Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86f9f321-0423-4a3c-8481-9118cd38fde4.roa
File: 86f9f321-0423-4a3c-8481-9118cd38fde4.roa (raw, json)
Hash identifier: oRUDIk5uuz2vCwxz4dLOisawNuIbk4icgpMgpKJpcG8=
Subject key identifier: 6C:FB:CB:BC:AB:71:25:BB:1E:AF:1C:58:2A:1A:CF:25:39:59:68:25
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 4622103B3D67E5309270D98574E5A50E15F721FB
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86f9f321-0423-4a3c-8481-9118cd38fde4.roa
Signing time: Fri 08 Nov 2024 00:00:00 +0000
ROA not before: Fri 08 Nov 2024 00:00:00 +0000
ROA not after: Fri 13 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 185.48.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:22:10:3b:3d:67:e5:30:92:70:d9:85:74:e5:a5:0e:15:f7:21:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 8 00:00:00 2024 GMT
Not After : Dec 13 23:59:59 2024 GMT
Subject: serialNumber=0364d014968a5e7a665798a2ed6043b0007d0b24a82df1707bf0935487652c99, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:bf:2c:2c:3c:fe:33:78:1f:02:20:c0:ed:
99:f8:4f:2a:a4:eb:a2:df:09:a9:cc:9f:b3:51:2c:
47:5b:c1:ab:05:48:00:77:96:98:c3:3f:38:7b:79:
b3:5b:b5:7c:88:67:11:15:2e:88:b6:89:fa:d8:c3:
33:eb:05:e6:60:a5:4f:c6:34:81:be:40:0b:c2:31:
56:b0:da:c5:4f:d9:22:30:4d:f3:79:c6:76:5e:1f:
f5:95:02:37:32:2a:bb:2b:e6:a9:b9:be:ce:99:a1:
90:30:72:01:5f:63:f8:be:f2:45:8a:34:a8:5f:39:
eb:ea:7a:26:39:cf:0a:de:65:90:6d:8c:d4:66:8f:
d2:a2:2f:cb:b5:38:f4:f6:45:87:c0:2d:aa:c8:a3:
65:fe:23:71:10:40:a4:4e:d2:f4:52:f3:d8:f7:23:
9b:73:d9:d5:e3:fa:b8:10:e9:b4:cb:11:0d:08:86:
57:7f:ab:7c:45:fd:dc:11:af:8d:18:33:87:42:c9:
56:bc:20:3e:28:f6:30:0f:29:de:2f:66:ab:5a:6e:
1c:56:c3:26:a9:51:66:33:64:3b:de:50:77:55:88:
8b:2d:42:ce:0d:fd:1b:28:1c:b8:8a:6e:63:8b:11:
be:23:c4:85:b5:c5:a3:04:0f:fa:a6:20:1b:02:4f:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:CB:BC:AB:71:25:BB:1E:AF:1C:58:2A:1A:CF:25:39:59:68:25
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86f9f321-0423-4a3c-8481-9118cd38fde4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.120.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ef:55:4f:1d:55:dd:8c:85:a8:b9:2e:47:d1:59:a8:7e:1a:
2a:d0:89:53:3b:e8:0f:5f:43:fe:25:a9:33:f8:4c:bb:64:2a:
6e:6e:a1:3b:0f:23:d4:4d:27:15:f7:3d:3c:be:4b:a7:40:f4:
b7:4c:2b:89:a9:37:63:2e:8d:b8:2f:70:3e:7b:b7:59:3b:fc:
9d:e1:d1:45:e6:46:de:18:68:12:06:84:0e:a0:70:d2:af:af:
be:12:63:58:8c:2b:db:4f:6d:62:6b:1d:c4:fe:cf:4a:a2:52:
01:a5:e8:5b:06:ae:03:5f:62:1a:db:4b:e4:c0:8f:c8:d1:8d:
b2:16:96:18:2d:a9:fa:54:20:77:a1:31:a6:2b:d6:dc:05:42:
a7:c1:b5:e2:b0:f3:21:35:aa:42:0a:97:7a:b6:95:96:25:9f:
ed:79:f6:5c:e4:a2:61:b1:be:c1:d3:47:d8:b1:d0:12:cc:76:
82:41:91:b8:54:fb:4c:0d:ce:a0:2d:f7:0b:aa:1e:5e:22:ed:
15:17:c6:d9:64:d9:6d:fc:87:a1:af:23:ee:74:da:20:08:81:
5f:ad:8a:52:c6:de:09:fa:de:83:7e:cb:62:d1:cf:f2:cb:ce:
91:e8:40:da:6d:7a:08:55:0f:e1:52:42:16:d1:bb:e4:29:a6:
9b:6d:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:32 2024 by rpki-client on console-fra.rpki-client.org