Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793a4499-8be6-4037-82e6-ab5b795df619.roa
File: 793a4499-8be6-4037-82e6-ab5b795df619.roa (raw, json)
Hash identifier: Q+a5zunVWYhAtlVVWR4/3VqDLLI9luOAyFIZZN4Fc2c=
Subject key identifier: 51:75:EA:D4:E3:EB:64:4A:23:F1:91:F0:41:D9:5D:00:32:AF:F0:8E
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 5E7AF06B134877A79231EB91C7C71DA3AB105867
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793a4499-8be6-4037-82e6-ab5b795df619.roa
Signing time: Fri 08 Nov 2024 00:00:00 +0000
ROA not before: Fri 08 Nov 2024 00:00:00 +0000
ROA not after: Fri 13 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 185.48.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7a:f0:6b:13:48:77:a7:92:31:eb:91:c7:c7:1d:a3:ab:10:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 8 00:00:00 2024 GMT
Not After : Dec 13 23:59:59 2024 GMT
Subject: serialNumber=0251b05bbea1034a357b5e51a1222ed696843a52ed009207f7f7341a70af6232, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:c4:af:7f:89:b9:cb:f4:f2:92:84:f6:48:
2e:eb:d1:45:6f:c6:66:93:cd:85:c5:22:be:30:24:
4b:c3:58:3e:39:e9:d8:27:82:1c:94:25:3a:7e:b3:
07:0c:7a:65:8b:68:a8:3a:6e:1c:d6:34:18:d2:30:
24:02:30:04:7d:cc:13:97:bb:ed:d3:1e:7d:2d:1f:
26:6a:17:1c:5d:72:28:10:ef:e9:e5:c3:68:23:b4:
bc:69:df:33:a7:3f:c3:f1:f2:d4:bd:66:b5:57:2d:
cc:27:7f:f9:e2:e8:7d:2f:34:77:82:09:d3:ec:1f:
0d:de:cb:6a:04:a9:87:a9:73:be:1f:6b:e6:95:83:
65:a4:14:d0:97:aa:f4:39:f9:05:7c:2a:6f:8d:e5:
62:7f:20:1d:9c:9d:bb:49:a3:bf:1c:47:9a:61:1e:
56:c7:d6:b7:00:73:c6:d3:ab:6b:fd:86:d0:ef:be:
e3:36:59:57:98:11:4c:40:6c:19:8e:75:46:c3:56:
60:b8:79:c5:f2:33:2b:63:66:5e:17:da:e7:64:65:
d5:43:dd:54:cd:ca:6c:ef:28:4f:a8:8f:6d:dd:7c:
fe:89:d7:54:e7:82:35:db:2f:64:b8:66:26:f2:6c:
0b:05:48:bc:0e:28:b9:4b:0b:1d:41:dd:fb:49:d9:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:EA:D4:E3:EB:64:4A:23:F1:91:F0:41:D9:5D:00:32:AF:F0:8E
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793a4499-8be6-4037-82e6-ab5b795df619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.120.0/22
Signature Algorithm: sha256WithRSAEncryption
65:a4:be:03:60:8c:d2:8f:93:fc:2c:49:29:ac:fd:5f:39:a7:
0a:18:ec:11:67:64:7b:78:12:65:45:62:d2:fe:4b:db:d1:38:
8b:bf:c5:dc:8f:35:22:c2:1c:44:fe:6d:13:e3:43:ea:a8:ec:
e6:76:71:03:a8:5e:46:fe:e4:4f:dd:23:44:6a:64:30:62:47:
11:4e:c4:6f:a9:42:32:9b:b8:0b:ba:70:8c:71:e5:d0:cf:60:
76:5c:d1:25:c0:a4:5a:13:d9:e9:4d:67:68:3a:c7:32:69:2c:
c9:9a:76:6a:c2:72:c0:81:46:9d:87:5d:44:e3:aa:d5:fa:b6:
c4:2e:29:1a:5a:e7:a9:6d:1d:b6:35:fb:ee:34:50:f4:70:c4:
ce:a4:ae:dd:75:84:8a:72:32:f9:e4:79:ce:61:5d:7f:81:f4:
22:73:74:bc:70:39:12:c4:6a:d6:1c:cf:f6:86:a3:e7:b2:03:
22:66:01:39:b4:ab:1c:66:3b:0f:af:86:6a:58:52:cc:65:c4:
9f:fd:f6:09:10:98:99:b9:af:e6:6f:d3:2c:7c:85:f3:56:f0:
e7:ab:c5:50:43:e0:67:e2:e2:fd:7e:85:1b:96:1c:79:50:24:
67:6b:e6:53:ef:de:b0:8d:04:09:a9:c9:5c:f5:36:ba:eb:07:
6c:8c:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:32 2024 by rpki-client on console-fra.rpki-client.org