d2:e2:54:db:a5:30:cf:a5:3d:be:
6a:9c:2a:a3:d5:19:eb:8e:86:c0:02:94:71:ff:1b:a1:46:d9:
5e:b6:fe:c1:8f:36:85:9e:fb:01:73:42:03:a3:62:d0:d6:41:
66:57:b4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:45 2025 by rpki-client