Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82be3c31-c1f1-4fb1-9f26-650ddb9bbe09.roa
File: 82be3c31-c1f1-4fb1-9f26-650ddb9bbe09.roa (raw, json)
Hash identifier: W2nfQ58ffsHfs7QFsX92fVL0o94mAoPKxCI1hVWCtAc=
Subject key identifier: F8:96:E4:E4:96:15:60:27:3F:60:AB:8C:40:E1:9F:21:C0:24:69:15
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 0E30BACAC477FD9B7DFBC5D566ED484A377F6D8A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82be3c31-c1f1-4fb1-9f26-650ddb9bbe09.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 176.32.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:30:ba:ca:c4:77:fd:9b:7d:fb:c5:d5:66:ed:48:4a:37:7f:6d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=64275ec3e9e1735cdc650afeb12bfec1ceb810d1b5bb1ba54b618a232eba0376, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:cf:e4:b7:32:98:88:e4:d9:99:63:8e:48:
99:6e:c8:3c:c7:6e:b7:a0:10:e7:a9:b6:d7:44:d1:
4e:c4:cc:63:20:d6:35:3a:5d:40:70:f3:7b:67:5d:
cb:b0:d8:00:3b:d0:5e:10:65:2a:26:64:14:92:90:
e8:de:05:68:c2:9d:e7:89:92:04:23:18:1f:8a:da:
a8:78:68:63:8b:71:a3:f2:22:52:43:32:df:c9:9e:
92:e7:7a:a7:3c:ae:bf:ba:88:fc:9f:b6:59:d6:2f:
65:6d:58:9f:e4:55:e8:e3:32:c6:1e:6a:3c:7d:90:
02:6a:6c:3d:a9:7d:8a:c7:4f:d4:c2:5c:7c:38:7f:
17:01:5c:38:8d:ea:6e:b1:a7:fa:c9:17:33:f3:d7:
23:3a:64:8c:59:69:72:8c:0d:7d:7b:18:36:e5:88:
f6:e6:a1:f4:83:f5:0a:af:d4:07:e0:b1:a7:e1:9b:
5d:c4:cf:50:4b:5e:60:8d:00:de:ee:56:3c:f7:37:
33:88:00:b4:16:3d:84:cf:71:be:9f:56:82:0d:0b:
c9:11:39:4e:f6:7d:f4:9f:09:50:b9:1b:ea:a3:55:
53:1f:0b:3e:ea:b4:3d:48:ae:e5:d5:8a:34:52:e0:
2a:8e:be:f9:38:6c:9e:c3:6e:86:a0:2b:cb:a7:d2:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:E4:E4:96:15:60:27:3F:60:AB:8C:40:E1:9F:21:C0:24:69:15
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/82be3c31-c1f1-4fb1-9f26-650ddb9bbe09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:4b:03:d5:cf:e3:f7:f1:6f:2a:be:f2:49:f0:7e:83:4c:7c:
8a:f8:ee:3d:4d:25:b5:3b:e0:ae:60:8c:9d:e0:aa:22:6a:c4:
fc:0f:69:7d:c0:32:e5:5d:07:0a:b3:12:32:0d:05:c4:a5:b3:
cb:cc:82:5c:50:11:af:0f:8f:36:ed:dd:9f:bb:2e:b2:ad:00:
4b:e0:70:a1:14:31:f9:73:4d:74:ba:4d:46:2c:9b:fa:9d:37:
e3:53:59:d7:16:e8:99:9e:31:a5:43:55:e7:79:a2:f6:9e:25:
cf:9a:44:5c:fc:50:c2:1a:61:9a:08:10:ba:36:75:3b:3c:f2:
4d:24:a6:f8:df:db:5d:c8:db:ea:99:71:a9:8b:ef:d4:0a:c0:
58:eb:6d:b5:ab:fb:b1:7e:2c:81:e1:7e:fa:a9:b4:9e:4c:d8:
58:e4:ee:1b:68:85:3b:ae:0d:72:44:b3:4e:5c:b6:93:7b:08:
9b:d5:73:55:dc:6c:e6:0c:5a:8e:c4:05:d1:f2:08:f9:ac:21:
d2:12:6b:98:de:cd:64:a6:c1:95:b6:49:39:dd:c2:1d:d1:f4:
92:03:f9:40:4b:d5:56:1d:36:c5:64:d2:3e:d0:b3:1a:21:62:
eb:76:2d:82:f4:35:4e:1c:37:ed:ef:b7:9d:a3:e1:6b:bc:ba:
c3:16:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:40 2024 by rpki-client on console-fra.rpki-client.org