Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793a4499-8be6-4037-82e6-ab5b795df619.roa
File: 793a4499-8be6-4037-82e6-ab5b795df619.roa (raw, json)
Hash identifier: og3OyFWzziL0fnM7O8qQ7Tiwy356YOOqBzoRR0alKM8=
Subject key identifier: 67:F3:94:BD:B2:C7:01:E9:24:86:FA:23:19:0C:81:8A:7A:4A:7A:7C
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 78921361E8869DB762C49A5C74193CEFB5D057F4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793a4499-8be6-4037-82e6-ab5b795df619.roa
Signing time: Wed 17 Apr 2024 00:00:00 +0000
ROA not before: Wed 17 Apr 2024 00:00:00 +0000
ROA not after: Wed 22 May 2024 23:59:59 +0000
asID: 14618
IP address blocks: 185.48.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:92:13:61:e8:86:9d:b7:62:c4:9a:5c:74:19:3c:ef:b5:d0:57:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 00:00:00 2024 GMT
Not After : May 22 23:59:59 2024 GMT
Subject: serialNumber=b8fb61d99222cb5242d72ef1a38d75a37e2b7c0f5b27c7eda92d2aee28b4c189, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:3d:19:4e:af:25:ff:b3:f2:98:90:e4:f2:
6f:ab:f6:c4:8f:e2:89:bd:42:0d:e3:6d:f3:c4:f5:
03:7e:bb:98:07:98:2b:8b:de:b0:52:3a:90:27:0b:
b4:8f:6f:2b:da:ce:b1:24:0d:b1:42:2b:d3:ea:37:
7b:0d:13:63:dc:f0:3a:43:4c:aa:a1:0f:8a:8d:86:
28:e9:ea:a1:16:9b:be:e5:78:a0:7e:e2:19:2a:2f:
6c:85:7b:3d:d7:fc:12:85:cb:b8:e3:ee:ab:5b:60:
32:23:f9:8e:be:7e:d5:9e:9f:0b:a4:41:a8:21:f5:
a1:7a:90:74:f2:3a:e2:ac:7c:87:df:54:aa:98:36:
56:75:e3:85:cf:a9:68:cc:ad:51:65:45:3b:d5:bd:
3c:4b:b3:db:0c:b0:b7:04:0d:8b:55:af:cd:e4:ed:
91:b9:74:00:ef:9b:42:2a:ef:11:51:2d:e2:77:d4:
0b:e2:fd:63:17:84:32:0e:07:47:d7:9b:9c:92:ba:
d0:b8:f1:69:7a:e1:17:af:c3:3d:33:f3:b0:ea:2a:
e6:f8:2c:fa:43:f9:39:4c:3e:24:61:85:69:dd:16:
84:fd:89:f4:84:5b:1f:e8:a4:71:19:4d:2f:e8:c5:
76:c1:ec:7e:f3:ad:94:f6:aa:a5:a5:15:63:99:45:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:94:BD:B2:C7:01:E9:24:86:FA:23:19:0C:81:8A:7A:4A:7A:7C
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/793a4499-8be6-4037-82e6-ab5b795df619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:db:f9:7d:59:bc:41:2c:cf:a2:9d:ee:3b:0c:67:12:e9:d2:
47:50:6a:bb:52:be:c3:81:d5:aa:45:c9:32:e1:22:4e:fe:43:
0d:62:2f:3c:3a:f7:0f:db:fc:55:00:16:f9:71:98:d3:a1:5e:
e4:05:30:b4:01:4e:df:dd:89:f8:7a:3c:ec:a9:d2:0b:0f:76:
af:50:d1:96:5a:d6:7d:14:7a:1f:94:91:8c:45:e2:c4:ea:5d:
33:2b:28:25:9c:3a:e5:7b:e0:9a:73:a3:1a:41:0a:00:03:58:
fc:28:61:d1:05:24:6e:39:2a:d6:32:eb:4d:92:c9:74:78:82:
fa:a8:24:18:d6:e3:53:e2:2c:58:89:ef:5f:27:29:d9:ca:c5:
37:73:0c:a9:86:b0:de:c6:08:32:90:02:6d:bc:a4:f0:67:c8:
9d:9a:b2:22:90:76:de:7a:e4:79:7f:f3:ed:f5:fd:46:2c:e8:
90:2f:b7:9b:6f:3f:3f:69:0f:91:8c:a0:aa:23:d5:93:b7:37:
25:50:8c:d6:dc:8b:2a:03:f2:57:19:5f:ce:27:a9:95:e8:87:
8d:56:36:1f:c9:7a:20:68:e7:ac:fd:69:3a:dc:4d:f4:cb:87:
48:9a:66:fd:b5:c0:85:92:1e:3d:00:73:29:a4:bf:96:5c:62:
fc:23:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:00:58 2024 by rpki-client on console-ams.rpki-client.org