Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
File: 9386a656-dfeb-4ebf-847d-bd931e09dd13.roa (raw, json)
Hash identifier: bmDcd+CZxAS7clco+GbZb404fkEWT0s1z42tlWgr8eg=
Subject key identifier: BB:FE:E4:20:29:EC:AC:AB:CE:18:DB:C3:B3:DD:01:BA:B0:8A:8E:BF
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 72B3FF214C16D4F5D7D1A65F2781ED1AAF05FC77
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
Signing time: Tue 02 Apr 2024 00:00:00 +0000
ROA not before: Tue 02 Apr 2024 00:00:00 +0000
ROA not after: Tue 07 May 2024 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b3:ff:21:4c:16:d4:f5:d7:d1:a6:5f:27:81:ed:1a:af:05:fc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 2 00:00:00 2024 GMT
Not After : May 7 23:59:59 2024 GMT
Subject: serialNumber=1b7ad26a410f4da7ded6d2ccd3b385505bc037454737beaec9f1685058d2811e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:2e:72:d8:57:00:68:4b:66:4f:f6:83:ee:
be:43:70:08:f1:3d:82:db:49:f3:6d:4e:48:00:e5:
14:2c:da:1f:fd:f0:64:e6:97:94:99:7a:be:77:5e:
9f:2d:47:c6:98:a8:91:fd:45:a2:55:ea:62:6c:e7:
cf:36:3b:51:8e:e3:69:8e:8b:9e:e4:ab:30:e7:58:
5f:c8:a4:d7:20:74:f7:35:bc:b9:4c:b3:ca:e4:73:
2b:14:36:b8:2f:28:05:f3:9e:51:cc:26:db:41:52:
8a:62:8e:d1:bc:89:22:9b:39:fd:d7:44:33:1d:6f:
c6:8b:a6:a5:25:f2:02:6c:8b:4e:7b:57:5d:97:ee:
62:0b:e4:65:82:7b:8e:62:d9:81:0c:44:c6:c6:7f:
88:a5:56:40:5c:5c:dd:c4:7c:b3:a2:07:3e:c4:5b:
9c:e5:fd:c6:75:ac:6a:7b:02:96:11:c7:58:4e:ef:
7c:84:6a:3b:fb:f2:bb:81:af:4f:c2:74:a0:cc:d7:
71:d5:c1:fa:87:20:a5:51:99:17:80:56:72:c6:ea:
8d:c1:1b:0b:58:b6:60:e7:92:94:b8:b3:b2:c2:da:
53:21:84:e9:2c:12:74:5b:7c:3d:12:0b:23:b0:13:
4a:74:03:3b:40:2e:64:fe:9d:b5:a6:64:24:00:0d:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FE:E4:20:29:EC:AC:AB:CE:18:DB:C3:B3:DD:01:BA:B0:8A:8E:BF
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.96.0/21
Signature Algorithm: sha256WithRSAEncryption
15:3c:b4:1a:21:87:c6:0e:a7:9b:20:fd:09:0a:10:68:ef:4a:
f1:26:a7:54:e9:b6:fc:4d:6b:1c:99:bb:6c:93:e6:3d:24:90:
64:5e:99:d6:01:f4:6c:bd:c3:da:d9:a1:e5:2d:5b:2c:e8:f3:
40:a1:30:00:ab:8a:ff:aa:6a:17:0d:6b:fe:83:fa:1f:7b:03:
a0:46:bf:5e:b0:7a:41:08:96:c5:69:46:9a:15:7d:b8:4e:17:
6e:46:60:94:79:5b:29:7c:57:2b:20:66:af:19:8e:91:33:0a:
da:66:27:5f:4f:f7:bf:2b:bd:13:c8:97:4d:8c:11:3a:96:ec:
fe:01:23:b6:fd:45:67:b2:51:ba:ad:b7:0f:a5:c6:3d:07:ec:
59:74:0f:16:58:fe:f1:d2:2d:82:77:8f:b9:df:dd:b9:bd:88:
72:1f:03:c1:33:2c:9b:29:83:70:a6:ac:e5:fb:65:9f:97:cc:
b6:29:01:45:fc:17:ae:a4:c5:33:96:9a:7e:f9:27:f4:77:47:
8f:07:a9:24:71:34:ab:c0:3d:40:ff:e0:04:42:91:5a:79:a0:
ad:71:e1:8a:26:cd:1c:2e:70:24:f8:dc:13:f1:67:2e:db:3e:
15:38:84:c6:83:ec:30:9b:7f:e7:f9:cd:1e:9e:6a:fa:a5:43:
d3:17:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:32 2024 by rpki-client on console-fra.rpki-client.org