Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5584193d-3d4a-4c69-87fa-4ed518ed2308.roa
File: 5584193d-3d4a-4c69-87fa-4ed518ed2308.roa (raw, json)
Hash identifier: mMWRcXfhr5dOuyaPMTLdW79aErbTY6u02Q1hSmVlYZo=
Subject key identifier: 2D:07:2C:7F:65:97:2E:89:2A:B7:EA:C0:AB:5A:77:45:70:7A:96:1E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 653AC545F47AFFDF7BBB60A3BAF107D961C02D37
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5584193d-3d4a-4c69-87fa-4ed518ed2308.roa
Signing time: Wed 17 Apr 2024 00:00:00 +0000
ROA not before: Wed 17 Apr 2024 00:00:00 +0000
ROA not after: Wed 22 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 79.125.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3a:c5:45:f4:7a:ff:df:7b:bb:60:a3:ba:f1:07:d9:61:c0:2d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 00:00:00 2024 GMT
Not After : May 22 23:59:59 2024 GMT
Subject: serialNumber=76ea84aa37a81032760a07b52bf18ab754d560d275d2f08986f3511e5f9ecaf2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:40:49:26:e5:29:e9:85:d0:fc:24:59:a3:24:
b7:ab:a5:30:ab:c6:43:6a:49:89:84:5b:63:d7:13:
c1:16:3d:a4:e5:d7:5b:33:19:cc:b5:f7:d9:bd:e3:
d8:9b:54:ed:3e:f5:d6:bf:50:3d:d1:12:83:ac:67:
33:83:bb:8e:43:1a:27:a7:07:55:f0:43:06:85:6f:
74:5b:3a:53:5f:f1:cb:1d:29:ba:7a:78:5a:b4:62:
ae:ba:56:2b:d3:3d:84:46:f6:cc:e4:67:cd:a6:36:
36:cd:8c:6f:26:84:9b:c0:f6:7c:2f:78:cb:bf:39:
fd:a1:08:6c:db:31:19:09:d8:14:5a:9f:38:29:5b:
64:a0:6c:21:fb:df:6c:25:55:d8:38:37:d3:c9:4c:
3f:b5:09:e8:5d:23:78:08:0c:83:01:b9:0e:2b:42:
c3:3a:74:f3:82:18:d1:b3:97:95:fb:58:d6:1a:d4:
2c:e4:f5:c9:9f:25:db:26:4d:da:1c:98:f4:5a:98:
b5:d8:99:47:55:ef:81:7e:0c:a5:c9:ae:f4:f6:67:
b3:b4:15:dc:df:e3:07:ed:8b:88:a8:ee:af:a1:a4:
b5:36:ae:66:83:55:b5:c1:eb:98:9e:6f:7d:af:f0:
4b:28:c7:fc:6b:72:ee:3d:e1:1a:28:48:f7:a7:34:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:2C:7F:65:97:2E:89:2A:B7:EA:C0:AB:5A:77:45:70:7A:96:1E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5584193d-3d4a-4c69-87fa-4ed518ed2308.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.125.0.0/17
Signature Algorithm: sha256WithRSAEncryption
ab:ea:1e:cc:99:f0:66:e6:56:e8:71:c2:16:8b:3e:67:f4:b0:
40:2c:4a:35:13:ff:4f:a4:64:f8:1b:59:a5:18:65:0e:d7:3d:
df:18:a7:14:24:fa:62:73:53:dd:83:fb:33:41:c3:72:98:a9:
0c:45:33:67:6e:33:36:43:7b:f9:98:bd:16:4c:ef:a3:02:02:
b5:dd:ea:30:5c:f0:cd:39:86:eb:d7:b8:bf:10:a0:fa:a0:0e:
59:bd:a9:e0:78:f3:f4:62:58:7c:ca:be:cf:52:17:9d:3d:d7:
b9:35:99:75:24:af:59:68:01:d4:af:73:ad:fd:1e:ec:15:7d:
41:47:f9:fe:b1:ff:d0:d6:11:a7:c8:d8:32:66:39:6f:ed:15:
fa:6b:76:49:15:a8:4e:e0:e7:54:cb:3f:de:6a:c0:39:11:0c:
e6:1c:de:03:ce:21:82:c2:f2:a8:75:bd:80:75:d0:dc:1d:cd:
92:6f:07:3d:ef:73:7d:21:2b:38:7d:01:b3:e8:f1:08:35:4a:
35:8c:b0:23:c1:79:1b:4a:68:e7:7f:1f:94:19:c5:72:9b:a5:
48:7d:3a:1c:33:ba:d5:4a:75:78:2c:5c:3b:01:a9:5d:26:3d:
3a:86:8d:6c:fb:78:e3:7a:21:db:74:82:a1:9b:5e:3e:e4:4e:
9d:b3:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:04 2024 by rpki-client on console-ams.rpki-client.org