Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c85362-33c5-4287-b7bc-bd416fc96498.roa
File: a0c85362-33c5-4287-b7bc-bd416fc96498.roa (raw, json)
Hash identifier: MJhXY2lYGhpBZ4hXBGT7jc18/e2xF+9hA0vLHym23Rk=
Subject key identifier: 23:40:51:09:77:8A:48:AB:2F:E6:F2:35:64:2A:C9:BF:51:82:94:11
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 40B4916AE695DA266F299B5B2F7D7572B0BB2ABE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c85362-33c5-4287-b7bc-bd416fc96498.roa
Signing time: Wed 17 Apr 2024 00:00:00 +0000
ROA not before: Wed 17 Apr 2024 00:00:00 +0000
ROA not after: Wed 22 May 2024 23:59:59 +0000
asID: 8987
IP address blocks: 46.137.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b4:91:6a:e6:95:da:26:6f:29:9b:5b:2f:7d:75:72:b0:bb:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Apr 17 00:00:00 2024 GMT
Not After : May 22 23:59:59 2024 GMT
Subject: serialNumber=1df778103a20127c839fa3dd067af3dce0194dc7b8e1cce71f048ea41f404b59, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:6c:68:37:dc:b1:99:aa:a2:78:ea:b6:3e:
32:5f:a8:51:ca:56:ce:0f:7c:62:e3:ad:b1:ca:74:
3d:84:42:1e:bc:5d:0b:1d:03:58:c8:5c:ae:6b:5b:
c9:01:25:4b:66:eb:f0:50:84:d4:80:4c:6c:07:02:
49:45:79:b5:82:75:3d:8f:3f:8e:25:3f:a9:f8:8e:
58:96:e8:8b:89:2e:50:60:f5:64:2e:3a:c3:06:85:
18:ea:ff:b4:7b:4e:f6:49:7b:46:e5:8e:a6:10:9c:
4c:c7:1a:01:56:09:bc:27:10:b9:9e:75:1e:14:de:
a2:bf:c9:4c:1a:b3:c1:af:77:7c:36:54:c2:9a:19:
81:97:2f:c5:3f:45:97:90:6e:b2:7f:b6:fa:08:1b:
77:b7:d1:35:63:dc:0f:88:cd:2e:15:f0:44:19:4b:
e7:6a:20:0a:f6:84:28:b5:59:12:3f:21:69:2b:b1:
fe:24:d0:9f:5a:d3:d1:08:7b:ac:2e:e7:c4:29:5f:
9b:cf:27:64:06:f9:a4:c9:7e:e9:5d:64:e2:80:fa:
6e:8e:1c:40:4e:53:2f:b5:aa:26:76:61:e6:2c:45:
42:c6:64:fe:13:d2:a2:64:c5:b7:78:f8:03:c5:9f:
6e:b6:7c:9e:4e:a2:08:55:2d:a1:b0:bd:72:ac:db:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:40:51:09:77:8A:48:AB:2F:E6:F2:35:64:2A:C9:BF:51:82:94:11
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a0c85362-33c5-4287-b7bc-bd416fc96498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:77:d1:f1:b6:4c:6f:fb:2e:9e:43:68:3e:0e:1d:51:51:18:
64:f2:ba:ae:55:11:1a:0b:9f:e8:61:96:13:27:24:b1:93:bb:
20:26:91:c7:bc:a5:0f:29:ad:c5:ec:63:31:8e:1e:31:6a:49:
1e:bf:65:fb:8b:65:ac:35:f4:b8:12:1c:94:8e:13:5d:45:30:
4e:86:e4:a7:63:77:c7:f7:bd:32:cd:27:44:94:ed:b9:c8:63:
d8:1c:c9:1c:c3:ae:8a:7f:9d:37:55:a7:51:a5:b2:be:b8:34:
08:b8:f8:69:f6:c4:ae:a9:03:ad:59:1a:fa:3b:1e:11:38:8e:
46:9e:97:b1:a3:08:d5:af:6e:7a:e7:3a:71:ab:8b:91:58:5c:
03:2a:d4:d6:10:37:e8:7f:bf:10:2e:54:ac:f0:0f:80:8d:17:
90:36:d2:c4:9a:48:3b:8e:6a:d5:85:a1:95:52:0b:0b:1a:e9:
74:30:3b:b5:5c:55:b9:b2:dc:0e:4f:a8:ff:40:34:37:c4:1f:
10:26:4e:8b:00:80:e9:dc:c6:eb:66:a4:14:48:a5:33:bb:58:
cb:20:0c:3d:c7:37:3b:46:02:cd:d2:55:91:11:d0:02:44:93:
b0:f2:d9:2c:35:70:4a:08:2d:c0:b0:cc:a9:ee:4a:65:c6:c1:
fb:f7:fa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:17:14 2024 by rpki-client on console-fra.rpki-client.org