Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
File: ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa (raw, json)
Hash identifier: ttKxm5bGkK4GCFZr6uIfJcCYVhcpClp43e/QgD3Zumo=
Subject key identifier: D3:74:2B:AE:BA:69:07:E5:AE:25:C8:95:DE:43:D6:54:4B:F4:DA:40
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 2959E26835A1123E76D4704BB2A448CC06F85FE8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
Signing time: Fri 08 Nov 2024 00:00:00 +0000
ROA not before: Fri 08 Nov 2024 00:00:00 +0000
ROA not after: Fri 13 Dec 2024 23:59:59 +0000
asID: 8987
IP address blocks: 87.238.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:59:e2:68:35:a1:12:3e:76:d4:70:4b:b2:a4:48:cc:06:f8:5f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 8 00:00:00 2024 GMT
Not After : Dec 13 23:59:59 2024 GMT
Subject: serialNumber=252986869d14e31a5ff6dd1638c553c1fa345ea89be2f83c1f78e4b6e990b10f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:66:18:bf:73:7d:0f:92:56:db:cb:58:e6:
86:95:b2:61:cb:0c:10:e5:15:71:24:13:9c:a1:b2:
d0:90:59:00:ec:db:75:ba:8b:0a:24:fe:c3:07:53:
bc:9a:4d:4f:1b:50:96:d3:01:69:77:b7:2c:fd:24:
83:dd:49:cb:61:9f:06:64:be:f1:d5:c0:fc:f3:a2:
86:bd:5b:33:1d:e5:30:84:25:8e:d1:34:35:7d:e1:
6d:07:f7:3b:c8:62:17:8a:b6:2f:29:cc:33:a8:ff:
d8:01:9d:36:56:3e:89:51:42:73:44:33:e6:5a:9f:
d8:52:7b:0e:f4:b7:8a:67:37:6a:5f:db:0e:71:dd:
23:fc:9c:8e:6d:5c:90:4c:6b:62:67:49:31:4e:96:
f7:c9:d9:c6:10:86:a2:67:c8:ac:60:cb:ec:60:d8:
73:1a:00:00:84:8d:1b:d6:56:cf:5c:4d:f6:a7:63:
c9:48:3c:68:67:bf:87:17:6e:f8:60:65:5d:82:3e:
cd:b5:a0:a1:d1:a0:c2:8e:26:4e:69:d9:ca:10:18:
79:81:d0:a5:a9:00:0a:fe:36:18:d1:a3:e0:8f:16:
1d:0f:06:e9:9c:75:00:4d:c1:b6:7f:5e:29:ce:e4:
4d:84:c5:c8:a7:58:01:1e:8c:2c:94:ee:76:a8:c5:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:2B:AE:BA:69:07:E5:AE:25:C8:95:DE:43:D6:54:4B:F4:DA:40
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ad4fc667-5e8e-4f39-9814-5ea23369e78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.80.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:3e:75:3b:8d:db:83:31:2f:7f:df:8a:dc:97:ea:9b:6c:fc:
53:d0:51:b7:12:b2:61:9a:1a:30:77:33:75:74:f7:9e:b3:71:
0a:df:d3:84:65:81:8f:68:19:ad:40:90:22:ef:5c:1c:f8:e5:
2c:f1:5f:ac:dd:39:7d:04:40:cf:f7:19:32:60:77:b8:99:94:
1b:71:95:a8:d2:62:32:e6:6d:b1:fe:3c:fc:2b:7c:60:1d:ab:
5a:f9:97:80:82:d6:2d:c5:67:81:72:95:28:fc:5d:f8:15:19:
03:ab:e6:71:76:7b:d0:15:83:a7:d4:74:a2:75:48:f2:bb:4d:
05:45:b0:3b:ca:87:ba:ca:d8:72:bd:12:39:a3:91:69:99:34:
df:91:19:df:46:ac:19:90:2b:de:61:58:81:99:f8:d4:b5:eb:
e8:0a:56:98:d5:c5:f5:8b:a7:73:fc:a9:6f:da:83:b9:01:e9:
49:20:3a:de:d5:5e:db:54:d3:c4:31:70:45:69:c4:c5:67:86:
62:44:85:c7:2c:c7:15:10:a1:f8:f6:7f:b3:17:8b:cf:3f:b0:
d6:f5:e2:e8:a9:d5:57:32:23:0b:2f:a1:16:ea:fd:cf:7f:82:
fe:2d:0c:81:fc:cb:ce:a0:df:c9:c4:6d:20:2e:78:33:5f:dd:
91:27:ba:95
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKVniaDWhEj521HBLsqRIzAb4X+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDExMDgwMDAwMDBaFw0yNDEyMTMyMzU5NTlaMHoxSTBHBgNV
BAUTQDI1Mjk4Njg2OWQxNGUzMWE1ZmY2ZGQxNjM4YzU1M2MxZmEzNDVlYTg5YmUy
ZjgzYzFmNzhlNGI2ZTk5MGIxMGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL8LZhi/c30Pklbby1jmhpWyYcsMEOUVcSQTnKGy0JBZAOzbdbqLCiT+wwdT
vJpNTxtQltMBaXe3LP0kg91Jy2GfBmS+8dXA/POihr1bMx3lMIQljtE0NX3hbQf3
O8hiF4q2LynMM6j/2AGdNlY+iVFCc0Qz5lqf2FJ7DvS3imc3al/bDnHdI/ycjm1c
kExrYmdJMU6W98nZxhCGomfIrGDL7GDYcxoAAISNG9ZWz1xN9qdjyUg8aGe/hxdu
+GBlXYI+zbWgodGgwo4mTmnZyhAYeYHQpakACv42GNGj4I8WHQ8G6Zx1AE3Btn9e
Kc7kTYTFyKdYAR6MLJTudqjFOjUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTTdCuu
umkH5a4lyJXeQ9ZUS/TaQDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YWQ0ZmM2NjctNWU4ZS00ZjM5LTk4MTQtNWVhMjMzNjllNzhiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1fuUDAN
BgkqhkiG9w0BAQsFAAOCAQEAbT51O43bgzEvf9+K3Jfqm2z8U9BRtxKyYZoaMHcz
dXT3nrNxCt/ThGWBj2gZrUCQIu9cHPjlLPFfrN05fQRAz/cZMmB3uJmUG3GVqNJi
MuZtsf48/Ct8YB2rWvmXgILWLcVngXKVKPxd+BUZA6vmcXZ70BWDp9R0onVI8rtN
BUWwO8qHusrYcr0SOaORaZk035EZ30asGZAr3mFYgZn41LXr6ApWmNXF9Yunc/yp
b9qDuQHpSSA63tVe21TTxDFwRWnExWeGYkSFxyzHFRCh+PZ/sxeLzz+w1vXi6KnV
VzIjCy+hFur9z3+C/i0MgfzLzqDfycRtIC54M1/dkSe6lQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:33 2024 by rpki-client on console-ams.rpki-client.org