Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa
File: 4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa (raw, json)
Hash identifier: eszMGZq0/BvE2xFegqzHim496xjrqo3dMmYd4mEFyhQ=
Subject key identifier: 04:7F:B8:21:8B:3F:15:44:B1:DF:A1:D1:03:4B:9F:86:BD:D3:A2:13
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4256F17862042E3B84E0297C4DFDFBEF4B724FDD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa
Signing time: Sat 23 Mar 2024 00:00:00 +0000
ROA not before: Sat 23 Mar 2024 00:00:00 +0000
ROA not after: Sat 27 Apr 2024 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 Mar 2024 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:56:f1:78:62:04:2e:3b:84:e0:29:7c:4d:fd:fb:ef:4b:72:4f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Mar 23 00:00:00 2024 GMT
Not After : Apr 27 23:59:59 2024 GMT
Subject: serialNumber=b22f77f857fe4ae5ccf7b788c086a14b26500bff2ea8cd11665628d45396de8f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:db:7e:12:f1:51:dd:c2:01:4d:c6:36:33:
de:66:07:70:e8:02:e6:74:24:75:ee:22:f2:c9:8b:
55:ee:76:e5:b5:f5:f6:01:26:81:11:68:47:c3:b4:
5d:3c:73:ec:4c:28:96:28:ae:d7:eb:11:50:ad:6b:
cf:3a:fc:1d:e6:f2:9a:1a:9b:e6:72:62:37:56:e8:
af:df:f7:01:40:ed:18:ad:2b:fc:e8:25:b3:5f:15:
bc:a1:50:39:9b:71:89:50:bb:1f:47:0b:af:d7:13:
9c:43:85:f7:4d:a9:98:67:68:ea:43:fa:b2:2d:10:
48:3e:62:3e:22:be:64:fe:cd:ba:8b:a7:c6:92:56:
a7:05:08:0f:0b:3c:5c:3a:24:62:b7:0d:22:81:7d:
0b:2a:25:8e:68:f4:5a:8a:fc:19:2f:d4:92:5f:c8:
ec:89:0f:9d:ea:1d:2d:17:a2:86:5c:b8:0d:ac:2a:
f6:6f:58:e9:d6:1c:71:35:23:a3:58:d4:67:1a:53:
8e:80:e1:5c:2a:2f:0b:7d:7a:31:72:ed:4b:56:3b:
ac:5f:7d:12:04:62:2e:67:d8:2a:8c:d6:29:ec:88:
4d:6a:db:31:1b:6e:d4:9c:d8:c7:1b:e4:27:bf:c7:
1a:02:a3:06:69:40:7e:d9:3d:3f:f7:0c:87:0f:3b:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7F:B8:21:8B:3F:15:44:B1:DF:A1:D1:03:4B:9F:86:BD:D3:A2:13
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:ae:b8:f1:12:84:79:97:1b:c2:ff:87:54:b9:4a:4b:71:50:
00:66:aa:59:86:6a:c4:43:79:4b:56:d2:29:f2:20:e1:4c:64:
4c:c0:1c:13:ff:5e:2f:34:32:e8:f7:53:96:c6:48:9d:33:b6:
a3:22:cd:c7:ba:e5:83:32:f6:ef:3a:90:3d:e4:42:c3:68:7a:
d7:a8:8b:c9:60:55:e0:31:44:01:1a:48:70:f4:93:cb:df:0f:
06:3a:76:10:9c:e7:0b:e1:9e:e8:d1:78:bc:7c:99:6b:cd:d4:
6d:6d:1e:cb:c0:42:ef:6c:ca:4f:04:bf:d1:5c:60:dd:6f:e4:
5c:7a:45:e0:b1:04:09:fc:4a:30:53:0b:65:51:f0:bf:71:9d:
4d:97:aa:db:d0:c7:bf:8b:c9:35:fd:86:26:fc:f8:21:54:40:
bf:c5:05:f7:1f:6e:e7:d5:58:ca:af:34:ab:bf:18:68:e0:4f:
a3:ef:72:d2:26:68:aa:96:e9:d2:13:76:60:99:86:1f:f5:e8:
d1:5e:4a:88:93:77:f6:03:35:db:9b:bc:14:e8:a4:c5:69:4f:
2c:10:c7:c4:32:73:39:36:8a:c7:ed:51:5c:a1:2b:02:b9:7c:
16:0a:4a:8c:9c:16:5f:96:bc:9b:2e:34:91:4f:63:f3:50:8b:
23:07:93:86
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUQlbxeGIELjuE4Cl8Tf3770tyT90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDAzMjMwMDAwMDBaFw0yNDA0MjcyMzU5NTlaMHoxSTBHBgNV
BAUTQGIyMmY3N2Y4NTdmZTRhZTVjY2Y3Yjc4OGMwODZhMTRiMjY1MDBiZmYyZWE4
Y2QxMTY2NTYyOGQ0NTM5NmRlOGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOLP234S8VHdwgFNxjYz3mYHcOgC5nQkde4i8smLVe525bX19gEmgRFoR8O0
XTxz7Ewoliiu1+sRUK1rzzr8Hebymhqb5nJiN1bor9/3AUDtGK0r/Ogls18VvKFQ
OZtxiVC7H0cLr9cTnEOF902pmGdo6kP6si0QSD5iPiK+ZP7NuounxpJWpwUIDws8
XDokYrcNIoF9Cyoljmj0Wor8GS/Ukl/I7IkPneodLReihly4Dawq9m9Y6dYccTUj
o1jUZxpTjoDhXCovC316MXLtS1Y7rF99EgRiLmfYKozWKeyITWrbMRtu1JzYxxvk
J7/HGgKjBmlAftk9P/cMhw87MaMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQEf7gh
iz8VRLHfodEDS5+GvdOiEzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGExM2E0OTMtOTMzMi00MmM5LTg1YzQtZmI5ZDZiMGZjMDNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAC6JMA0G
CSqGSIb3DQEBCwUAA4IBAQBqrrjxEoR5lxvC/4dUuUpLcVAAZqpZhmrEQ3lLVtIp
8iDhTGRMwBwT/14vNDLo91OWxkidM7ajIs3HuuWDMvbvOpA95ELDaHrXqIvJYFXg
MUQBGkhw9JPL3w8GOnYQnOcL4Z7o0Xi8fJlrzdRtbR7LwELvbMpPBL/RXGDdb+Rc
ekXgsQQJ/EowUwtlUfC/cZ1Nl6rb0Me/i8k1/YYm/PghVEC/xQX3H27n1VjKrzSr
vxho4E+j73LSJmiqlunSE3ZgmYYf9ejRXkqIk3f2AzXbm7wU6KTFaU8sEMfEMnM5
NorH7VFcoSsCuXwWCkqMnBZflrybLjSRT2PzUIsjB5OG
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:23 2024 by rpki-client on console-fra.rpki-client.org