Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa
File: 4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa (raw, json)
Hash identifier: DxPxaMHHgXNTzQMjkT1f6h+16Oxlc9rm9Db2VhMdl5o=
Subject key identifier: 6C:D8:9E:60:24:09:C9:EC:48:80:82:8E:AC:E6:06:E5:BC:46:4A:20
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 026BC6984078DCCC4E8E15690E8E23D42C0F5D99
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa
Signing time: Fri 29 Sep 2023 00:00:00 +0000
ROA not before: Fri 29 Sep 2023 00:00:00 +0000
ROA not after: Fri 03 Nov 2023 23:59:59 +0000
asID: 16509
IP address blocks: 46.137.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 Sep 2023 19:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6b:c6:98:40:78:dc:cc:4e:8e:15:69:0e:8e:23:d4:2c:0f:5d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 29 00:00:00 2023 GMT
Not After : Nov 3 23:59:59 2023 GMT
Subject: serialNumber=13bbbb5a4cc9ef02f487b1845d1c63b45b899e57b49adb4e7d5fb66cfade2193, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:8f:62:df:c2:5b:ef:be:7b:52:f1:84:d2:
0b:47:c7:29:6d:e0:c2:23:e6:69:4c:4f:ac:ff:22:
31:ef:d0:56:14:94:3c:80:d0:29:51:00:6d:29:b7:
b8:73:2f:dc:bd:41:de:5e:55:4a:29:bc:99:f5:a0:
0d:a1:3b:61:45:b3:e9:05:ee:32:77:73:e1:47:c8:
52:40:19:b7:e3:f2:2b:59:d1:16:c1:aa:da:02:45:
ba:67:72:43:ad:0d:cb:c6:7a:21:3a:19:d9:1e:1a:
bf:e5:9f:56:19:20:e7:ed:9d:de:26:80:1a:66:0e:
08:d9:3d:d0:fc:08:15:30:5b:57:90:53:3d:34:12:
a3:ff:ee:e3:3d:db:bd:07:8a:25:8d:1b:10:49:a4:
b8:5e:b7:33:55:d6:11:8b:7c:10:59:5e:51:16:71:
20:99:ad:68:88:ed:42:7c:9c:fd:c4:7d:c9:5b:60:
d3:da:1a:aa:24:91:f2:e0:7e:f6:05:1e:d1:1f:00:
52:6e:92:03:ad:91:36:7f:78:92:5e:7b:23:72:b1:
c8:1b:a1:03:1b:d0:06:8a:c6:25:4a:35:d9:6a:94:
c9:56:5c:02:1e:ee:de:14:64:bc:b3:a1:15:7f:3a:
b4:b1:9a:e8:9e:e6:52:4c:eb:81:ee:54:b3:5c:b4:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:9E:60:24:09:C9:EC:48:80:82:8E:AC:E6:06:E5:BC:46:4A:20
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4a13a493-9332-42c9-85c4-fb9d6b0fc03e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:03:a7:f8:1b:0e:a9:6a:44:92:52:83:4a:11:af:11:67:16:
33:49:61:18:d7:3d:89:cd:93:8d:0f:33:e1:f7:92:f0:f9:45:
40:3a:ed:ac:85:78:f2:93:12:b0:d4:22:e0:df:6f:98:aa:11:
ed:78:08:0c:ae:55:c8:4e:e6:38:8c:16:3d:01:1c:3d:2b:c2:
15:c2:e7:ba:42:7a:f3:e4:b9:2e:17:66:be:ad:76:ab:f5:d5:
06:31:05:d1:64:38:01:4f:9d:bf:35:f7:bf:d1:08:c5:3d:fa:
54:b7:d9:c5:f5:02:d2:34:d3:d4:7a:94:4c:46:f9:36:27:fc:
fb:75:d5:42:1f:be:00:dc:6e:7d:70:46:4b:fb:8d:0e:c2:8b:
8a:9d:ee:60:a2:36:84:24:d8:5a:1c:6a:af:b0:70:b1:28:f3:
ca:c4:22:b9:f7:21:29:d9:00:c3:cf:0c:7b:a2:7e:ef:1f:13:
18:41:7b:b0:58:04:68:2e:07:f1:a7:1b:1d:ce:36:d2:72:5b:
eb:2f:ab:35:b3:2a:ac:91:82:96:82:42:96:af:da:a9:d5:04:
97:4f:ef:ee:67:51:e3:00:8a:41:1c:75:c7:84:c6:62:e7:6b:
a5:96:75:76:9a:b8:64:7a:59:a0:59:f0:5f:d6:96:aa:90:e8:
6c:9b:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 00:42:19 2023 by rpki-client on console-ams.rpki-client.org