Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
File: 518441c4-1683-4c03-b507-4d306d16662c.roa (raw, json)
Hash identifier: MfdTNgjQY31M/uYS7k3pjhA0AzDICfBm48NMw8Ofef8=
Subject key identifier: 1C:61:30:3D:ED:CA:46:E9:1E:C1:B3:CD:4E:C0:49:EC:46:38:A6:80
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 061A6D793CB7A1129CCD5F1F03ECCC9FCDA14ACB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
Signing time: Wed 17 Apr 2024 00:00:00 +0000
ROA not before: Wed 17 Apr 2024 00:00:00 +0000
ROA not after: Wed 22 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 46.51.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1a:6d:79:3c:b7:a1:12:9c:cd:5f:1f:03:ec:cc:9f:cd:a1:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 00:00:00 2024 GMT
Not After : May 22 23:59:59 2024 GMT
Subject: serialNumber=c2b9145abc0685c3011e27a8867dfc327826cfc603adcafaba0a9c4f29de0363, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:4c:f7:97:3d:d9:e3:dc:a9:2b:c0:e4:45:
d1:a4:1e:b5:92:c2:c8:61:bb:95:da:ee:a6:a3:42:
10:28:75:c9:ea:7a:94:f3:be:f5:f8:99:a1:8c:af:
8e:ab:89:16:01:7d:d6:09:7a:95:28:e0:89:3b:e2:
88:75:17:43:c1:e9:b4:8e:15:0e:1b:24:a4:ce:ea:
65:85:4e:12:92:b3:be:a8:06:2b:d5:e3:09:3e:13:
f3:08:a2:4c:16:21:e1:ee:b7:bc:0d:01:b2:9f:6d:
f1:15:bb:d3:5e:a8:8a:df:b1:cc:44:6a:cd:d7:5a:
9c:e4:eb:6e:0a:b4:d3:79:c5:f9:cd:7f:1a:6e:14:
df:01:b4:dd:96:d6:11:19:9f:9b:26:c8:ea:60:08:
42:63:f6:f0:46:09:2f:00:07:6e:fc:37:5c:2b:56:
1e:c6:3f:a5:a1:cb:61:c2:a5:6b:92:3d:76:da:51:
4a:78:68:33:ac:d2:95:e4:4e:67:4f:fa:51:75:32:
6e:e2:03:be:1c:4e:a7:36:19:16:55:f9:24:42:6b:
76:c6:a4:50:5c:52:f4:73:6a:11:23:ba:82:f8:59:
7f:41:f2:43:4a:e3:52:e1:71:a3:e2:42:84:27:3a:
49:d8:c9:1f:c5:d3:aa:12:8c:8f:fb:0f:72:b2:0c:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:61:30:3D:ED:CA:46:E9:1E:C1:B3:CD:4E:C0:49:EC:46:38:A6:80
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/518441c4-1683-4c03-b507-4d306d16662c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:a6:15:eb:1f:c5:e5:33:3b:7a:b0:65:7f:02:4f:91:3e:8f:
02:d7:43:14:b7:56:81:3b:15:92:bd:41:7a:8b:c3:72:02:d1:
dd:c1:4a:3b:b5:54:a0:af:5b:e7:ce:13:4e:51:5c:97:09:8f:
54:67:cc:83:f4:fa:f6:2e:94:fd:6c:81:af:16:b3:f6:2b:61:
56:48:6a:ef:ee:c7:66:72:cb:20:e2:87:49:a8:71:b9:33:ca:
52:74:fb:24:4c:94:92:aa:49:ba:9e:d3:09:9f:53:10:8c:cf:
cc:2a:88:a6:80:d6:6f:fa:86:f9:c2:76:05:19:b5:7e:3c:89:
95:74:6b:f8:d1:bb:53:92:ce:a6:a3:9a:24:26:80:39:7b:92:
13:3a:78:04:a3:2b:24:c5:9f:75:b9:3e:a1:d4:02:7a:64:51:
2f:89:82:7f:ef:8d:0a:e8:dc:6c:69:e4:61:76:ed:bc:86:01:
36:0f:07:55:e3:3b:9c:14:6b:4f:86:6d:b7:01:cb:6d:f7:8b:
41:be:89:1e:6a:2f:50:2a:84:46:e7:ba:26:30:1d:37:95:d2:
28:e1:a7:fc:e0:4e:b4:1c:c0:25:65:aa:69:43:4e:65:70:f8:
d0:0c:ef:78:e5:0e:83:33:e4:8b:cb:44:e2:4f:57:cd:e5:49:
16:34:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:04 2024 by rpki-client on console-ams.rpki-client.org