Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
File: 9386a656-dfeb-4ebf-847d-bd931e09dd13.roa (raw, json)
Hash identifier: WrzTLd7I1ap2CQi3UTYyvyHc15jncbuj6P1X5tT60Qg=
Subject key identifier: 48:89:09:D1:24:EF:84:1B:BD:42:76:51:ED:58:4C:A3:C6:E9:B1:CD
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2C0BCFD4ADCB50A46CF41DE489223F30D0689D48
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 176.32.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0b:cf:d4:ad:cb:50:a4:6c:f4:1d:e4:89:22:3f:30:d0:68:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=b6ab02bf8d32b67352c1257c41d5268812b6aa8847371b4645f9f66a6e953ea9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:2a:87:a6:3a:c1:57:13:1a:1e:12:93:90:
a2:c9:f4:1f:f6:38:09:46:34:d8:a0:c2:d0:c0:da:
21:af:e6:1c:dd:34:c2:13:89:2f:6a:b5:0a:8d:84:
31:d5:6a:70:d9:12:78:c9:0b:15:cf:b1:af:4e:15:
4d:44:cf:83:0b:3a:2f:d0:bc:b5:5c:44:f9:60:78:
f8:b3:6f:4e:60:10:fd:16:1d:95:63:ad:a8:dc:19:
fa:92:6f:a6:d4:d9:ff:3f:91:57:16:96:3b:06:c6:
9f:89:97:03:d6:ce:56:80:59:aa:16:b6:42:3a:d3:
17:ce:3d:33:e7:53:99:6c:01:25:ae:1c:a6:2c:14:
2c:b0:e9:cc:f7:9f:00:5f:db:a1:7a:8c:bf:90:41:
d4:46:db:2c:7d:f5:1e:fe:e3:04:e9:bb:1a:e9:a3:
2e:89:23:87:f9:42:3f:72:05:56:d2:5e:f1:0b:19:
ad:f5:dd:3b:ae:42:1c:7f:d0:72:1d:f5:31:4a:b2:
d5:93:4b:7e:30:14:2c:b8:b6:1a:33:d4:6b:39:b6:
04:b5:3d:8a:c6:35:5b:31:5d:61:84:04:c1:55:cb:
8a:68:3c:59:50:0b:dd:bf:d5:f7:ec:b9:82:2a:6d:
75:bf:2b:b9:5c:1a:d2:94:ff:70:cd:da:f4:01:ea:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:09:D1:24:EF:84:1B:BD:42:76:51:ED:58:4C:A3:C6:E9:B1:CD
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9386a656-dfeb-4ebf-847d-bd931e09dd13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.96.0/21
Signature Algorithm: sha256WithRSAEncryption
16:4e:ab:ae:5e:a5:05:e3:17:75:1d:27:fe:7e:86:20:e3:02:
3e:bc:66:45:fc:3e:a8:9f:5a:af:a7:d3:c5:65:ff:bd:30:47:
6d:8c:dd:81:2f:7c:96:cc:1d:1c:41:ae:ac:0b:01:f7:a1:3b:
75:1c:ad:06:0b:bb:47:8f:de:98:ff:21:c8:5a:c6:cb:16:18:
fa:76:75:0d:14:3a:db:6f:c4:d9:11:ed:69:75:44:37:6b:76:
65:15:21:6a:32:3d:13:a7:2a:db:9e:05:09:df:75:d3:c2:9e:
c4:4b:3e:2e:3c:94:31:e0:ed:d0:1e:1e:83:fa:8e:6f:b8:eb:
3c:df:c1:a6:37:a1:67:2b:c8:94:fa:9d:48:16:9c:85:53:e4:
da:1a:96:6b:42:f5:35:df:97:7c:8c:17:49:42:78:58:ac:e0:
1c:eb:3c:e7:f4:f0:72:71:fc:a4:c9:ae:96:02:7d:bf:44:4d:
9d:8e:d5:ca:fe:22:dd:2a:75:8c:61:17:d4:33:5d:de:d7:7d:
e5:07:9b:1f:ee:2a:14:ed:9b:11:04:5e:44:95:76:a8:22:55:
0e:a9:5b:76:60:b3:77:e7:26:b8:b2:89:9e:a9:cd:bc:7c:85:
a2:bc:4c:77:02:67:00:6f:dc:d6:94:1b:29:39:47:2d:47:a1:
b2:35:36:51
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIULAvP1K3LUKRs9B3kiSI/MNBonUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDExMTkwMDAwMDBaFw0yNDEyMjQyMzU5NTlaMHoxSTBHBgNV
BAUTQGI2YWIwMmJmOGQzMmI2NzM1MmMxMjU3YzQxZDUyNjg4MTJiNmFhODg0NzM3
MWI0NjQ1ZjlmNjZhNmU5NTNlYTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOdNKoemOsFXExoeEpOQosn0H/Y4CUY02KDC0MDaIa/mHN00whOJL2q1Co2E
MdVqcNkSeMkLFc+xr04VTUTPgws6L9C8tVxE+WB4+LNvTmAQ/RYdlWOtqNwZ+pJv
ptTZ/z+RVxaWOwbGn4mXA9bOVoBZqha2QjrTF849M+dTmWwBJa4cpiwULLDpzPef
AF/boXqMv5BB1EbbLH31Hv7jBOm7GumjLokjh/lCP3IFVtJe8QsZrfXdO65CHH/Q
ch31MUqy1ZNLfjAULLi2GjPUazm2BLU9isY1WzFdYYQEwVXLimg8WVAL3b/V9+y5
giptdb8ruVwa0pT/cM3a9AHqod8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRIiQnR
JO+EG71CdlHtWEyjxumxzTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
OTM4NmE2NTYtZGZlYi00ZWJmLTg0N2QtYmQ5MzFlMDlkZDEzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7AgYDAN
BgkqhkiG9w0BAQsFAAOCAQEAFk6rrl6lBeMXdR0n/n6GIOMCPrxmRfw+qJ9ar6fT
xWX/vTBHbYzdgS98lswdHEGurAsB96E7dRytBgu7R4/emP8hyFrGyxYY+nZ1DRQ6
22/E2RHtaXVEN2t2ZRUhajI9E6cq254FCd9108KexEs+LjyUMeDt0B4eg/qOb7jr
PN/BpjehZyvIlPqdSBachVPk2hqWa0L1Nd+XfIwXSUJ4WKzgHOs85/TwcnH8pMmu
lgJ9v0RNnY7Vyv4i3Sp1jGEX1DNd3td95QebH+4qFO2bEQReRJV2qCJVDqlbdmCz
d+cmuLKJnqnNvHyForxMdwJnAG/c1pQbKTlHLUehsjU2UQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:32 2024 by rpki-client on console-fra.rpki-client.org